When Microsoft launched Windows 11, they introduced strict hardware requirements — TPM 2.0, Secure Boot, and specific CPU generations — that instantly locked out millions of perfectly capable PCs. Machines that ran Windows 10 without a hiccup suddenly couldn't upgrade, not because they lacked the performance, but because they were missing a security chip most people had never heard of.

The good news: there's a legitimate, widely-used workaround. A free, open-source tool called Rufus can create a Windows 11 installer that bypasses every one of these artificial restrictions. Here's exactly how to do it, and what to understand before you start.

Do You Actually Need the Bypass?

Not every older PC needs the workaround. Some already meet the requirements but have TPM disabled in BIOS. The decision tree below helps you figure out where your machine stands.

Does your PC have TPM 2.0 enabled? YES Install Windows 11 normally No bypass needed NO Does it have TPM 1.2? (Check BIOS or run tpm.msc) YES Use Rufus bypass TPM 1.2 is fine for most security features. Bypass removes the 2.0 requirement only. NO Use Rufus bypass Still works, but BitLocker and some enterprise features won't be available. How to check your TPM status Press Win + R, type tpm.msc, press Enter. It will show your TPM version or tell you no compatible module was found.
Decision tree -- check your TPM status before deciding which installation path to take

Understanding the Requirements

Before bypassing anything, it helps to know what these requirements actually do and what trade-offs you're making.

What TPM 2.0 Does Trusted Platform Module is a security chip (or firmware) that stores encryption keys, handles BitLocker drive encryption, and validates that your boot process hasn't been tampered with. It's a hardware root of trust.
What Secure Boot Does Secure Boot verifies that every piece of software loaded during startup is signed by a trusted authority. It prevents rootkits and bootkits from loading before your OS starts, blocking a major class of malware.
Why Microsoft Requires Them Microsoft wants a baseline security floor for the Windows ecosystem. TPM 2.0 and Secure Boot enable features like credential isolation, firmware attack prevention, and hardware-backed encryption by default.
What You Lose by Bypassing BitLocker may not work without TPM. Windows Hello PIN-based login uses TPM for key storage. Some enterprise policies require it. For most home users, the practical impact is minimal.

Heads up: Microsoft has repeatedly hinted that PCs running Windows 11 without meeting hardware requirements may lose access to Windows Update in the future. As of early 2026, updates still arrive on bypassed installs -- but there's no guarantee this continues indefinitely. Keep this in mind before upgrading a machine you rely on daily.

What You'll Need

  • A USB drive -- minimum 8 GB, ideally 16 GB USB 3.0 for faster write speeds
  • Rufus -- free download from rufus.ie
  • Windows 11 ISO -- from Microsoft's official download page, or use Rufus's built-in downloader
  • 30-60 minutes -- USB creation takes about 10 minutes, the install itself takes 20-40 depending on drive speed

Step-by-Step: Create a Bypass USB with Rufus

  1. Download Rufus -- Head to rufus.ie and grab the latest version. You can use the portable edition (no install required) or the standard installer. Either works identically. Rufus is a well-known, open-source tool that has been around since 2011.
  2. Back up your USB drive -- Plug in your USB drive and copy off anything you need. Rufus will completely wipe and reformat the drive. There's no undo once you hit Start.
  3. Get the Windows 11 ISO -- You have two options. Download the ISO manually from Microsoft's website (search "Download Windows 11 Disk Image"), or let Rufus fetch it for you. In Rufus, click the dropdown arrow next to "Select" and choose "Download" -- it will pull the latest official ISO directly from Microsoft's servers.
  4. Configure Rufus -- Launch Rufus, select your USB drive in the "Device" dropdown, and select your ISO file. Leave partition scheme as GPT and target system as UEFI unless you specifically know your machine needs MBR/BIOS. The defaults are correct for most modern PCs.
  5. Enable the bypass options -- Click "Start". Rufus will show a dialog titled "Windows User Experience". Tick every box that applies:
    • Remove requirement for Secure Boot
    • Remove requirement for TPM 2.0
    • Remove requirement for 4 GB+ RAM
    • Remove requirement for supported CPU
    • Disable data collection (optional but recommended)
    • Create a local account instead of Microsoft account (optional)
  6. Write the USB -- Click OK and wait for Rufus to create the bootable drive. This typically takes 5-15 minutes depending on your USB speed. Don't remove the drive until Rufus shows "READY" in the status bar.
  7. Boot from USB -- Plug the USB into the target PC. Restart and enter the boot menu (usually F2, F12, DEL, or ESC during startup -- it varies by manufacturer). Select the USB drive as the boot device.
  8. Install Windows 11 -- The installer runs exactly like a normal Windows 11 setup. Choose your language, click "Install Now", enter your product key (or skip if you'll activate later), pick your edition, and follow the prompts. The bypass is already baked into the USB -- you don't need to do anything special during installation.

Bonus: In-Place Upgrade (Keep Your Files)

You don't always need to do a clean install. If you're already running Windows 10 and want to upgrade to Windows 11 while keeping all your files, apps, and settings, you can do an in-place upgrade.

After creating the Rufus USB (with bypass options enabled), plug it into the PC while Windows 10 is still running. Open the USB drive in File Explorer and double-click setup.exe. The Windows 11 installer will launch inside your existing Windows session.

Choose "Keep personal files and apps" when prompted. The installer will upgrade your OS in place -- typically taking 30-60 minutes. Your desktop, documents, installed programs, and settings carry over. The Rufus bypass patches apply during this process too, so TPM and CPU checks are skipped automatically.

Tip: Before an in-place upgrade, run a full backup. In-place upgrades have a high success rate, but if something goes wrong mid-upgrade, you want a safety net.

What About Existing Windows 10 PCs?

With Windows 10 reaching end of support in October 2025, millions of Australians are facing the same question: upgrade or replace?

First, check whether your PC actually qualifies for Windows 11. Open Settings > System > About and note your processor. Then run tpm.msc (press Win+R, type it, hit Enter) to check your TPM version. If you have TPM 2.0 and a supported CPU, you can upgrade through Windows Update normally.

If your PC has TPM 1.2 or an unsupported CPU (common on machines from 2017 and earlier), the Rufus bypass described above is your path forward. The PC will run Windows 11 perfectly well for everyday use -- browsing, Office, email, streaming. You just won't have hardware-backed BitLocker or guaranteed long-term update support.

If your machine has no TPM at all and is more than 7-8 years old, it may be worth considering a hardware upgrade instead. We can advise on whether a repair, RAM/SSD upgrade, or replacement makes the most sense for your situation.

Is It Safe?

Rufus is legitimate, open-source software with over 50 million downloads. Its source code is publicly available on GitHub, it's been around since 2011, and it's maintained by a single dedicated developer (Pete Batard) with full transparency. It doesn't install anything on your PC -- it only writes to the USB drive.

The bypass itself doesn't modify Windows in any harmful way. It simply removes the installer's hardware checks. Once installed, Windows 11 runs identically to a standard installation. You'll receive the same updates, the same security patches, and the same features. Microsoft has acknowledged that bypassed installs exist and has not taken action against them.

That said, use common sense: only download Rufus from rufus.ie (the official site). Avoid third-party download sites that may bundle adware or modified versions.

Need help with your PC?

We handle Windows installs, upgrades, and hardware repairs. Drop in or book online.

Book a Repair