win11 without TPM 2 "will not receive security updates"?

Njem Njem 41 Reputation points
2022-01-26T18:23:57.01+00:00

At an MS article site:
https://answers.microsoft.com/en-us/windows/forum/all/frequently-asked-questions-windows-11/c97076fc-f361-44ec-9a01-33029ffaa987
it says if you bypass objections to your system not having one of the approved processors on not having TPM 2 and install win11 anyway, "If your system is not compatible with Windows 11, you might be able to still be able to install the upgrade, but this might require performing clean install using Media Creation Tool or ISO file. This also means Windows 11 will not receive security updates. "
What!? This can't be right?
And what about doing a clean install in the first place? I haven't needed (wanted) to do that yet so in that situation if I don't first run the compatibility checker (I don't even know if you can from an install stick) does it warn this is an unapproved processor or doesn't have TPM 2? Could I just blunder into setting up a system that will "not receive security updates."?

Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
8,164 questions
0 comments
Accepted answer
  1. Docs 15,141 Reputation points
    2022-01-26T22:16:36.893+00:00

    It is not "will not receive" but "may not receive"

    Yes, you can create a system to use Windows 11 in an unsupported fashion.

    The uncertainty always remains whether there will be working Windows or Microsoft Defender updates.

    Many end users have reported no problems as of 01/26/2022.

    These links may be useful:

    https://blogs.windows.com/windows-insider/2021/08/27/update-on-windows-11-minimum-system-requirements-and-the-pc-health-check-app/

    https://support.microsoft.com/en-us/windows/installing-windows-11-on-devices-that-don-t-meet-minimum-system-requirements-0b2dc4a2-5933-4ad4-9c09-ef0a331518f1

    https://www.elevenforum.com/t/bypass-windows-11-tpm-2-0-and-cpu-system-requirements.1989/

    .
    .
    .
    .
    .

    Please remember to vote and to mark the replies as answers if they help.

    On the bottom of each post there is:

    Propose as answer = answered the question

    On the left side of each post there is /\ with a number: click = a helpful post
    .
    .
    .
    .
    .

    1 person found this answer helpful.
    0 comments

4 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. sudip 76 Reputation points
    2022-01-26T19:20:05.783+00:00

    Yes you will be warned and installation will not proceed doesn't matter if its an upgrade or clean install.

    0 comments
  2. Njem Njem 41 Reputation points
    2022-01-26T20:59:24.677+00:00

    Thanks. This would be knew info too though. For months I've read you can bypass the processor issue or the TPM issue by doing a clean install and telling it to proceed regardless, and I have fellow techs who have already been doing this. Has MS changed this and blocked this? Did they announce this anywhere?

    0 comments
  3. Limitless Technology 39,351 Reputation points
    2022-01-27T09:48:44.32+00:00

    Hello NjemNjem,

    Yes, this is correct. This is intended for evaluation / sandbox usage. You can always download the latest version (security updates included) from the Microsoft Media creation site, but will not allow to update further due to security concerns on the usage.

    About installing from scratch, the USB media seems to be the simplest one (ISO option would require advanced usage of MDT and Task Sequence configuration).

    For USB media install:

    1. Start the unsupported PC with the Windows 11 USB flash drive.

    Press any key to continue.

    1. Use the Shift + F10 keyboard shortcut to open Command Prompt.

    Type the following command and press Enter:

    regedit

    1. Navigate the following path:

    HKEY_LOCAL_MACHINE\SYSTEM\Setup
    Right-click the Setup (folder) key, select New, and then Key option.

    1. Name the key LabConfig and press Enter.
    2. Right-click the LabConfig (folder) key, select New, and then the DWORD (32-bit) Value option.

    Name the key BypassTPMCheck and press Enter.

    1. Double-click the newly created key and set its value from 0 to 1.

    Click the OK button.

    1. Right-click the LabConfig (folder) key, select New, and then the DWORD (32-bit) Value option.

    Name the DWORD BypassSecureBootCheck and press Enter.

    Double-click the newly created key and set its value from 0 to 1.

    1. Click the OK button. Click the Next button to continue the install process

    --If the reply is helpful, please Upvote and Accept as answer--

    0 comments
  4. Njem Njem 41 Reputation points
    2022-01-27T19:34:43.42+00:00

    LimitlessTechnology-2700, so you're disagreeing with Docs 4663? They seemed to be saying it's possible some updates might not apply nevertheless "many" users have had no such problem. Your making it sound like there would be no updates. We might need to separate the case of unsupported processors from the case of no TPM2. I suppose those might give different results. Sure would be nice if MS would make some clear statement on it. Of course if they did it would be the CYA "use only on fully approved systems". The issue is I've already used it on a couple of my old test systems just to try win11 even though they had unapproved processors. That made it look like lots of my clients' current systems could be upgraded (whenever it's really ready) without having to buy new, especially since some of these are plenty fast and recent systems that the clients' would have a cow about having to throw out. So this trick of installing on unapproved, if it should go ahead and proceed with the install at all, ought to have a big ol' warning "Okay, you can have win11, but you're not getting security updates!" Instead I've been using these test systems for months now, and some fellow IT people have their clients already on systems they upgraded, and never a hint of "no updates" until I stumbled on one line in one article. Talk about setting a trap.

    0 comments