Installing Windows 11 without TPM 2.0 and Secure Boot -- (registry Bypass)

[plastiscɧ]

Windows 11 also without TPM 2.0 and Secure Boot install


Microsoft has increased the hardware system requirements for Windows 11.
If you want to reinstall Windows 11, then TPM 2.0 and also SecureBoot is now one of the hardware requirements.

However, you can also install Windows 11 without these requirements.
We show you how it works.


Installing Windows 11 without TPM and SecureBoot - The preparation

Before installing Windows 11, make a reg file, which is then copied to an USB stick.

Right click on the desktop -> New -> Text document
Now copy this content into it:

---

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig]
"BypassTPMCheck"=dword:00000001
"BypassSecureBootCheck"=dword:00000001

---

Save and rename new text file.txt to Win11 TPM Bypass.reg

The icon will now change and the file can be copied to an USB stick.


Install Windows 11 now and use the regfile for the bypass



Insert the USB stick with the file on it

Start from the installation file and select the language

---

Click install now

---

Those who already had Windows 11 installed, or not, now click on "I don't have a product key

---

If no key is stored in the bios, you will now be asked to select the Windows 11 version that must match your key.

---

If you now click on Next, an error message may appear stating that Windows 11 cannot be installed on this device. "Now you go back to the version selection.

---

Now press the Shift key + F10 and the command prompt will open

Now type Notepad or Notepad.exe and press Enter

---

In Notepad now under File -> Open

---

In the open window switch the file type to "All files" and search for the USB stick.

If you have forgotten to insert the stick, you can do it again and press Update in the Open window by right-clicking.

---

Once you have found the reg file, right click and merge and confirm.

---

The Notepad and Command Prompt windows can now be closed

In the Windows 11 version selection one presses now again on next

---

From now on all is just the standard procedure

---

EZ !


BTW this is not my personal work! I just translated.
Pay some attention to my kind fellas.


NO LINKS TO UNOFFICIAL ISOs

 

[micropage7]

nice, i mean M$ should take a look at their previous OS, pushing their customer to upgrade their stuff to get Win 11 is annoying

 

[lexluthermiester]

Nice! Yet another iteration of bypass technique.

 

[lexluthermiester]

What about a i7 6700K Skylake CPU support?....

It will run fine. I'm running 22000.51 on a socket 1366 CPU PC and a i3-2310 laptop(testing it out on both systems). Runs perfectly.

 

[lexluthermiester]

So for the CPU support is no "trick" needed? (It's not the final version yet you are running)

Nope, no mods for the CPU specifically. I've actually already tested it on a Core2Duo T7200 based Sony laptop as well. Wasn't as smooth, but the Windows 7 drivers worked perfectly. You'll be fine. Have fun!

 

[scoutingwraith]

Surprised there is not a toolkit for this already haha.

 

[lexluthermiester]

Surprised there is not a toolkit for this already haha.

It's being worked on. When the OS hits final release there will be a few if not many..

 

[WhitetailAni]

You know, you can also swap the install.wim file from the Win11 ISO to the Win10 ISO and it'll work fine.
At least it did for me.

Recreating a bootable Windows ISO is a bit annoying but ImgBurn can do it if you set everything correctly.

 

[AsRock]

It's being worked on. When the OS hits final release there will be a few if not many..

And best part it's stupidly easy to by pass which personally find funny as hell.

TPM defeated by 2 lines of code LMFAO.

 

[Selaya]

It was never a hard requirement to begin with.
It's just to bring the OEMs and stuff in line, and imho that is perfectly understandable.
The only thing that sucks is the average joe being unable to upgrade their otherwise perfectly fine 6700k system, but that may yet change.

 

[newtekie1]

And best part it's stupidly easy to by pass which personally find funny as hell.

TPM defeated by 2 lines of code LMFAO.

For now, remember how easy it was to re-enable the classic start menu in Win8 in the early betas?

The only thing that sucks is the average joe being unable to upgrade their otherwise perfectly fine 6700k system, but that may yet change.

Right now they aren't enforcing the CPU requirements, they never really have in the past, but that could always change. I hope it doesn't, because I think they are wrong for limiting older but still perfectly capable hardware from running the latest OS. That's shit Apple does.

 

[TheChester]

I love how within roughly 2 weeks of being released an only 3-4 weeks of even being announced. This crap is bypassed. Like I understand the point of safeboot/tpm. But it's to much of a burden than it's benefit for the average joe. It's just not needed to be a requirement. Microsoft is such a shit company. Like if you use a program like rufus to create a install usb and you format the usb with NTFS and create it for UEFI you have to make sure to disable Secure Boot. Microsoft is the only one that controls the signing process for secure boot and they wont sign any thing that is GPLv3 and the NTFS source that rufus uses is GPLv3 they can't get it signed. Just poor practices.
So thank you community for the great work you guys put to fix this crap they try to pu..

 

[Selaya]

[ ... ]
Right now they aren't enforcing the CPU requirements, they never really have in the past, but that could always change. I hope it doesn't, because I think they are wrong for limiting older but still perfectly capable hardware from running the latest OS. That's shit Apple does.

Yeah, I'm aware of that but weren't people reporting their nominally ineligible systems failing the Can-it-run-Win-11-selftest, even if they were satifying all the other advertised requirements (TPM amongst them)?

