Can I Update My Old Computer to Windows 11 — and How Much Will It Cost?

Your i7, 16GB RAM, 512GB SSD machine is powerful enough to run Windows 11 comfortably. The TPM 2.0 and Secure Boot wall is a security checkbox, not a performance ceiling. Here are two proven ways to get past it, what each one costs, and what you are trading away by doing so.

Cost of the Windows 11 licence if your existing Windows 10 is genuine — the upgrade remains free in 2026

Proven methods to bypass TPM 2.0 and Secure Boot — Rufus (easy) and Registry edit (manual)

25H2

Current Windows 11 version — all known bypass methods tested and confirmed working as of July 2026

Oct 2025

Windows 10 end of life — no more security updates. Staying on Windows 10 now carries real risk.

First — Check Your BIOS Before Anything Else

You Might Not Actually Need a Bypass

Before running any bypass, open your BIOS and look at two settings. Many computers that fail the Windows 11 compatibility check have TPM 2.0 present in the hardware but disabled in firmware, or have Secure Boot turned off from a previous configuration change. Intel calls their built-in TPM "PTT" (Platform Trust Technology). AMD calls theirs "fTPM" (Firmware TPM). Both are enabled in the BIOS under a Security or Advanced section and take about 30 seconds to turn on.

Restart your computer and press the key that opens your BIOS — usually Delete, F2, F10, or F12 depending on the manufacturer (it will flash on screen during the first second after power-on). Look for a Security tab, an Advanced tab, or a menu item called Trusted Computing. Enable PTT or fTPM, save, exit, and run the Microsoft PC Health Check tool again. For Secure Boot, look in the Boot menu — it just needs to be enabled. If your BIOS is set to Legacy/CSM mode, you may need to switch to UEFI mode first, which is a more involved process that carries risk of data loss if not done carefully.

If enabling TPM and Secure Boot in BIOS resolves the compatibility check, your upgrade is free and fully official — skip the rest of this guide and upgrade via Settings → Windows Update. If your hardware genuinely does not have TPM 2.0 at all (common on pre-2016 machines), read on.

Figure 1 — Windows 11 requirements vs your PC specs: performance requirements easily met, security checks are the only barrier

Performance requirements are passed with plenty of margin — only the two security feature checks are blocking the upgrade

Understanding the Risk

What the Bypass Actually Does — and What You Are Trading Away

Before choosing a bypass method, it is important to understand what skipping TPM 2.0 and Secure Boot actually means for your system. These are not arbitrary marketing checkboxes — they are security features that protect your computer in specific ways.

TPM 2.0 (Trusted Platform Module) is a hardware chip — or firmware equivalent — that stores cryptographic keys and certificates used to verify system integrity. It underpins Windows Hello facial recognition and fingerprint login, BitLocker full-disk encryption, and a range of other security features. Without it, those features either do not work or work in a degraded mode.

Secure Boot prevents unauthorised operating systems and bootloaders from loading during startup. It means that if malware tries to embed itself into the boot process, the firmware will refuse to load it. Without Secure Boot, this protection is absent.

On a home PC used for browsing, media, gaming, and productivity tasks — where you are not handling sensitive corporate data, where BitLocker is not a requirement, and where you maintain good security habits (strong passwords, Windows Defender enabled, regular updates) — the practical day-to-day impact of running without TPM 2.0 is small. Your computer will run Windows 11 normally. Windows Defender and all regular security patches will still work. You will just be missing the highest-tier hardware security layer.

The more significant concern is future Windows Update compatibility. Microsoft has warned that bypassed installations may not receive future major version upgrades (annual feature updates like 25H2 → 26H1). In practice, many users on bypassed installations have received multiple feature updates without issue — but this is not guaranteed and may tighten over time.

Figure 2 — The two bypass paths: Rufus (recommended) vs Registry method, compared side by side

Both methods produce the same result — an activated Windows 11 installation running on unsupported hardware. Rufus handles the hard parts automatically.

