Windows 11 – TPM and Secure Boot

I have 3 computers running Windows 10, and I decided check to see if I can upgrade to Windows 11 when it comes out.

Even though there are third party programs to check on compatibility, I don’t think that Microsoft has issued an official checking program.

Nevertheless, according to Microsoft this is what is needed https://www.microsoft.com/en-us/windows/windows-11-specifications

The main requirements are:

  1. Intel CPU 8th generation or later (Similar requirements apply to other CPU brands)
  2. TPM (Trusted Platform Module) Version 2
  3. Secure Boot

Most recent computers should meet the other requirements (mine certainly do) so I carried checks for items 1,2 &3.

My Surface Pro 7 meets all requirements as does my most recent NUC.

However my original NUC has a 7th generation Core i5 CPU and Secure Boot is not available.You can turn on Secure Boot in UEFI but then the computer won’t boot into Win 10. Unlike my more recent NUC, where I just had to go into UEFI and turn it on.

HOW TO CHECK FOR TPM & SECURE BOOT

Open Command Prompt and

To check TPM, enter :

tpm.msc

This will bring up the TPM Management Screen (if available) which will show the version number.

Then enter the following to check Secure Boot:

msinfo32.exe

This brings up a System Information Summary screen that will show if Secure Boot is available and if it is on.