TPM 2.0 and Secure Boot error in windows 11 installation procedure prevents user from installing the latest Windows 11 OS to a PC. “This PC can’t run Windows 11” error is very common during the installation of Windows 11 OS leaked build 21996. You may end up with “This PC can’t run Windows 11” or “The PC must support TPM 2.0” and “The PC must support Secure Boot” errors. Actually, this is a developer build Windows iso file which is most probably made for the server edition of Windows 11 but later it got modified to be installed on all the Desktops. Modern Windows OS still do not require TPM support to run the OS even with (U)EFI.
The errors are like the followings:
This PC can’t run Windows 11.
The PC must support TPM 2.0.
The PC must support Secure Boot.
You might be alerted with the notification during installation of Windows 11 on a PC:
This PC can’t run Windows 11
This PC doesn’t meet the system requirements to run Windows 11.
What is “TPM 2.0” and “Secure Boot” and How to Install Windows 11 without TPM 2.0 and Secure Boot Error
TPM or “Trusted Platform Module” is a kind of processor which is basically implemented in the hardware to provide basic security related functions like securing the storage, certification, encrypting the keys etc. The TPM modules are attached on the motherboards of modern PCs by the OEMs. TPM also requires the much needed firmware to secure the data of any operating system.
In Windows 11 (versions later than Windows 8.1), TPM feature is implemented to secure the entire boot environment. It prevents any malware like thing from hiding inside the PC and prevents tampered Windows components from being loaded during the boot procedure. TPM also triggers the early launching capabilities of any anti-malware software and ensures that no third-party applications and drivers load before the launch of the anti-malware service. Thus, it helps the anti-malware to work properly in modern Windows environment during the whole boot process. TPM also gives additional security to prevent cheating on online games, to protect the software licensing etc.
TPM 2.0 has the consistent capacity to enable maximum crypto agility. It supports the modern algorithms which help to improve key generations, drive signing capabilities. Note that TPM 2.0 requires UEFI mode as it does not support the Legacy mode or the CSM mode in the BIOS. This UEFI firmware is known to work within the secure boot environment which is a trusted security standard developed by the OEMs to ensure that the PC boots only using trusted software, certified by the reputed PC manufacturer.
Every modern processors which are not older than Gigabyte H61, or Intel’s 4th Gen, can capable of handling TPM 2.0. This is a BIOS feature which provides the security from not getting hacked. TPM module is an integrated module of the CPU, so you need to enable it from the BIOS settings.
Fix TPM 2.0 and Secure Boot Missing Error while installing Windows 11 on a PC
Hopefully, the official released version of Windows 11 does not require TPM 2.0 and secure boot support for running the OS on a PC. But, as of now, by replacing the appraiserres.dll file from the Windows 11 OS by the same dll file taken from the Windows 10’s 21H1 build, you can easily bypass such errors and install the downloaded leaked Windows 11 OS build 21996.1 on any of your PC/laptop.
Before replacing the appraiserres.dll file in the Windows 11 iso image, make sure you have checked and enabled the TPM UEFI in Boot manager in BIOS. You need to update the BIOS firmware if required.
Now mount the downloaded iso of Windows 11 and navigate to ‘Sources’ folder. Copy the appraiserres.dll file that you need to download from the below URL, paste and replace the file inside the ‘Sources’ folder of the mounted Windows 11 ISO. Make the Windows 11 ISO bootable if you require. Now you can install Windows 11 without TPM 2.0 and Secure Boot Error.
URL to download appraiserres.dll file:
Alternatively, you can install the Windows 11 ISO developer leaked build by using the WinNTSetup 4.1 or WimGAPI version 10. It works like a charm to few users who have reported it on online forum. You can transfer the entire OS to another PC later. Also, “Windows 11 OS Build 21996 has been Leaked – Here is How to Download and Install” guide might be useful to you.