Reports today that Windows11 TPM can be bypassed with Registry hack

scopio · Jul 2, 2021

Reports in Bleepingcomputer that Registry entries have been discovered that allow you to bypass the TPM requirement and minimum memory and secure boot requirements.
How to bypass the Windows 11 TPM 2.0 requirement
Not that I would.

magilla · Jul 2, 2021

scopio said:
Reports in Bleepingcomputer that Registry entries have been discovered that allow you to bypass the TPM requirement and minimum memory and secure boot requirements.
How to bypass the Windows 11 TPM 2.0 requirement
Not that I would.

I did this registry hack and it did not work—still got the message of failure because no tpm 2.0 present.

NoSmoke · Jul 2, 2021

magilla said:
I did this registry hack and it did not work—still got the message of failure because no tpm 2.0 present.

So did I - no cigar. Still says I need TPM and Secure Boot.

magilla · Jul 2, 2021

NoSmoke said:
So did I - no cigar. Still says I need TPM and Secure Boot.

I have two computers which have no tpm, no UEFI, are legacy but I have downloaded win 11 from win update and no problems. The computer I cannot get win 11 to install has secure boot, 16 gb. Ram no tpm AND THE NO TPM is what stops the install

BunnyJ · Jul 2, 2021

The TPM is located in the BIOS and you would have to change the settings there before you can install the OS. You can't trick the BIOS from the registry

magilla · Jul 2, 2021

BunnyJ said:
The TPM is located in the BIOS and you would have to change the settings there before you can install the OS. You can't trick the BIOS from the registry

And my bios does not have tpm.

FreeBooter · Jul 2, 2021

That trick only works for clean installing Windows 11 i have created tutorial for bypassing TPM requirement while upgrading.

BunnyJ · Jul 2, 2021

magilla said:
And my bios does not have tpm.

That's going to be a huge issue the instillation will check the BIOS first and bypass and tweaks to the registry. I don't like the requirement I don't think MS is going to cut it from any future builds.

NoSmoke · Jul 2, 2021

FreeBooter said:
That trick only works for clean installing Windows 11 i have created tutorial for bypassing TPM requirement while upgrading.

I don't understand this. Are you saying the Win 11 ISO should be placed on a bootable USB and installed from there? If so, how would you make any registry changes??

jh30uk · Jul 2, 2021

Assume part of Windows set up is already written to the SSD/HDD by then so you can.

NoSmoke · Jul 2, 2021

jh30uk said:
Assume part of Windows set up is already written to the SSD/HDD by then so you can.

Huh? How on earth would that work? The install doesn't proceed until the compatibility check is satisfied, no? If part of Windows is already written, how would you interrupt the process to change a registry??

BunnyJ · Jul 2, 2021

NoSmoke said:
Huh? How on earth would that work? The install doesn't proceed until the compatibility check is satisfied, no? If part of Windows is already written, how would you interrupt the process to change a registry??

I guess the assumption is that the instillation process will check the registry rather than the BIOS when it checks for compatibility and I doubt it does that. The instillation would likely check the BIOS for compatibility not the registry

I doubt there's anyway to spoof the TPM setting other than chancing a file in the ISO file and that's a hit or miss process basically.. it's either 2.0 or it's not.

BunnyJ · Jul 2, 2021

jh30uk said:
Assume part of Windows set up is already written to the SSD/HDD by then so you can.

The instillation will check the BIOS before it writes anything to the system and if the TPM isn't 2.0 the setup will fail

NoSmoke · Jul 2, 2021

BunnyJ said:
I guess the assumption is that the instillation process will check the registry rather than the BIOS when it checks for compatibility and I doubt it does that. The instillation would likely check the BIOS for compatibility not the registry

I doubt there's anyway to spoof the TPM setting other than chancing a file in the ISO file and that's a hit or miss process basically.. it's either 2.0 or it's not.

Yeah, in a "clean" install there is initially no registry to check so the install s/w would have to check the BIOS for compatibility, I think.

As well, even if the install worked (initially), what happens afterward when Win 11 looks to use the TPM and Secure Boot functions?

BunnyJ · Jul 2, 2021

NoSmoke said:
Yeah, in a "clean" install there is initially no registry to check so the install s/w would have to check the BIOS for compatibility, I think.

