Is TPM 2.0 a part I need to buy?

On most computers from recent years, no. The TPM is built into the processor, under the name Intel PTT or AMD fTPM, and only needs to be turned on in the BIOS settings. Older computers may not have TPM 2.0 at all.

Will turning on TPM delete my files?

Turning on TPM does not touch your files. What is risky is changing the boot mode from Legacy to UEFI without preparing the disk, because then Windows will not start.

Does upgrading to Windows 11 cost money?

According to Microsoft, the upgrade from Windows 10 Home or Pro to the same edition of Windows 11 is free for a computer that meets the requirements. It appears in Windows Update.

Windows 11 on an old computer: TPM and the compatibility check

October 13, 2026 · A guide by ChipLab Computer Lab

You wanted to move to Windows 11 and got a message that your computer is not compatible? Sometimes that is true, and sometimes it is one setting that is turned off in the BIOS. This guide explains what Windows 11 requires, how to check each requirement yourself, and what the options are when the computer really does not meet them.

What are the Windows 11 requirements?

Windows 11 requires a supported processor, 4GB of memory, 64GB of storage, UEFI firmware with Secure Boot, and a TPM chip version 2.0. According to Microsoft’s official requirements page, these are the full requirements:

Processor: 1GHz or faster, at least two cores, 64-bit, and a processor listed as compatible.
Memory: 4GB.
Storage: 64GB or more.
Firmware: UEFI, Secure Boot capable.
TPM: version 2.0.
Graphics: compatible with DirectX 12 or later, with a WDDM 2.0 driver.
Display: 720p, larger than 9 inches diagonally.

On most old computers, memory and storage are not the problem. What usually fails is the processor, the TPM or Secure Boot.

What is TPM and why does Windows 11 require it?

TPM (Trusted Platform Module) is a security component that stores encryption keys in a protected way. According to Microsoft, Windows 11 uses it, among other things, for disk encryption (BitLocker) and for signing in with Windows Hello.

TPM used to be a separate chip on the motherboard. Today, on most computers it is built into the processor’s firmware: Intel calls it PTT (Platform Trust Technology), and AMD calls it fTPM. Here is the good news: on many computers it exists, but it is turned off.

How do you check if the computer is compatible with Windows 11?

The simplest way is Microsoft’s app that checks all the requirements at once.

Download PC Health Check from aka.ms/GetPCHealthCheckApp and install it.
Open the app, and in the Windows 11 section click the Check now button.
The result tells you whether the computer is compatible, and if not, which requirement failed. According to Microsoft, it also suggests what can be done.

The details are on Microsoft’s page about PC Health Check. Keep what the result says, because that tells you where to go next: TPM, Secure Boot or processor.

How do you check the TPM yourself?

Open tpm.msc and look at the specification version. It is a half-minute check.

Press Windows+R, type tpm.msc and press Enter.
If the message “Compatible TPM cannot be found” appears, according to Microsoft the TPM is probably turned off in the firmware.
If the TPM is active, under “TPM Manufacturer Information” you will find the “Specification Version”. Windows 11 needs 2.0.

You can see the same information in the Windows Security app, in the Device security section, under “Security processor details”.

How do you turn on TPM and Secure Boot in the BIOS?

Go into the firmware settings (UEFI/BIOS) and look for an option whose name depends on the maker. According to Microsoft’s guide to enabling TPM 2.0, the common names are Intel PTT, Intel Platform Trust Technology, AMD fTPM switch, AMD PSP fTPM, Security Device Support or TPM State. It is usually in the Advanced, Security or Trusted Computing menu.

The way into the firmware settings from Windows 10:

Settings, then Update & Security, then Recovery.
Under Advanced startup, click Restart now.
On the blue screen that opens: Troubleshoot, Advanced options, UEFI Firmware Settings, then Restart.

On many computers you can also press a specific key right when the computer turns on, for example F2 or Delete. The key varies between makers, and it is usually written in the computer’s manual.

