How to upgrade Windows 10 PC without TPM or Secure Boot to Windows 11

• To upgrade a computer without TPM 2.0 or Secure Boot to Windows 11, you’ll have to download the ISO file from Microsoft, use the Rufus tool to create a USB bootable that bypasses the requirements, and then launch the in-place upgrade.
• This process preserves your files and apps, but it’s recommended to create a full backup before proceeding. 
• If you proceed with the upgrade, the computer will remain unsupported. You will be able to download and install system and driver updates, but they may not work.

Microsoft plans to end support for Windows 10 on October 14, 2025, and if you have a computer running the older version of the operating system, it’s now the time to upgrade to Windows 11. However, if you have a hardware configuration that doesn’t have a Trusted Platform Module (TPM) 2.0, you won’t be able to proceed with the installation process through Windows Update or even using a USB bootable media. 

In addition, the company recently stated that the TPM 2.0 requirement is “non-negotiable” since it’s an essential piece of hardware that helps encrypt and decrypt data, confirm digital signatures, and process other cryptographic tasks. In other words, this module plays a key role in the security of the device and data protection. Furthermore, Microsoft has even recommended that users purchase a new computer if the existing hardware doesn’t meet the minimum requirements. However, if you have a computer with unsupported hardware, you can still upgrade to Windows 11 without a Trusted Platform Module, but you will have to use different instructions and tools.

It’s also important to note that “Secure Boot” is a recommendation, but it’s not a requirement to install Windows 11. However, since you can only install the operating system on a computer with a Unified Extensible Firmware Interface (UEFI), and Secure Boot is one of the features of this firmware type, we can also say that Secure Boot is a requirement, but it doesn’t have to be enabled.

Secure Boot is a security feature introduced by Microsoft in 2011. It’s integrated into the UEFI firmware and helps protect your computer from malicious attacks during boot. This feature works by verifying the digital signatures of the bootloader and operating system. Only code with valid signatures is allowed to load, preventing unauthorized or malicious code from taking control of your system.

In this guide, I will explain the easy steps to upgrade to Windows 11 from Windows 10 when your computer doesn’t have a TPM 2.0 chip or Secure Boot isn’t enabled.

Upgrade Windows 10 without TPM or Secure Boot to Windows 11

If you want to upgrade your computer to Windows 11 without losing your files, you must download the official ISO file and use the Rufus tool to create a USB bootable media. After this process, you can launch the setup with the USB flash drive and continue with the installation process from the Windows 10 desktop.

1. Download Windows 11 ISO file

To download the Windows 11 ISO file, use these steps:

1. Open Microsoft Support website.

2. Select the Windows 11 option under the “Download Windows 11 Disk Image (ISO) for x64 devices” section.

3. Click the Download button.

4. Select the installation language.

   

5. Click the Confirm button.

6. Click the Download button to save the Windows 11 ISO file on the computer.

   

Once you complete the steps, you can use the ISO file to create an installation media that bypasses the TPM 2.0 and Secure Boot requirements.

2. Create Windows 11 bootable media

To create a Windows 11 USB bootable media, connect a USB flash drive of at least 8GB and use these steps:

1. Open Rufus website.

2. Click the link to download the latest version under the “Download” section.

3. Choose the USB flash drive from the “Device” setting.

4. Double-click the executable to launch the tool.

5. Click the Select button.

   

6. Select the Windows 11 ISO file.

7. Click the Open button.

8. Continue with the default settings after the download.

9. (Optional) Specify a name for the drive under the “Volume label” setting.

10. Click the Start button.

11. Check the “Remove requirement for 4GB+ RAM, Secure Boot and TPM 2.0” option to install Windows 11 on unsupported hardware.

    

12. Click the OK button.

Once you complete the steps, Rufus will create the installation media for unsupported hardware.

3. Windows 10 to 11 upgrade process

To upgrade your computer running Windows 10 to 11, connect the USB flash drive with the installation files and use these steps:

1. Open File Explorer.

2. Click on This PC from the left pane.

3. Double-click the USB flash drive with the installation files.

4. Right-click the setup.exe file and choose the Run as administrator option.

   

5. (Optional) Clear the “I want to help make the installation better” option.

6. Click the Next button.

   

7. Click the Accept button.

8. Click the Install button.

   

After you complete the steps, the Windows Setup process will start the upgrade to Windows 11. Since this is an in-place upgrade, you won’t have to complete the out-of-box experience (OOBE), and after a few reboots, the device will install the latest version of the operating system.

When upgrading a computer that doesn’t meet the minimum hardware requirements, you should know that the installation will remain unsupported. You may be able to download and install system and driver updates, but Microsoft won’t offer any support, and they can sometimes cause issues. 

If you decide to upgrade a device without the Trusted Platform Module (TPM) 2.0 or Secure Boot, I recommend creating a full backup of your computer before proceeding. After the upgrade, you should also create a backup of the device and data in case something goes wrong.