Method 1 — Recommended

Method 1: Rufus — The Easiest Way to Bypass TPM 2.0 and Secure Boot

Rufus is a free, open-source bootable USB creation tool that has built-in support for bypassing Windows 11's hardware requirements. When you select a Windows 11 ISO in Rufus, it automatically offers to remove the TPM 2.0, Secure Boot, and RAM checks — all through a simple checkbox interface. No registry editing, no command-line work, no risk of a typo breaking the installation. This is the method most experienced users recommend in 2026.

1

microsoft.com/en-us/software-download/windows11 → Download Windows 11 Disk Image (ISO)

Download the official Windows 11 ISO from Microsoft

Go to Microsoft's official Windows 11 download page. Under Download Windows 11 Disk Image (ISO) for x64 devices, select Windows 11 (multi-edition ISO for x64 devices), choose your language, and download the ISO file. It is approximately 6.5GB. Only download the ISO from Microsoft's official site — modified ISOs from third-party sites carry real malware risk. The Rufus bypass works with the official unmodified Microsoft ISO.

While the ISO downloads, prepare an 8GB or larger USB drive. Everything on the USB drive will be erased during this process — back up anything on it first.

2

rufus.ie → Download Rufus (free) → Run as Administrator

Download Rufus and select your ISO and USB drive

Download Rufus from rufus.ie (the current version as of July 2026 is Rufus 4.6). No installation is needed — Rufus is a single .exe file. Right-click it and select Run as administrator. In the Rufus interface: under Device, select your USB drive. Click SELECT and choose the Windows 11 ISO you downloaded in Step 1. The Partition scheme will auto-detect as GPT (correct for modern UEFI systems). Leave all other settings at default and click START.

3

Select the bypass options in the Windows User Experience dialog

After clicking START, Rufus shows a dialog titled Windows User Experience. This is where the bypass happens. Check the following options:

Remove requirement for 4GB+ RAM, Secure Boot and TPM 2.0 — this is the main bypass for your situation. Check this.

Remove requirement for an online Microsoft account — check this if you want to set up Windows 11 with a local account instead of signing in with a Microsoft account during installation. This is optional but recommended if you prefer not to link your PC to a Microsoft account.

Disable data collection (Skip privacy questions) — optional. Skips the telemetry and data collection screens during setup.

Click OK. Rufus will write the modified Windows 11 installer to your USB drive. This takes 10–20 minutes depending on your USB drive speed.

4

Insert USB → Restart PC → Boot from USB (press F12 / F8 / F11 at startup)

Boot from the USB and run the Windows 11 installer

Insert the USB drive. Restart your computer. Press the boot menu key as soon as the screen turns on — usually F12, F11, F8, or Esc depending on your motherboard (it will flash briefly on the screen). Select your USB drive from the boot menu. The Windows 11 installer will load. At the setup screen, you can choose:

Upgrade: Install Windows and keep files, settings and applications — this keeps your programs and files. Choose this if you want to keep your existing Windows 10 installation's apps and data.

Custom: Install Windows only (advanced) — this performs a clean install. Choose this for a fresh start. Back up your files before choosing this option.

The installation takes 30–60 minutes and restarts several times. Do not turn off the computer during this process.

5

Activate Windows 11 using your existing Windows 10 digital licence

Once Windows 11 finishes installing and you reach the desktop, it should activate automatically over the internet — your Windows 10 digital licence is tied to your motherboard's hardware signature and Microsoft's servers recognise it automatically when connected. You do not need to enter a product key. Go to Settings → System → Activation to confirm activation status. If activation does not happen automatically, click Troubleshoot in the Activation settings and follow the prompts.

