Windows 11 checks your hardware more strictly than Windows 10 did, and most failed upgrades come down to three items: the processor, TPM 2.0 and Secure Boot. This guide lists Microsoft's official minimums, shows how to check each one with built-in tools, and explains what to do if your PC falls short.
| Component | Microsoft minimum for Windows 11 | How to check |
|---|---|---|
| Processor | 1 GHz or faster, 2 or more cores, compatible 64-bit processor or SoC | PC Health Check; Microsoft's supported CPU lists |
| RAM | 4 GB | Settings > System > About |
| Storage | 64 GB or larger | File Explorer > This PC |
| System firmware | UEFI, Secure Boot capable |
msinfo32 (BIOS Mode, Secure Boot State) |
| TPM | Trusted Platform Module version 2.0 |
tpm.msc or Windows Security |
| Graphics | DirectX 12 or later with WDDM 2.0 driver | dxdiag |
| Display | 720p, greater than 9 inches diagonally, 8 bits per colour channel | Settings > System > Display |
| Internet and account | Windows 11 Home needs internet and a Microsoft account during initial setup | Not applicable |
Source: Microsoft's Windows 11 specifications page.
What are the minimum system requirements for Windows 11?
Windows 11 needs a compatible 64-bit processor with at least 2 cores at 1 GHz, 4 GB of RAM, 64 GB of storage, UEFI firmware that supports Secure Boot, TPM version 2.0, a DirectX 12 graphics card with a WDDM 2.0 driver, and a 720p display larger than 9 inches.
The same requirements apply to Windows 11 Home and Pro. The edition changes features, not hardware rules. The difference at setup is that Home requires an internet connection and a Microsoft account to complete first-time setup.
Advanced nuance: "compatible" processor is the item that surprises people. A fast older CPU can meet the GHz and core count yet still fail, because Microsoft publishes specific supported processor lists for Intel, AMD and Qualcomm. The lists reflect security features and driver models, not raw speed.
How do you check if your PC can run Windows 11?
The quickest check is Microsoft's PC Health Check app: install it from aka.ms/GetPCHealthCheckApp, open it, and select "Check now" under the Windows 11 section. The result tells you whether the PC is eligible and, if not, which requirement failed, such as TPM, Secure Boot or the processor.
- Download PC Health Check from Microsoft (aka.ms/GetPCHealthCheckApp) and install it.
- Search the taskbar for PC Health Check and open it.
- Select Check now.
- Read the result. Use "See all results" to view each requirement as passed or failed.
What we commonly see: many PCs fail PC Health Check only because TPM or Secure Boot is switched off in firmware, not because the hardware lacks them. The manual checks below tell you which case you are in.
How do you check if TPM 2.0 is enabled?
Press Windows + R, type tpm.msc and press Enter. If the console shows "The TPM is ready for use", look at "Specification Version" under TPM Manufacturer Information; it must show 2.0. If you see "Compatible TPM cannot be found", the TPM may simply be disabled in firmware.
You can also open Windows Security > Device security. A "Security processor" section with a specification version of 2.0 means you pass. If that section is missing, Microsoft notes the TPM may be disabled.
Cause and effect: TPM 2.0 is a hardware security chip, or a firmware version of it built into the processor, that stores encryption keys. Windows 11 relies on it for features such as BitLocker device encryption and Windows Hello, so a PC without an active TPM 2.0 fails the requirement check and the upgrade is blocked.
How do you enable TPM 2.0 in BIOS or UEFI?
Restart into UEFI firmware settings, find the security or advanced section, and enable the firmware TPM. It is named differently by vendor: Intel boards usually call it "Intel PTT" or "Platform Trust Technology", and AMD boards call it "AMD fTPM" or "AMD PSP fTPM". Save the change, restart, then recheck with tpm.msc.
- Open Settings > System > Recovery, then select Restart now next to Advanced startup.
- Go to Troubleshoot > Advanced options > UEFI Firmware Settings and select Restart.
- Look under menus named Advanced, Security or Trusted Computing.
- Enable the option labelled Security Device, TPM State, Intel PTT or AMD fTPM.
- Save and exit, then confirm the result in
tpm.msc.
Microsoft notes that many retail motherboards ship with TPM turned off even though it can usually be enabled. Menu names vary, so your PC or motherboard manufacturer's support page is the best reference for the exact location.
Advanced nuance: if you already use BitLocker on the current system, changing TPM settings can trigger a recovery-key prompt at the next start. Make sure you have your BitLocker recovery key before changing firmware security settings.
How do you check and turn on Secure Boot?