As well, even if the install worked (initially), what happens afterward when Win 11 looks to use the TPM and Secure Boot functions?

Clean install or update the setup goes to the BIOS and not the registry. There no way you can just add an entry to the registry and spoof the test. It has to go to the BIOS and adding a entry to the registry will not get passed onto the BIOS. I would hate to think about the outcome if you could do something like that.

This is from the article and it makes no sense to me at least. You would want to spoof the hardware requirement.. the system wouldn't work,, crazy people wrote that me thinks

NavyLCDR · Jul 2, 2021

The registry entries do not spoof anything. Read what the DWORDS are! "BYPASS". Just this afternoon I turned off TPM in my BIOS on a Dell 7773 laptop computer. I boot from a Windows 11 USB flash drive. I received the error that my hardware was incompatible with Windows 11, just like I should. I clicked on the X in the upper right corner of the error message and went back to the original install screen where it asks for language. I pressed Shift + F10 to get a command prompt. I ran regedit. I imported my .reg file stored on the same USB flash drive:

Code:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig]
"BypassTPMCheck"=dword:00000001
"BypassSecureBootCheck"=dword:00000001

I exited the command prompt and clicked next in setup that was still open. Then the install of Windows 11 proceeded without a hitch and I am posting from that install of Windows 11 right now. The registry keys do not spoof the existence of TPM when there is none. The registry keys cause the Windows 11 setup program to bypass the check for TPM and Secure Boot. Give me a little bit and I will try it on an upgrade from Windows 10 to Windows 11.

magilla · Jul 2, 2021

NavyLCDR said:
The registry entries do not spoof anything. Read what the DWORDS are! "BYPASS". Just this afternoon I turned off TPM in my BIOS on a Dell 7773 laptop computer. I boot from a Windows 11 USB flash drive. I received the error that my hardware was incompatible with Windows 11, just like I should. I clicked on the X in the upper right corner of the error message and went back to the original install screen where it asks for language. I pressed Shift + F10 to get a command prompt. I ran regedit. I imported my .reg file stored on the same USB flash drive:

Code:

Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig] "BypassTPMCheck"=dword:00000001 "BypassSecureBootCheck"=dword:00000001

I exited the command prompt and clicked next in setup that was still open. Then the install of Windows 11 proceeded without a hitch and I am posting from that install of Windows 11 right now. The registry keys do not spoof the existence of TPM when there is none. The registry keys cause the Windows 11 setup program to bypass the check for TPM and Secure Boot. Give me a little bit and I will try it on an upgrade from Windows 10 to Windows 11.

Thank you,NavyLCDR. Yes, I did reread the message this afternoon and did a 'clean install' and did what you said above. And, it worked. I am typing on the mail in Windows 11. I am very happy. This laptop has been a very difficult install. I have 1 machine that has TPM 2.0 and one that has UEFI and secure boot but no TPM. Those two machines installed immediately. I have two machines that have nothing but legacy bios setups and nothing else except RAM standards. They too installed with minimal problems. But the laptop has Secure Boot and 16 GB RAM but NO TPM. Now all of them are running Windows 11, thanks to the registry 'hack'

Berton · Jul 2, 2021

I didn't make any change to my Win10 Insider Preview Dev channel lately but overnight my computer got 'updated' to Win11. The computer does not have support for TPM and it does not support UEFI but still got updated. The CPU is not on any list I've seen. Looks like we will see there's a lot of small changes, a couple I've already see is the PowerShell on the Start menu was replaced by Windows Terminal which has lost the Properties where one can make visual changes [Command Prompt is still the same] and the Peek on the Taskbar was gone. Also changed but not a big issue is the layout of the features in Settings.

Also, this forum looks like the pages at Windows 10 Forums on Firefox, layout, icons, etc.

NavyLCDR · Jul 2, 2021

So I just tried upgrading Windows 10 to Windows 11 using setup.exe in a mounted Windows 11 ISO file. No go with TPM disabled. I get the error message, even with the registry entries made. But they did work for a clean install. I have not tried upgrading from Windows Update yet.

NavyLCDR · Jul 2, 2021

Windows Update is a no-go with the registry hack as well. I get the TPM 2.0 error message. So it seems like the registry hack, by itself, only works on clean installs - at least on my computer.