In this guide, you will learn the steps to create a virtual machine with TPM and Secure Boot support to install Windows 11. Hyper-V is an optional feature on Windows 10 Pro, which means that you must enable it manually from the “Windows Features.” You can use these instructions to set up the virtualization feature. Since we are dealing with virtualization, you are not required to physically have a TPM or Secure Boot chips on the computer. If you plan to install Insider Preview builds or run the final version of Windows 11 on a virtual machine using Hyper-V, you need to ensure to enable the TPM and Secure Boot to upgrade from Windows 10 or perform a clean install. On the other hand, Secure Boot is a firmware technology that protects the boot process to prevent malware (such as rootkits) from hijacking the trusted OS during startup. Usually, it is embedded onto the motherboard, but you may also add it as a separate component. This is in addition to the new 4GB of RAM and at least 64GB of storage.Ī TPM is a piece of hardware that provides cryptographic functions, such as generating and storing encryption keys to enable features like Windows Hello, BitLocker, and others. Starting with Windows 11, Microsoft is changing the system requirement and making TPM 2.0 and Secure Boot a prerequisite to perform an in-place upgrade or clean install the new version on any device. If you want to install Windows 11 on a virtual machine using Hyper-V, you will have to use a “Generation 2” VM and enable the “trusted platform module” (TPM) and Secure Boot options.

Tpm 2.0 and secure boot