Figure 3 — Rufus workflow: from ISO download to bootable USB with bypass options applied

The Rufus bypass dialog at Step 3 is the only difference between creating a normal Windows 11 USB and a bypass USB — everything else is identical

Method 2 — Registry Edit During Setup

Method 2 — Manual Registry Bypass

Method 2: Registry Edit During Windows Setup — Manual but No Extra Tools Required

This method modifies the Windows registry during the installation process itself — interrupting the setup wizard at the point where it shows the compatibility error, opening a command prompt, and adding registry keys that tell the installer to skip the TPM and Secure Boot checks. It requires no extra tools beyond a standard Windows 11 bootable USB (which can be created using Microsoft's own Media Creation Tool), but it is a more hands-on process with more steps where something can go wrong.

1

microsoft.com → Windows 11 → Create Windows 11 Installation Media

Create a standard Windows 11 bootable USB using Microsoft's Media Creation Tool

Download the Windows 11 Media Creation Tool from Microsoft's site. Run it, accept the licence terms, select Create installation media (USB flash drive, DVD, or ISO file) for another PC, confirm the language and edition, select USB flash drive, and let it create the installer. This is a standard Windows 11 USB with no bypass applied — the bypass happens manually during setup in the next steps.

2

Boot from the USB and wait for the compatibility error screen

Insert the USB, restart, boot from it (press F12 or your boot menu key). The Windows 11 installer will load and walk through the first screens (language selection, etc.). When it reaches the compatibility check, it will display: "This PC can't run Windows 11". Leave this screen open — do not close it or go back. The bypass happens from this exact screen. If you close it or navigate away, you will need to restart the installer.

3

From the error screen → Press Shift + F10 → type regedit → press Enter

Open Registry Editor from the compatibility error screen

While the "This PC can't run Windows 11" screen is showing, press Shift + F10 simultaneously. This opens a Command Prompt window. Type regedit and press Enter. The Registry Editor opens. You are now going to add entries that tell the installer to skip the TPM and Secure Boot checks.

4

Navigate to the Setup key and create the LabConfig bypass entries

In Registry Editor, expand the left panel to navigate to: HKEY_LOCAL_MACHINE → SYSTEM → Setup. Right-click on Setup, select New → Key, and name it exactly LabConfig (case sensitive). Click on the new LabConfig key. In the right pane, right-click empty space and select New → DWORD (32-bit) Value. Create the following values, setting each to 1:

• BypassTPMCheck → value: 1

• BypassSecureBootCheck → value: 1

• BypassRAMCheck → value: 1 (optional — only needed if RAM is under 4GB)

Close Registry Editor and close the Command Prompt. Click the Back button on the compatibility error screen and proceed through the installer normally.

5

Alternative: Registry edit as an in-place upgrade from within Windows 10

If you want to upgrade without booting from USB — keeping your files and applications in place — you can apply the registry fix directly in Windows 10 before running the Windows 11 installer. Open Registry Editor as administrator in Windows 10, navigate to HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup, create a new DWORD value named AllowUpgradesWithUnsupportedTPMOrCPU and set it to 1. Then download and run the Windows 11 Setup directly from the Microsoft site. This approach skips the USB boot step entirely and is convenient for an in-place upgrade.

Command Prompt — Registry bypass commands (run during setup or as Administrator in Windows 10):: Option A: Run these from Command Prompt during Windows 11 Setup (Shift+F10 at error screen) reg add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f
reg add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f
reg add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f

:: Option B: Run these as Administrator in Windows 10 for an in-place upgrade :: (Navigate to Setup ISO, run setup.exe after adding this key) reg add "HKLM\SYSTEM\Setup\MoSetup" /v AllowUpgradesWithUnsupportedTPMOrCPU /t REG_DWORD /d 1 /f

Cost Breakdown

How Much Will It Cost

The Cost of Upgrading to Windows 11 — All Scenarios Explained

The cost depends entirely on whether you already have a genuine Windows 10 licence. If your current Windows 10 is activated and genuine, the Windows 11 upgrade costs you nothing — the bypass methods above are free tools, and the Windows 11 licence itself is free for existing Windows 10 users. Here is the full cost picture across every scenario.

