On October 14, 2025, Microsoft will cease security updates for Windows 10 PCs unless users opt into the Extended Security Updates program. For those attempting to upgrade to Windows 11 on machines older than five years, a familiar error message will likely appear, indicating that the CPU does not meet the compatibility criteria. Microsoft has firmly stated that it will not amend these requirements, which also include the necessity for a Trusted Platform Module (TPM) version 2.0.
While this may seem like a rigid policy, the intricacies of Windows often reveal alternative paths. Although these restrictions hinder automatic upgrades via Windows Update or the Installation Assistant, various documented workarounds exist for most PCs originally designed for Windows 10. Over the past two years, Microsoft has engaged in a game of cat-and-mouse with tech enthusiasts, introducing occasional hurdles to complicate the bypassing of compatibility checks. While many modern PCs can navigate these challenges, older devices, particularly those utilizing AMD processors, may face limitations.
Which option should you choose?
Please don’t skip over this section. This article outlines two upgrade options, each requiring specific prerequisites.
- The computer must be set to boot using UEFI rather than a legacy BIOS configuration.
- Secure Boot must be supported, though it does not need to be enabled (it is advisable to enable it).
- A TPM must be enabled; version 1.2 is acceptable, but systems without any TPM or with the TPM disabled will not succeed. Most PCs designed for Windows 10 should include a TPM.
To verify these details on your PC, utilize the System Information utility (Msinfo32.exe) and examine the System Summary page. Pay close attention to the BIOS Mode value; if it indicates “Legacy,” a reconfiguration to UEFI mode will be necessary. Additionally, to check for an enabled TPM, run the Trusted Platform Module Management tool (Tpm.msc). If your computer has a TPM that is active, this tool will display relevant information. A message stating “Compatible TPM cannot be found” indicates either the absence of a TPM or that it is disabled in firmware settings.
If changing from Legacy BIOS to UEFI is not an option, or if your older PC lacks a TPM, the second option involves an undocumented hack that allows you to bypass compatibility checks and complete the upgrade. Details on using the free Rufus utility for this process can be found in the subsequent sections.
It is important to note that a new set of restrictions introduced with the Windows 11 version 24H2 update requires a CPU that supports specific instructions, namely SSE4.2 and PopCnt. This makes it impossible to upgrade to Windows 11 version 24H2 on PCs built in 2008 or earlier. Most Intel CPUs from 2009 onward should meet this standard, as should AMD CPUs from 2013 and later.
Option 1: Use this simple registry edit
This option allows users to bypass CPU checks and accept any TPM version through a simple registry edit. Please note that this method requires running the Setup program from within the current Windows installation; booting from a USB flash drive will not work for this upgrade.
The process involves four steps:
- Open Registry Editor (Regedit.exe) and navigate to the following key: HKEYLOCALMACHINESYSTEMSetupMoSetup. If the MoSetup key does not exist, create it by right-clicking on the Setup node, selecting New > Key, naming it MoSetup, and pressing Enter.
- Select the MoSetup key, right-click in the empty space on the right pane, and create a new DWORD value. Name it AllowUpgradesWithUnsupportedTPMOrCPU and set its value to 1.
- Download the Windows 11 Disk Image (ISO) from Microsoft’s official site and save it in your Downloads folder.
- After making the registry change, proceed with the upgrade process, choosing between three options: Full Upgrade, Keep Data Only, or Clean Install.
For those opting for a clean installation, booting from installation media will bypass the CPU compatibility check entirely, but TPM and Secure Boot support remain prerequisites. After installation, users will need to reinstall applications, restore data files, and adjust settings to their preferences.
Should you choose to utilize the Rufus utility for the second option, ensure you download the latest version and follow the outlined steps to create a bootable USB drive that circumvents compatibility checks. However, be aware that even Rufus cannot bypass the new restrictions for very old CPUs lacking support for SSE4.2 and PopCnt instructions.
As you navigate these options, your experiences and insights are invaluable. Should you encounter challenges or have success stories to share, feedback is welcomed at Win11Upgrade [at] realworldwindows.com.
This article was originally published on April 9, 2022, and has been updated multiple times, with the latest update on April 15, 2025.
