Windows 11 Bypass Secure Boot Requirement | Easy Fix September 2025

Would you like to install Windows 11 on your old machine without using secure boot technology? You’re at the correct location. The fastest way is to use the Registry Editor during the installation process: press Shift+F10 at the “This PC can’t run Windows 11” prompt, launch Registry Editor, make a new key called LabConfig under HKEY_LOCAL_MACHINE\SYSTEM\Setup, add BypassSecureBootCheck, and set its value to 1. It only takes a few minutes to install Windows 11 without secure boot thanks to this easy method.

But there’s more to know about this process. This guide shows you multiple proven methods to bypass these requirements safely, explains what Secure Boot actually does, and helps you understand the trade-offs. Whether you’re stuck with the Windows 11 secure boot requirement or dealing with TPM issues, you’ll find the solution here.

What Is Secure Boot and Why Does Windows 11 Need It?

Secure Boot is like a security guard for your computer. When you turn on your PC, Secure Boot checks that only trusted software can start running. It’s part of something called UEFI (the modern version of BIOS) that protects your computer from bad software trying to take control during startup.

Microsoft made Secure Boot a requirement for Windows 11 to improve security. They want to protect users from rootkits and boot viruses – nasty programs that can hide from your antivirus by starting before Windows even loads.

The Problem: Not All Computers Support It

Here’s where things get tricky. Many older computers (especially those made before 2012) either don’t have Secure Boot or use the older Legacy BIOS system. This leaves millions of perfectly good computers unable to upgrade to Windows 11, even though they have enough power to run it smoothly.

If your computer shows these signs, you might need to bypass the requirements:

• BIOS Mode shows “Legacy” instead of “UEFI”
• Secure Boot State says “Unsupported” or “Off”
• Your motherboard doesn’t have Secure Boot options
• You get the dreaded “This PC can’t run Windows 11” message

Method 1: Registry Editor Bypass (Most Popular)

This method works great when you’re installing Windows 11 from a USB drive or upgrading from Windows 10. It’s the most reliable way to install Windows 11 without secure boot.

During Fresh Installation

1. Start the Windows 11 installation from your USB drive
2. When you see “This PC can’t run Windows 11,” press Shift + F10
3. Type regedit and press Enter
4. Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\Setup
5. Right-click on Setup, select New > Key
6. Name it LabConfig
7. Right-click LabConfig, select New > DWORD (32-bit) Value
8. Create these values and set each to 1:
   • BypassSecureBootCheck
   • BypassTPMCheck
   • BypassRAMCheck (if needed)
9. Close Registry Editor and click the back button
10. Continue with installation

For Windows 10 Upgrades

If you’re upgrading from Windows 10 and want to Windows 11 bypass TPM requirement:

1. Press Windows + R, type regedit
2. Go to: HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup
3. Create a new DWORD called AllowUpgradesWithUnsupportedTPMOrCPU
4. Set its value to 1
5. Try the upgrade again

Method 2: Using Rufus (Easiest for Beginners)

Rufus is a free tool that creates a special Windows 11 USB drive that automatically bypasses all requirements. This is perfect if you want to install Windows 11 without TPM and Secure Boot.

Steps to Use Rufus:

1. Download Rufus (version 3.2 or newer) from the official website
2. Insert a USB drive (8GB or larger)
3. Open Rufus and select your Windows 11 ISO file
4. Under “Image option,” choose Extended Windows 11 Installation
5. Check these boxes:
   • Remove the requirement for Secure Boot and TPM 2.0
   • Remove requirement for 4GB+ RAM
   • Remove the requirement for an online Microsoft account
6. Click START and wait for it to finish
7. Boot from the USB drive to install Windows 11

This method handles the Windows 11 remove TPM requirement automatically, making it the simplest option for most users.

Important Considerations Before Bypassing

Before you bypass secure boot to install Windows 11, understand these key points:

Security Risks

Without Secure Boot, your computer is more vulnerable to:

• Boot-level malware and rootkits
• Unauthorized operating system modifications
• Firmware attacks

Feature Limitations

Some Windows 11 features won’t work properly:

• Windows Hello facial recognition might fail
• BitLocker encryption requires manual unlocking
• Certain games (like Valorant) won’t run
• Windows Subsystem for Linux (WSL) needs Secure Boot

Update Concerns

Microsoft doesn’t officially support installations without Secure Boot. While you’ll likely still get security updates, there’s no guarantee for future feature updates.