Your Situation	Licence Cost	Tool Cost	Total Cost
Genuine Windows 10 currently activated on this PC — most common scenario	$0 — free upgrade	$0 — Rufus is free	$0 total
Windows 10 installed but never activated	$139 Home / $199 Pro	$0 — Rufus is free	$139–$199
No Windows licence at all (blank drive or expired)	$139 Home / $199 Pro	$0 — Rufus is free	$139–$199
Windows 10 Pro key you want to upgrade to Windows 11 Pro	$0 — like-for-like free upgrade	$0	$0 total
Need hardware (USB drive) — if you do not already own one	—	~$8–15	~$8–15 for USB only
Staying on Windows 10 for now (ESU — Extended Security Updates)	$30/year for individuals	—	$30/year, until Oct 2027 max

If your Windows 10 is genuine and currently activated, upgrading to Windows 11 via either bypass method costs nothing. The only thing you need is a USB drive and an afternoon.

The "Like-for-Like" Rule

Windows 11 upgrades follow a like-for-like edition rule. Windows 10 Home upgrades to Windows 11 Home — free. Windows 10 Pro upgrades to Windows 11 Pro — free. You cannot use a Windows 10 Home licence to get Windows 11 Pro for free. If you want to upgrade from Home to Pro, Microsoft sells a Pro Pack upgrade for $99, which converts an existing Windows 11 Home installation to Pro without a clean reinstall.

What About Cheaper Third-Party Licence Keys?

You will find Windows 11 keys sold on sites like eBay, G2A, CDKeys, and similar marketplaces for $15–40. These are typically OEM keys (system builder licences sold in bulk) or region-arbitrage keys that work for activation but carry risks: they may be invalidated by Microsoft if detected as bulk-resold, they carry no Microsoft support, and they are not transferable to another PC. They are not illegal to buy, but they are grey-market purchases. If you already have a genuine Windows 10 licence, there is no reason to buy one of these — the upgrade is free.

After the Upgrade

What to Expect After Installing Windows 11 on Unsupported Hardware

In normal day-to-day use, a bypassed Windows 11 installation performs identically to an officially supported one. The interface, features, performance, Microsoft Defender, and regular monthly security updates all work normally. The practical differences are at the edges:

Windows Hello facial recognition requires Windows Hello hardware (an IR camera), which your PC may or may not have — this is unrelated to TPM.
BitLocker full-disk encryption requires TPM 2.0 and will not be available on a machine without it. If disk encryption is important to you, use a third-party alternative such as VeraCrypt.
Major feature updates (annual releases) may or may not arrive via Windows Update on unsupported hardware. Many users have successfully updated through multiple feature releases; others have had to re-apply the bypass or perform a clean install. As of 25H2, both Rufus and the registry methods continue to work.
Microsoft support will not assist with issues arising from an unsupported hardware configuration. If something goes wrong, you are on your own (or the community).
Watermark or activation issue — if your Windows 10 licence was not properly recognised, you may see an activation watermark on the desktop. Go to Settings → System → Activation and use the Troubleshoot option to fix it.

Key Takeaways

✓Check your BIOS first. Many PCs that fail the Windows 11 check just have TPM (PTT/fTPM) disabled in BIOS, or Secure Boot turned off. Enabling them takes 30 seconds and makes the upgrade fully official and free.

✓Your hardware (i7, 16GB RAM, 512GB SSD) more than meets Windows 11's performance requirements — TPM 2.0 and Secure Boot are the only blockers.

✓If you have a genuine activated Windows 10 licence, the Windows 11 upgrade costs $0. The bypass tools (Rufus) are also free. Total cost: $0 plus a USB drive you probably already own.

✓Rufus is the recommended bypass method — download the official Windows 11 ISO from Microsoft, open it in Rufus, check "Remove requirement for TPM 2.0 and Secure Boot," write to USB, boot and install. Simple.

