How to Install Windows 11 on a Virtual Machine Without TPM 2.0 and Secure Boot Checks

If you want to install Windows 11 on a virtual machine (e.g., using VirtualBox or VMware), but you're facing issues with the system requiring TPM 2.0 and Secure Boot, don't worry — there's a way to bypass these requirements. In this article, we'll guide you through the steps to install Windows 11 while disabling these checks.

Step 1: Create a Virtual Machine

The first step is to create a virtual machine using your preferred hypervisor. We'll use VirtualBox as an example, but similar steps can be followed in other programs.

  1. Open VirtualBox and click "New" to create a new virtual machine.
  2. Give your VM a name (e.g., "Windows 11"), select "Windows" as the operating system type, and choose "Windows 10 (64-bit)" as the version, since Windows 11 is not officially supported in VirtualBox yet.
  3. Allocate the desired amount of RAM and create a virtual hard disk for the operating system.

Step 2: Disable TPM 2.0 and Secure Boot

Now that the virtual machine is created, you need to tweak its settings to bypass TPM and Secure Boot checks.

For VirtualBox

  1. Select your VM from the list and click on "Settings".
  2. Go to the "System" tab and uncheck the "Enable Secure Boot" option (if available).
  3. To disable TPM 2.0, open a terminal or command prompt and run the following command: 
    VBoxManage modifyvm "Windows 11" --chipset ich9
  4. You can also disable virtualization by running the following command: 
    VBoxManage modifyvm "Windows 11" --cpu-profile "None"

For VMware

  1. Open the VM settings, then go to "Options" and select "Advanced".
  2. Enable the option "Force VM to Use a Virtual Machine with Legacy Firmware" and disable Secure Boot.
  3. For TPM 2.0, simply avoid adding a TPM device when setting up the machine, as it is not enabled by default in VMware.

Step 3: Modify the Registry to Bypass TPM and Secure Boot Checks

Next, in order for Windows 11 to install successfully, you'll need to make changes to the registry during the installation process. Here's how:

  1. When the Windows 11 installer loads, press Shift + F10 to open the command prompt.
  2. Type the command: 
    regedit
  3. Navigate to HKEY_LOCAL_MACHINE\SYSTEM\Setup and create a new key named LabConfig.
  4. In this key, create two new DWORD values:
    • BypassTPMCheck — set value to 1
    • BypassSecureBootCheck — set value to 1

Step 4: Install Windows 11

Once the registry changes are made, you can proceed with the Windows 11 installation as usual. The system should begin installing without any issues related to TPM 2.0 or Secure Boot. Keep in mind that, despite bypassing these requirements, the system will function normally.

Step 5: Complete the Installation and Configuration

Once the installation is complete, you can configure Windows 11 on your virtual machine just like a regular OS. All features, including updates and security, will work properly even though TPM 2.0 and Secure Boot were disabled.