 

[AsRock]

For now, remember how easy it was to re-enable the classic start menu in Win8 in the early betas?


Right now they aren't enforcing the CPU requirements, they never really have in the past, but that could always change. I hope it doesn't, because I think they are wrong for limiting older but still perfectly capable hardware from running the latest OS. That's shit Apple does.

Yeah but so much for extra security.

I do wounder what would happen if you installed the OS with it and disabled it. if it would just come to crashing stop kinda like raid.

 

[FireFox]

I love how within roughly 2 weeks of being released an only 3-4 weeks of even being announced. This crap is bypassed. Like I understand the point of safeboot/tpm. But it's to much of a burden than it's benefit for the average joe. It's just not needed to be a requirement. Microsoft is such a shit company. Like if you use a program like rufus to create a install usb and you format the usb with NTFS and create it for UEFI you have to make sure to disable Secure Boot. Microsoft is the only one that controls the signing process for secure boot and they wont sign any thing that is GPLv3 and the NTFS source that rufus uses is GPLv3 they can't get it signed. Just poor practices.
So thank you community for the great work you guys put to fix this crap they try to pu..

Which OS are you using right now?

 

[newtekie1]

Yeah, I'm aware of that but weren't people reporting their nominally ineligible systems failing the Can-it-run-Win-11-selftest, even if they were satifying all the other advertised requirements (TPM amongst them)?

Yes, the tool checks for CPU compatibility, but the actual Windows 11 installer does not currently as far as I'm aware.

I do wounder what would happen if you installed the OS with it and disabled it. if it would just come to crashing stop kinda like raid.

I guess it depends on what the OS is actually using the TPM for, or if it is even using it really. From the sounds of it, it currently isn't used for anything by default, but maybe the will start using it to encrypt the credentials? So with the TPM disabled, you suddenly wouldn't be able to log in? Or you could log into Windows, but it wouldn't remember any of your stored network credentials?

Obviously right now, beyond Bitlocker, it doesn't have much use for the average user.

 

[lexluthermiester]

For now, remember how easy it was to re-enable the classic start menu in Win8 in the early betas?

Good point. The final release may prove more challenging.

 

[OneMoar]

LabConfig flags only work in insider builds this will likely not be-available once it hits RC/RTM
I have no problem with the TPM Requirement, but cutting off older cpus completely is a bit much
that basically kills any businesses not running current gen hardware which is basically everybody Pro or enterprise may not have these requirements tho

 

[newtekie1]

I have no problem with the TPM Requirement, but cutting off older cpus completely is a bit much
that basically kills any businesses not running current gen hardware which is basically everybody Pro or enterprise may not have these requirements tho

The CPU requirements won't likely be enforced. I mean, if you look at the supported CPU list for Win10, it only supports 5th gen or newer but we all know it runs on way older hardware than that.

But the requirement for TPM2.0 and Secure Boot is going to cut out a lot of old hardware. Not that it is a huge deal since Win10 is continuing support for another 4 years, so it looks like people with older hardware have 4 years to replace it. It does suck though, because in an office environment, a older quad-core i5, like a i5-2400 is still perfectly capable.

 

[OneMoar]

Meh even the old core2duo machines I service regularly have TPM headers thats less of an issue then the cpu support

and the issue is worse then you think because many business buy refurbs and 80% of the refurb market is gen 6 and older (gen 3 and 4 refurbed OptiPlex's are still going for 300 bucks a pop)
I got doctors offices and small law offices and what not still rocking Core2duos and, the ones they have upgraded are at most GEN6
this is going to be a major problem for a lot of people if they don't drop the cpu requirement completely

 

[newtekie1]

Meh even the old core2duo machines I service regularly have TPM headers thats less of an issue then the cpu support

Sure, but do they also have UEFI and Secure Boot?

this is going to be a major problem for a lot of people if they don't drop the cpu requirement completely

Like I said, the CPU requirement was never something they enforced, and not something I suspect they will enforce with Win11. TPM, UEFI, and Secure Boot on the other hand seems to be things they are definitely going to enforce.

 

[OneMoar]

Sure, but do they also have UEFI and Secure Boot?


Like I said, the CPU requirement was never something they enforced, and not something I suspect they will enforce with Win11. TPM, UEFI, and Secure Boot on the other hand seems to be things they are definitely going to enforce.

most accually do it was way more common on the Pro grade machines of the day a few dont but it still applies to gen2 - gen6 which makes up over 70% of the machines I service

 

[TheChester]

Which OS are you using right now?

Windows 11 22000.1. I found on another forum a guy created a quick tool that extracts the boot.wim and replaces appraiserres.dll with one from 1709. Then repacks the boot.wim. Edits the registry as in this post. I was running the iso that was released prior to the official release and I was able to just do an upgrade to this newer version. Everything went smooth. I do gotta say I am liking the ui design improvements. I love the start menu setup with the pinned panel I've always prefered the plain A-Z start menu. Man were those live tiles were hideous. A man I still shutter to this day when some mentions Win 8. And I'm glad to see they didn't stick with their UWP design standards. Windows 11 feels modern and well thought through.

 

[qubit]

I knew there'd be some workaround like this. Great find.

 

[xtreemchaos]

well done, i knew someone would find a way.