Secure Boot is a mechanism that makes sure only signed, recognized software loads at startup, so that malware cannot take over the computer before Windows does. Before turning it on, there is one check that is important to do. Press Windows+R and type msinfo32. The BIOS Mode line will say UEFI or Legacy. If it says Legacy, the disk is probably partitioned the old way (MBR). Switching to UEFI without converting the disk to the new scheme (GPT) will cause Windows not to start. Microsoft has a tool called MBR2GPT for the conversion, but this is exactly the step where anyone who is not sure should stop.

How do you upgrade when the computer is compatible?

Through Windows Update, without downloading anything from another site. According to Microsoft, the upgrade from Windows 10 Home or Pro to the same edition of Windows 11 is free, and a computer that meets the requirements gets an upgrade offer.

Before anything else, back up your files. How to do it right is in the guide Back up before the disk fails.
Settings, Update & Security, Windows Update.
If the computer is eligible, an option to upgrade to Windows 11 appears there.
The computer restarts several times during the upgrade. Do not turn it off partway, and on a laptop, plug it into the power.

What do you do if the processor is not on the list?

If PC Health Check says the processor is not supported, no setting will change that. When the system was released, the published guideline was broadly Intel Core processors from the 8th generation and up, and AMD Ryzen processors from relatively recent series. Today Microsoft directs users to check compatibility through PC Health Check, and that is the way to rely on.

Can you install Windows 11 on a computer that does not meet the requirements?

Technically yes, but Microsoft does not recommend it. According to Microsoft’s official warning page, such a computer is no longer supported, is not entitled to receive updates, and there is no guarantee it will receive security updates either. Damage caused by lack of compatibility is not covered by the manufacturer’s warranty, and a watermark appears on the desktop.

There is also a practical problem. According to reports, since version 24H2, Windows 11 does not start at all on very old processors that lack certain instructions (SSE4.2 and POPCNT), and that cannot be bypassed. In other words, a computer that worked with a workaround can get stuck on the next update.

What are the options when the computer is not compatible?

It depends on what failed: TPM and Secure Boot can usually be turned on, and an unsupported processor cannot be fixed with a setting.

Situation	What it means	What to do	When to come to the lab
TPM not found	Probably turned off in the firmware	Turn on Intel PTT or AMD fTPM	If you cannot find the setting
Secure Boot off, Legacy mode	The disk is MBR	Convert to GPT and then UEFI	If you are not sure about the conversion
Processor not supported	No setting will change it	Stay on Windows 10 with ESU, or a new computer	To move data to a new computer
Everything fine but slow	Old hard drive	Upgrade to an SSD before the installation	For the upgrade

If the processor is not supported, there are a few ways to go:

Stay on Windows 10 with Extended Security Updates (ESU). According to Microsoft, the consumer program runs until 12 October 2027. Everything about the program and how to enroll is in the guide Windows 10 is no longer supported.
A new computer. You move the files to it, and there is a guide for that: Moving to a new computer.
A different system, for a computer used only for browsing. For example Google’s ChromeOS Flex or a Linux distribution. It is not for everyone, and first you need to check that the programs you need work there.

And if the computer is compatible but still has a mechanical hard drive, this is the time to upgrade before the installation. There is a guide about that: SSD or hard drive.

What not to do

Do not change several BIOS settings at once. One at a time, and take a photo of the screen before.
Do not switch from Legacy to UEFI without checking the disk type.
Do not download a “modified Windows 11” from unofficial sites. There is no telling what was put inside.
Do not upgrade without a backup of your files.

When to bring the computer to the lab

If PC Health Check says the problem is TPM or Secure Boot, and you cannot find the setting or the BIOS mode is Legacy, this is the place to stop. Also if the processor is not supported and you want to know whether a hardware upgrade is worth it or a new computer is the better choice.

We are a computer lab in Haifa, and we also serve Nesher and the Krayot. We check the computer, tell you what is possible, and give you a price before we start.

Did it not work?

The goal is for you to check and turn on the settings yourself, and on many computers it really is just a TPM that is turned off. If it did not work out, we will check the computer and install Windows 11 under Windows installation, and if a computer upgrade is also needed, we will tell you in advance.