Press Windows + R, type msinfo32, and in System Summary look at "BIOS Mode" and "Secure Boot State". BIOS Mode must say UEFI, and Secure Boot State should say On. If it says Off, enable Secure Boot in UEFI firmware settings; if BIOS Mode says Legacy, the PC must first be switched to UEFI.
In PowerShell run as administrator, the command Confirm-SecureBootUEFI returns True when Secure Boot is enabled and False when it is supported but disabled. On a legacy BIOS PC it reports that the cmdlet is not supported on this platform.
Cause and effect: Secure Boot only works in UEFI mode, and UEFI mode needs the system disk in GPT format. That is why a PC set up years ago in Legacy (CSM) mode with an MBR disk fails the check even if its firmware supports Secure Boot.
Microsoft provides the MBR2GPT tool, which converts a disk from MBR to GPT without deleting data; after conversion, the firmware must be switched to UEFI mode. Microsoft's MBR2GPT documentation on Microsoft Learn lists the prerequisites. Back up your data first, and if you are not comfortable with these steps, a clean install from a Windows 11 bootable USB created as GPT/UEFI is the simpler path.
Is my processor supported by Windows 11?
Your processor is supported if it appears on Microsoft's published Windows 11 processor lists for Intel, AMD or Qualcomm, and PC Health Check will confirm it. As a broad guide, many Intel 8th-generation and newer and AMD Ryzen 2000-series and newer chips are listed, but check your exact model rather than relying on the generation.
To find your model, open Settings > System > About and read the "Processor" line, then search for it on Microsoft's list. Unlike TPM or Secure Boot, a processor that is not on the list cannot be fixed with a setting.
What we commonly see: buyers sometimes purchase a Windows 11 key for an older PC and only then discover the CPU is not supported. Checking PC Health Check before buying avoids that problem.
What happens if you install Windows 11 on unsupported hardware?
Microsoft states that installing Windows 11 on a device that does not meet the minimum requirements is not recommended. Such devices are not guaranteed to receive updates, including security updates, and damage caused by incompatibility is not covered by the manufacturer's warranty. A desktop watermark and a Settings notice may also appear.
Microsoft's support article on unsupported devices also notes that after an upgrade, rolling back to Windows 10 is only available for 10 days. We do not provide instructions for bypassing the requirement checks, and we suggest avoiding them on any PC you rely on for work or banking.
What are your options if your PC does not meet the requirements?
If the processor is unsupported, you can keep using Windows 10 with Extended Security Updates where you are eligible, plan a hardware upgrade, or buy a new PC that ships with Windows 11. If only TPM or Secure Boot failed, enabling them in firmware is usually enough to qualify.
- Enable TPM and Secure Boot if they exist but are off, then rerun PC Health Check.
- Stay on Windows 10 with ESU for a limited period. Our guide to Windows 10 end of support and ESU explains the current terms.
- Upgrade hardware or replace the PC. A supported motherboard and CPU, or a new PC, gives full update support.
Once your PC qualifies, you can install with a Windows 11 Pro retail key or browse all options in our Windows 11 collection. Eligible Windows 10 PCs can also take the free upgrade offered through Windows Update.
Frequently asked questions
Does Windows 11 need TPM 2.0 or is TPM 1.2 enough?
Microsoft lists TPM version 2.0 as the requirement for Windows 11. If Windows Security or tpm.msc reports a specification version below 2.0, the device does not meet the requirement. Some older PCs can move from TPM 1.2 to 2.0 with a manufacturer firmware update, so check the manufacturer's support site.
Can I enable TPM on any PC?
Not every PC. Most desktop and laptop processors from recent years include a firmware TPM (Intel PTT or AMD fTPM) that only needs enabling in UEFI settings. Very old systems may have no TPM 2.0 option at all. If you cannot find the setting, the manufacturer's documentation for your exact model is the most reliable reference.
Is Secure Boot required to install Windows 11?
Microsoft lists "UEFI, Secure Boot capable" firmware as the requirement, so the PC must support Secure Boot. It is good practice to keep it enabled, because it blocks untrusted boot loaders. If you disabled it temporarily to boot certain media, Microsoft recommends turning it back on once you have finished.
Does Windows 11 Pro have different hardware requirements from Home?
No. Windows 11 Home and Pro share the same minimum hardware requirements. The difference is in features such as BitLocker management, Hyper-V and Group Policy, and in setup: Home requires an internet connection and a Microsoft account during initial setup. Your key decides which edition installs.
Will my Windows 11 key work if my PC fails the check?
A product key does not change hardware eligibility. The key licenses the edition, while the requirement check looks at the processor, TPM and Secure Boot. Check PC Health Check before buying; if your PC is eligible, the key activates normally after a supported installation.