Alternative Solutions to Consider

Instead of bypassing requirements, consider these options:

1. Enable Secure Boot If Possible

Check if your computer actually supports Secure Boot, but it’s just disabled:

1. Enter BIOS/UEFI (usually by pressing F2, Del, or F10 during startup)
2. Look for Security or Boot settings
3. Find and enable “Secure Boot”
4. Save and exit

2. Convert from Legacy to UEFI

If your disk uses MBR format, you can convert it to GPT to enable UEFI mode:

1. Open Command Prompt as administrator
2. Type: mbr2gpt /validate /allowFullOS
3. If validation passes, type: mbr2gpt /convert /allowFullOS
4. Restart and enable UEFI in BIOS

3. Use Compatible Hardware

For the best experience, consider upgrading to hardware that naturally supports all Windows 11 requirements. Check out our guide on finding your computer username to identify your current system specifications.

Troubleshooting Common Issues

“Registry Method Doesn’t Work Anymore”

Some users report the registry method failing on newer Windows 11 versions (24H2). If this happens:

• Try the Rufus method instead
• Use the “empty appraiserres.dll” technique
• Consider using third-party tools designed for this purpose

“Computer Keeps Booting Back to BIOS”

This usually means your system is in Legacy mode but trying to use UEFI features:

1. Disable Secure Boot temporarily
2. Convert your disk from MBR to GPT
3. Switch to UEFI mode
4. Try enabling Secure Boot again

“Can’t Find Secure Boot Option”

If Secure Boot doesn’t appear in your BIOS:

• Your motherboard might not support it
• Update your BIOS to the latest version
• Check if you need to enable “Windows UEFI Mode” first

Step-by-Step Video Summary

While we’ve covered the text instructions, here’s a quick summary of what you’d see in a typical bypass process:

1. Preparation: Download Windows 11 ISO, create bootable media
2. Boot: Start from USB, proceed until you hit the requirements error
3. Registry Edit: Use Shift+F10 trick to access Registry Editor
4. Add Bypasses: Create LabConfig with bypass values
5. Continue: Close Registry Editor and proceed with installation
6. Complete: Finish setup and enjoy Windows 11

Windows 11 Bypass Methods Comparison

Method	Difficulty	Success Rate	Best For
Registry Edit	Medium	90%	Tech-savvy users
Rufus USB	Easy	95%	Beginners
MBR to GPT	Hard	80%	Legacy systems
Third-party tools	Easy	Variable	Quick fixes

Post-Installation Tips

After you successfully install Windows 11 without encryption and Secure Boot:

1. Install all drivers – Especially important for unsupported hardware
2. Enable Windows Defender – Extra important without Secure Boot
3. Keep backups – In case future updates cause issues
4. Monitor performance – Some features might work differently
5. Stay informed – Microsoft’s policies might change

What About TPM Requirements?

The Windows 11 TPM secure boot requirements go hand-in-hand. When you bypass one, you often need to bypass both. The registry method we showed handles both automatically by adding BypassTPMCheck alongside BypassSecureBootCheck.

TPM (Trusted Platform Module) stores encryption keys and helps with features like:

• BitLocker drive encryption
• Windows Hello authentication
• Secure credential storage

Just like with Secure Boot, bypassing TPM means losing some security features but gaining the ability to run Windows 11 on older hardware.

Making the Right Decision

Deciding whether to bypass requirements depends on your situation:

Bypass if:

• You have older but capable hardware
• You understand the security trade-offs
• You mainly use the PC for basic tasks
• You can’t afford new hardware

Don’t bypass if:

• You handle sensitive data
• You need maximum security
• You rely on features like BitLocker
• You can upgrade your hardware

Looking Ahead: Windows 11 Updates

Microsoft’s stance on bypassed installations remains unclear. While they provide the registry workarounds, they also warn about potential issues. Here’s what we know:

• Security updates continue to work (for now)
• Feature updates might require re-applying bypasses
• Some new features might not work on bypassed systems
• Microsoft could block these methods in the future

Stay prepared by keeping your bypass methods handy and having a backup plan.

Frequently Asked Questions

Conclusion

You now know multiple ways to bypass secure boot to install Windows 11. The registry method works for most situations, while Rufus offers the easiest solution for beginners. Remember that bypassing requirements means accepting some security risks and potential feature limitations.

Before bypassing, always check if you can enable Secure Boot in your BIOS or convert your system to support it properly. If you must bypass, use the registry method for quick fixes or Rufus for a more permanent solution. Keep these instructions handy – you might need them again for future Windows updates.