Windows 11 Compatibility Check Fails – Real Fix That Works

Your PC Says It Can't Run Windows 11? Let's Fix It

It's annoying when Windows 11 tells you your PC isn't compatible, especially if you just bought it. But here's the thing: most of the time, the hardware is fine—Microsoft's check is just picky about two settings that are often turned off by default. Let's skip the frustration and get to the fix.

The Real Fix: Turn On TPM 2.0 and Secure Boot in BIOS

Do this step by step. You'll need to restart your PC a couple of times.

1. Restart your PC. As it boots, spam the key to enter BIOS or UEFI firmware. Common keys: F2, Del, F10, Esc. Watch the screen for a message like "Press F2 to enter setup."
2. Once inside, look for a tab called Security, Advanced, or Boot. It varies by motherboard. The option you're after is TPM (sometimes called "Intel Platform Trust Technology" on Intel CPUs or "AMD fTPM" on AMD chips). Set it to Enabled or On.
3. Next, find Secure Boot. On most modern motherboards, it's in the Boot tab. Set it to Enabled. If you see an option for OS Type, set it to Windows UEFI Mode.
4. Save your changes and exit (usually F10). The PC will restart.
5. Now, open the Windows 11 Compatibility Check app again (search "PC Health Check" in the Start menu) and run it. It should pass. If not, reboot once more and try again.

That's it. 9 times out of 10, this is the only thing you need to do. The check is looking for TPM 2.0 and Secure Boot, and they were just sitting there, disabled.

Why This Works

Microsoft's Windows 11 requirement for TPM 2.0 isn't about performance. It's about security. TPM is a chip on your motherboard that stores encryption keys. Windows 11 uses it for stuff like BitLocker and secure login. Without it, the OS can't guarantee that your system hasn't been tampered with. Secure Boot does a similar thing—it checks that only trusted software runs during boot.

The reason step 3 works is because many pre-built PCs (especially from Dell, HP, Lenovo) ship with these features disabled in BIOS to avoid compatibility issues with old hardware or Linux dual boots. So the hardware is there, it's just hidden. What's actually happening here is that Microsoft's compatibility check is reading the BIOS settings, not the hardware capability. Flip the switches, and the check sees what it wants.

Less Common Variations of the Same Issue

If the above fix didn't work, don't panic. There are a few other things that can block Windows 11.

1. Your PC is in Legacy BIOS Mode Instead of UEFI

Windows 11 requires UEFI mode. If your disk drive is formatted as MBR (Master Boot Record) and you're using legacy BIOS, the check will fail. Here's how to check:

• Open Disk Management (right-click Start > Disk Management).
• Right-click on your main drive (usually C:) and select Properties.
• Go to the Volumes tab. Look at Partition style. If it says MBR, you're in legacy mode. If it says GPT, you're in UEFI.

If it's MBR, you can convert it to GPT without losing data using Microsoft's mbr2gpt.exe tool. Run this as admin:

mbr2gpt.exe /convert /allowFullOS

After the conversion, go into BIOS and change the boot mode from Legacy to UEFI. Then enable Secure Boot.

2. Your CPU is Supported, But the Check Still Fails

Some older CPUs (like 7th-gen Intel Core) are technically supported but Microsoft's list is weird. If you have a CPU from 2017 or later (Intel 8th-gen or newer, AMD Ryzen 2000 or newer), you can sometimes bypass the check entirely by installing Windows 11 using a registry hack. Download the official Windows 11 ISO, run setup, and when it says "This PC can't run Windows 11," press Shift+F10 to open a command prompt. Then type:

reg add HKLM\SYSTEM\Setup\LabConfig /v BypassTPMCheck /t REG_DWORD /d 1 /f
reg add HKLM\SYSTEM\Setup\LabConfig /v BypassSecureBootCheck /t REG_DWORD /d 1 /f

Close the command prompt, click the back arrow on the setup window, and try again. This works because it tells the installer to skip those checks. But I'd only do this if your CPU is on the supported list—otherwise you might get no updates later.

3. TPM is Disabled in Windows Itself

Rare, but possible. Open Device Manager, look for Security devices. If you see something like "Trusted Platform Module 2.0" with a yellow exclamation mark, right-click it and choose Enable device. Then reboot and run the check again.

How to Prevent This in the Future

If you're building a new PC or buying a pre-built, always check the BIOS before installing Windows 11. Most modern motherboards ship with TPM off by default. When you first boot the system, go into BIOS and turn on TPM and Secure Boot. Also make sure the boot mode is UEFI, not Legacy. Do this before you even install Windows, and you'll never see that compatibility error again.

For existing PCs that you upgrade, keep a note of these BIOS settings. After major BIOS updates (which some manufacturers push automatically), TPM and Secure Boot sometimes reset to disabled. So check them after any BIOS update. That's the main reason people suddenly get the error out of nowhere.

That's pretty much it. Your PC almost certainly can run Windows 11—it just needs a tiny push in the right direction.