How to Fix This device can't run Windows 11 (Windows 10)
Quick Answer
The error 'This device can't run Windows 11' indicates that your current Windows 10 system does not meet one or more of the minimum hardware requirements for Windows 11. The fastest way to identify the specific unmet requirement is to use the PC Health Check application, which can then guide you to enable features like TPM 2.0 or Secure Boot in your system's UEFI/BIOS settings.
What Causes This Error
- TPM 2.0 (Trusted Platform Module) is not enabled or present on the system.
- Secure Boot is not enabled in the system's UEFI firmware settings.
- The processor (CPU) does not meet the minimum generation or model requirements for Windows 11.
- Insufficient RAM (less than 4 GB) is installed on the system.
- Insufficient storage space (less than 64 GB) is available on the primary drive.
- The system's disk partition style is MBR instead of GPT, which is required for UEFI and Secure Boot.
Step-by-Step Fixes
1Identify Specific Requirements with PC Health Check
- Download the official PC Health Check application from Microsoft's website. Search for 'PC Health Check app download' to find the official link.
- Run the downloaded installer file (e.g., 'WindowsPCHealthCheckSetup.msi') and follow the on-screen prompts to install the application.
- Launch the PC Health Check application. On the main screen, locate the 'Introducing Windows 11' section and click the 'Check now' button.
- Review the results. The application will indicate which specific hardware requirements are not met, such as TPM 2.0, Secure Boot, or processor compatibility.
- Note the specific issues identified, as these will guide further troubleshooting steps.
2Enable TPM 2.0 in UEFI/BIOS Settings to Fix 'This device can't run Windows 11'
- Restart your computer. As it boots up, repeatedly press the designated key to enter the UEFI/BIOS settings. Common keys include F2, F10, F12, DEL, or ESC. Consult your motherboard or PC manufacturer's documentation if unsure.
- Navigate through the UEFI/BIOS menu to find settings related to 'Security,' 'Boot,' or 'Advanced.' Look for options like 'Trusted Platform Module (TPM),' 'Intel Platform Trust Technology (PTT),' or 'AMD fTPM Configuration.'
- Select the TPM/PTT/fTPM option and change its status to 'Enabled.' Ensure it is set to version 2.0 if multiple versions are listed.
- Save the changes to the UEFI/BIOS settings (often by pressing F10) and exit. Your computer will restart.
- After restarting, run the PC Health Check application again to verify that TPM 2.0 is now detected as enabled.
3Enable Secure Boot in UEFI Settings
- Restart your computer and enter the UEFI/BIOS settings using the appropriate key (e.g., F2, F10, DEL) during startup.
- Within the UEFI interface, navigate to the 'Boot' or 'Security' tab. Look for an option labeled 'Secure Boot.'
- Ensure that 'Secure Boot' is set to 'Enabled.' If it is grayed out, you may first need to set 'OS Type' to 'Windows UEFI mode' or disable 'CSM (Compatibility Support Module)' or 'Legacy Boot' options.
- Save the changes to the UEFI settings and exit. The computer will restart.
- Once Windows 10 has loaded, run the PC Health Check application to confirm that Secure Boot is now recognized as enabled.
4Convert Disk to GPT Partition Style
- Open the Start Menu, type 'cmd', right-click on 'Command Prompt', and select 'Run as administrator'.
- In the Command Prompt window, type 'mbr2gpt /validate' and press Enter. This command checks if your disk can be converted without data loss. If it shows 'Validation completed successfully', proceed to the next step.
- If validation is successful, type 'mbr2gpt /convert' and press Enter. This command will convert your disk from MBR to GPT.
- After the conversion completes, restart your computer and enter the UEFI/BIOS settings. Ensure that the boot mode is set to 'UEFI' and not 'Legacy' or 'CSM'.
- Save and exit the UEFI settings. Windows should now boot in UEFI mode, which is a prerequisite for Secure Boot.
Frequently Asked Questions
What is TPM 2.0 and why is it required for Windows 11?
TPM 2.0 (Trusted Platform Module) is a cryptographic processor that provides hardware-based security functions. Windows 11 requires it to enhance security by protecting encryption keys, user credentials, and other sensitive data, making the operating system more resilient against malware and cyberattacks.
What is Secure Boot and why is it necessary for Windows 11?
Secure Boot is a security standard developed by members of the PC industry to help ensure that a device boots using only software that is trusted by the OEM (Original Equipment Manufacturer). When the PC starts, the firmware checks the signature of each piece of boot software, including firmware drivers, EFI applications, and the operating system. If the signatures are valid, the PC boots. This prevents malicious software from loading during the startup process, which is a key security feature for Windows 11.
Can I install Windows 11 if my CPU is not officially supported?
While it is technically possible to bypass the CPU requirement during installation, Microsoft does not officially support or recommend this. Systems with unsupported CPUs may not receive critical security updates or feature updates, and performance or stability issues could arise. Proceeding with an unsupported CPU is at the user's own risk.
Will enabling TPM 2.0 or Secure Boot delete my data?
No, enabling TPM 2.0 or Secure Boot in your UEFI/BIOS settings typically does not delete any data from your hard drive. These are firmware settings that control how your system boots and handles security. However, it is always recommended to back up important data before making significant system changes.