✓The registry method (LabConfig keys BypassTPMCheck and BypassSecureBootCheck set to 1) works as an alternative, particularly for in-place upgrades from within Windows 10 without booting from USB.

✓Both bypass methods are confirmed working on Windows 11 25H2 as of July 2026. Day-to-day use on bypassed hardware is normal — monthly security updates, Windows Defender, and all standard features work correctly.

✓Windows 10 reached end of life on October 14, 2025. No further security updates are being issued. Staying on Windows 10 without ESU is now a real security risk — upgrading to Windows 11, even via bypass, is safer than staying put.

✓The Windows 11 licence is like-for-like: Windows 10 Home → Windows 11 Home (free). Windows 10 Pro → Windows 11 Pro (free). You cannot move up an edition for free.

Frequently Asked Questions

Is bypassing TPM 2.0 to install Windows 11 legal?

Yes. You are installing Windows 11 from official Microsoft media with a valid licence. The bypass only tells the installer to skip the compatibility check — it does not crack or modify the Windows operating system itself. Microsoft's own documentation acknowledges these bypass methods exist. The limitation is that Microsoft will not provide technical support for installations on unsupported hardware, and certain security features that depend on TPM will not be available.

Will I lose my files and programs when I upgrade?

Not if you choose the Upgrade option during installation (rather than Custom/Clean install). Both the Rufus method and the registry method support in-place upgrades that keep your existing files, applications, and settings. A clean install (Custom) wipes everything and gives you a fresh start. Always back up important files to an external drive or cloud storage before any Windows installation, regardless of which option you choose — this is good practice even when upgrading officially.

What generation is my i7 and does the generation matter?

The generation matters for the official upgrade path but not for the bypass methods. Windows 11 officially supports Intel 8th generation (Coffee Lake) and newer. If your i7 is 7th generation (Kaby Lake) or older, it fails the CPU check as well as the TPM check. The Rufus bypass and the LabConfig registry entries handle both the TPM check and the CPU check — you do not need a separate bypass for the CPU generation. To find your CPU generation: press Windows key, type "System Information," and look at the Processor field. "i7-7xxx" = 7th gen, "i7-8xxx" = 8th gen, and so on.

Can I add a TPM 2.0 chip to my motherboard instead of using a bypass?

Sometimes, but it depends on your motherboard. Many older motherboards have a TPM header (a small connector, typically a 14-pin or 20-pin header on the board) that can accept an add-in TPM module. These modules cost $15–30 and slot directly onto the motherboard. This is the most legitimate solution because it gives you actual TPM 2.0 hardware and makes the PC officially Windows 11 compatible. Check your motherboard model and its manual to see if a TPM header is present and what module is compatible. If your motherboard supports fTPM/PTT in firmware and you just need to enable it in BIOS, you do not need a physical chip at all.

My PC has a TPM 1.2 — can I still use the bypass?

Yes. The bypass works regardless of whether you have TPM 1.2, no TPM at all, or TPM 2.0 disabled in BIOS. The bypass simply tells the Windows 11 installer to skip the TPM version check entirely. Microsoft's own registry bypass (AllowUpgradesWithUnsupportedTPMOrCPU) technically requires at least TPM 1.2 present, but the Rufus method and the LabConfig registry keys used in a clean install work even with no TPM chip at all.

What if Windows Update stops pushing updates to my bypassed installation?

Monthly security and cumulative updates have continued to arrive on bypassed installations through multiple feature releases. If a future major annual update (like 26H1 or 26H2) refuses to install on unsupported hardware, the current Rufus method can be reapplied: download the new ISO, create a new bypass USB with Rufus, and run the upgrade installer again. This re-applies the bypass for the new version while keeping your files and applications. It is an extra step, but it is the same process you used the first time.

Enterprise Azure & AI Engineering Playbooks

Search This Blog