Question Windows 11 not meeting requirement TPM2 , secure boot?

[plopke]

Not sure if this should be posted under the motherboard section.

I was running the system PC health check if my pc would be able to run windows 11 , which it said no , does not specify why i assume because TPM 2.0 and secure boot requirements.

I do not have any TPM module on motherboard but i did enable fTPM under the AMD Bios option. This was not enough to make my PC ready for windows 11 , but it still booted.

So i disabled CSM , which make secure boot visible then under secure boot options i enabled it. But after rebooting no drives are visible to boot from expect a USB flash drive. is there anything i need to setup to have the drives appear?
There some options under secure boot BIOS menu but lo clue what to do and manual does not specify.



System spec :
Ryzen 1700
B350 Gaming 3 Gigabyte
16GB ram 2400
San disk ultra II , sata boot drive
Crucial Mx500 , sata
Kingston A2000, nmve


PS : also for anyone looking true manual , it is wrong many times where the default does not match the default in the bios.

PSS : uploaded some bios pictures , first 2 pictures is secure boot on and the secure boot option page , 3th picture is with CSM on then it shows all drives.

 

[lenjack]

"You can't just enable Secure Boot and expect an existing installation that was not done with Secure Boot to boot."

I did, with no issues on Gigabyte mobo.

 

[mikeymikec]

"You can't just enable Secure Boot and expect an existing installation that was not done with Secure Boot to boot."

I did, with no issues on Gigabyte mobo.

Whoever you're responding to, I wonder if they confused Secure Boot with UEFI. Switching from UEFI to UEFI Secure Boot is trivial (one can flip the setting back and forth and Windows will cope with that just fine, normally), switching from BIOS to UEFI boot is less trivial.

 

[Insert_Nickname]

Whoever you're responding to, I wonder if they confused Secure Boot with UEFI. Switching from UEFI to UEFI Secure Boot is trivial (one can flip the setting back and forth and Windows will cope with that just fine, normally), switching from BIOS to UEFI boot is less trivial.

It turned out to be a lot easier then I thought. In my case (refurbishing older Dell laptop with 7) it was as simple as running the provided MBR-to-GPT tool after upgrading to Windows 10. Then rebooting, and flipping the BIOS from BIOS to UEFI boot.

Previous Windows, not so much.

 

[Sarahjlowson]

You can't enable Secure Boot and expect an existing installation that was not done with Secure Boot .

 

[mikeymikec]

You can't enable Secure Boot and expect an existing installation that was not done with Secure Boot .

Aside from the fact that I've done it many times, here's MS saying you can:

Disabling Secure Boot

Disabling Secure Boot

docs.microsoft.com

And here's MS telling you how to confirm that secure boot is enabled:

Company Portal device setting requirements for Windows

Learn more about Intune Company Portal device setting requirements for Windows OS.

docs.microsoft.com

 

[Harry_Wild]

On the formal release of Windows 11 upgrade, you can do it but it does a check of your system in the updating Windows 11 features give you a big warning with legal terms and have to accept it and will let you upgrade after you done all the workaround to overcome the install mechanisms! I guess they figure that you have spend so much time trying to defeat the system, you deserve to get it installed! LOL!

 

[Harry_Wild]

Maybe many already know this but for me it is time to be cautious of buying motherboard for Windows 11 upgrade. Only specific O.E.M Intel chipsets have software TPM like the Z590 and they tend to be the higher price motherboards. The physical TPM modules are price at 7-8 times what they original sold for. Almost none of the motherboards have them included. I am holding off DIY and spend my $$$$ on pre-built desktop that already has Windows 11 Pro pre-installed. Can you imagine spending all the money to build your upgraded hardware to find out it does not meet Windows 12 requirements?

It is worth it for my to continue on my usual PC upgrade path, buy a new Lenovo ThinkStation desktop tower.

 

[OlyAR15]

Maybe many already know this but for me it is time to be cautious of buying motherboard for Windows 11 upgrade. Only specific O.E.M Intel chipsets have software TPM like the Z590 and they tend to be the higher price motherboards.

Not sure where you heard this, but it's not true.

Edit: List of MB that support firmware tpm: https://www.digitaltrends.com/computing/motherboards-that-support-tpm-windows-11/

 

[Harry_Wild]

Not sure where you heard this, but it's not true.

Edit: List of MB that support firmware tpm: https://www.digitaltrends.com/computing/motherboards-that-support-tpm-windows-11/

That the article I read first but puts a big disclaimer that it for TPM 2.0 but does not say it is Windows 11 compatible!

I called customer support at Asus and they say it may work in the Windows 11 upgrade.

