You are currently viewing How to Fix TPM And Secure Boot requirements for Windows 11 upgrade
SOLVED: TPM 2.0 & Secure Boot, UEFI requirements for Windows 11.

How to Fix TPM And Secure Boot requirements for Windows 11 upgrade

As Windows 10 retirement deadline approaching, lots of people might end up with issues, trying to Fix TPM And Secure Boot requirements for Windows 11 Upgrade. As we all know, there are two major requirements:

  • TPM 2.0
  • Secure Boot – UEFI

Windows 11 upgrade - List of common issues

And here is list of few common issues we are getting to know:

  • TPM 2.0 module not supported
  • Secure Boot greyed out asus
  • mbr to gpt conversion without data loss
  • mbr2gpt cannot find os partition(s) for disk 0
Secure Boot issue is somewhat related to MBR disk and that needs to be converted to GPT. And this is where lots of issues occurring specially in cases where current Windows 10 was upgraded from Windows 7.  This article will help deal with these issues in readiness for Windows 11 Upgrade. 

Windows 11 upgrade - Hardware Requirements

Processor: 1 GHZ or faster with 2 or more cores on a compatible 64-bit processor
RAM:  4 gigabyte (GB).
Storage: 64 GB or larger, GPT Volume
System firmware: UEFI, Secure Boot capable.
TPM: Trusted Platform Module (TPM) version 2.0. 
Windows 11 requirements TPM Secure Boot UEFI
Windows 11 requirements TPM Secure Boot UEFI

Issue # 1 Windows 11 Upgrade
TPM 2.0 not supported

Hardware Details

i7-8700K, Asus PRIME Z370-A, 

32 GB RAM, 500GB SSD (GPT), Windows 10 pro

Solution

I found this  relatively easy and straight forward. No need to buy any third party TPM hardware. Simply upgrade to latest version of motherboard BIOS firmware. In my case, I upgraded BIOS from version 1802 to latest version 3004 using ASUS AI Suite 3 and that enabled TPM 2.0 by default. Here is official guide on how to update ASUS motherboard BIOS. 

Summary: It’s advisable to update BIOS before looking at options to upgrade motherboard or buying third party TPM hardware.

Issue # 2 Windows 11 Upgrade
This PC must support Secure Boot

Hardware Details

AMD Ryzen 5 3600, Asus ROG STRIX B450-F GAMING II (AM4), 

16 GB RAM, 500GB SSD (MBR), Windows 10 pro

Go to System Information and here we see Secure Boot not supported due to BIOS Mode being Legacy. To enable secure boot, we first need to change BIOS Mode to UEFI. And to change to UEFI mode, our disk must be GPT.

BIOS MODE Legacy UEFI Secure Boot
BIOS MODE Legacy UEFI Secure Boot

Solution

In this case, Windows 10 pro PC was upgraded from Windows 7 pro. Also we see Windows Volume is an Master Boor Record (MBR) partition. Hence First, this partition needed to be converted to GUID Partition Table (GPT), without data loss, before we could enable UEFI mode in order to enable secure boot. For this I used Microsoft utility MBR2GPT.EXE disk conversion utility located in the Windows\System32 directory on Windows 10 computer. 

Step 1: As this procedure involves playing with disk, Backup  personal files and folders.
Step 2: Go to Disk Management and verify Partition Style is MBR as in screenshot below. If this is already GPT then jump to step 9.

Disk Management MBR To GPT conversion
Disk Management MBR To GPT conversion
 

Step 3: There shouldn’t be more then 2 partitions. In simple words, I had only 2 partition – System Reserved and Boot Partition (C:) as seen in above screenshot. If you have another partition, let’s say (D:), I will advice to  backup files on D: drive, delete partition D: and expend C: to re-claim free space. 

Note: Drive letters might be different on your computers. 

Step 4: Create bootable installation USB or use Recovery Disk if you already have. Click here for the procedure to create Windows 10 installation media.

Step 5: Insert bootable USB Disk. Boot, press F2 or DEL on ASUS motherboard. Change boot order and boot from USB installation or recovery media. Click on Repair your computer >> Go to Advance Options >> Click on Command Prompt or simply press Shift + F10 to start command prompt.

Windows 10 Advance Options Menu TPM 2.0 Secure Boot MBR to GPT Conversion
Windows 10 Advance Options Menu
 

Step 6:  Once you are in command prompt, type below command:

>DISKPART

DISKPART> list disk

  Disk ###  Status         Size     Free     Dyn  Gpt

  ——–  ————-  ——-  ——-  —  —

  Disk 0    Online          100 GB  1024 KB

Note down Disk ID, in this case we have only one disk with ID 0. If you have multiple disk, then make sure to select DISK ID on which Windows OS is installed.
 
Step 7:  Now run these 2 commands as in screenshot below:
 
Make sure you supply right disk ID, in this case it’s 0
 
> mbr2gpt /validate /disk:0
 
Step 8: If the validation is successful, then go ahead and convert disk to GPT as below:
 
> mbr2gpt /convert /disk:0
 
Screenshot for reference:
 
mbr2gpt validate convert mbr to gpt windows 11 uefi secure boot
mbr2gpt validate convert mbr to gpt windows 11 uefi secure boot

 

Step 9: If the MBR to GPT conversion is successful then go ahead, restart system, boot into BIOS and change Boot Mode to UEFI.

Asus Rog Strix B-450 II Gaming UEFI Secure boot Windows 11
Asus Rog Strix B-450 II Gaming UEFI Secure boot Windows 11

 

Step 10: Save BIOS settings and restart computer to boot into Windows. Changes should reflect in System Information, as below in screenshot:

UEFI Secure Boot Windows 11
UEFI Secure Boot Windows 11

 

 Few Important Notes:

No need to panic, if mb2gpt validation fails during this process with error:

Cannot find OS partition(s) for disk 0

This is most likely if your current Windows 10 was upgraded from Windows 7. 

 

MBR2GPT Cannot find OS Partition for Disk
MBR2GPT Cannot find OS Partition for Disk

 

In this case, we will need to remove bad entries from boot configuration. Here is short video for guidance. 

Hope this article was helpful and hope your Windows 11 upgrade goes well. 

Thank you!

 

Spread the love

team_cicdtrail

Only for Editorials, blogs and articles.

This Post Has One Comment

Leave a Reply