 

[Harry_Wild]

Probably better just and wait till Windows 11 been activated for 6 months or just buy a 2022 released motherboard.

 

[OlyAR15]

That the article I read first but puts a big disclaimer that it for TPM 2.0 but does not say it is Windows 11 compatible!

Read the article again. TPM 2 is just ONE of the requirements of W11. All those motherboards support firmware TPM. You still need a compatible CPU. Really, is this so hard to understand?

 

[Harry_Wild]

Read the article again. TPM 2 is just ONE of the requirements of W11. All those motherboards support firmware TPM. You still need a compatible CPU. Really, is this so hard to understand?

No! LOL!

 

[CP5670]

I have been looking around for possible tools i might need to help out people in the future without reinstalling.

For people who still have drives setup as MBR and not GPT which is needed for windows 11(UEFI) , microsoft did develop a tool for converting without reinstalling.

Comes with a nice video

MBR2GPT

Use MBR2GPT.EXE to convert a disk from the Master Boot Record (MBR) to the GUID Partition Table (GPT) partition style without modifying or deleting data on the disk.

docs.microsoft.com

The only thing i am not sure of , he boots windows in PE mode , no clue what that is yet.

I did this myself last year, but recall that there was some problem with this tool. I ended up using Macrorit Partition Expert and the built-in diskpart tool, and connecting the drive to another PC to run them. A PE flash drive might work too.

I have had basically the same Windows install for at least 15 years now. It's full of program settings, registry entries and saved games that would be a pain to migrate.

 

[Harry_Wild]

my board from 2011 has a TPM header and TPM options on the bios, I wonder if could find a TPM 1.2 module and make it works, other than that.... yeah this requirement is not good for my PCs,
guess I'll keep win 10 for as long as it's supported and go with linux for the older PCs once it's needed!?

I check on price of TPM 2.0 just after the Microsoft announcement and they ere $5-$10! Now, they are close to brand new motherboard prices!

 

[Furious_Styles]

I check on price of TPM 2.0 just after the Microsoft announcement and they ere $5-$10! Now, they are close to brand new motherboard prices!

Please don't reward scalpers for an OS upgrade with small performance benefits.

 

[Geegeeoh]

What's the point of buying a MoBo's TPM module for Win 11?
Doesn't all supported CPU have integrated TPM?
Older unsupported CPU (missing MBEC instructions) have TPM too.

 

[UsandThem]

What's the point of buying a MoBo's TPM module for Win 11?
Doesn't all supported CPU have integrated TPM?
Older unsupported CPU (missing MBEC instructions) have TPM too.

None, really.

it was bumped from the dead in post #81, and it appears the user doesn't seem to accept that fact as pointed out by several users afterwards.

 

[KentState]

And for anyone curious, I have upgrade to Win 11 on an Asus Z490, X570 and sTRX4 motherboard. I had to enable TPM on all of them and flip secure boot on at least two and the Z490 required a BIOS update for the settings to stick.

On laptops, my Alienware M17 R4 just required TPM being enabled. I did have an older Thinkpad that was under the space requirements, but set the registry to bypass the check. Still need to upgrade my daughter's Z390/9900k build and my wife's Dell XPS 13.

 

[Stuka87]

Please don't reward scalpers for an OS upgrade with small performance benefits.

There's a performance benefit? Seems like everything, especially Ryzen based machines, are slower overall.

NOTE: Some DX12 games show a slight speed bump

 

[Furious_Styles]

There's a performance benefit? Seems like everything, especially Ryzen based machines, are slower overall.

NOTE: Some DX12 games show a slight speed bump

HDR support is better, some say overall stuff is more snappy/loads quicker. Those are the benefits I've heard thus far. I think they patched it so AMD isn't slower anymore.

 

[Stuka87]

HDR support is better, some say overall stuff is more snappy/loads quicker. Those are the benefits I've heard thus far. I think they patched it so AMD isn't slower anymore.

The patch certainly made performance better. But could still use some more improvements.

 

[Harry_Wild]

Spoke with Asus on Windows 11 compatibility on their Z690 motherboard. The guy in technical motherboard support said that, "it is a go"!

 

[UsandThem]

Spoke with Asus on Windows 11 compatibility on their Z690 motherboard. The guy in technical motherboard support said that, "it is a go"!

Who'd thunk Intel's 12th gen CPU and new Z690 motherboard would work with Windows 11?

Maybe Intel and Microsoft would have published something stating that. Oh that's right, they did.

 

[OlyAR15]

Especially since Intel specifically recommends using Win 11 with their Alder Lake CPUs due to the thread director.