If you want to install Windows 11 on a virtual machine using Hyper-V, you will have to use a “Generation 2” VM and enable the “trusted platform module” (TPM) and Secure Boot options. Otherwise, the OS won’t install.
Starting with Windows 11, Microsoft is changing the system requirement and making TPM 2.0 and Secure Boot a prerequisite to perform an in-place upgrade or clean install the new version on any device. This is in addition to the new 4GB of RAM and at least 64GB of storage.
A TPM is a piece of hardware that provides cryptographic functions, such as generating and storing encryption keys to enable features like Windows Hello, BitLocker, and others. Usually, it is embedded onto the motherboard, but you may also add it as a separate component. On the other hand, Secure Boot is a firmware technology that protects the boot process to prevent malware (such as rootkits) from hijacking the trusted OS during startup.
If you plan to install Insider Preview builds or run the final version of Windows 11 on a virtual machine using Hyper-V, you need to ensure to enable the TPM and Secure Boot to upgrade from Windows 10 or perform a clean install. Since we are dealing with virtualization, you are not required to physically have a TPM or Secure Boot chips on the computer.
Hyper-V is an optional feature on Windows 10 Pro, which means that you must enable it manually from the “Windows Features.” You can use these instructions to set up the virtualization feature.
In this guide, you will learn the steps to create a virtual machine with TPM and Secure Boot support to install Windows 11.
- Enable TPM and Secure Boot on a Hyper-V VM to install Windows 11
- Create Hyper-V VM with TPM and Secure Boot to install Windows 11
Enable TPM and Secure Boot on a Hyper-V VM to install Windows 11
To enable TPM and Secure Boot on a virtual machine to install Windows 11, use these steps:
-
Open Hyper-V Manager on Windows 11.
-
Click on the host computer from the left pane.
-
Select the Windows 11 VM from the right side.
-
Confirm the “Generation” setting reads “2” in the “Summary” tab at the bottom of the page.
-
Right-click the Windows 11 VM and select the Settings option.
-
Click on Security.
-
Under the “Secure Boot” section, check the “Enable Secure Boot” option.
-
Use the “Template” drop-down menu and select the Microsoft Windows option.
-
Under the “Encryption Support” option, check the “Enable Trusted Platform Module” option to enable TPM to install Windows 11.
-
(Optional) Check the “Encrypt state and virtual machine migration traffic” option.
-
Click the Apply button.
-
Click the OK button.
Once you complete the steps, you will be able to install a fresh copy of Windows 11 or upgrade from Windows 10.
Create Hyper-V VM with TPM and Secure Boot to install Windows 11
To create a VM on Hyper-VM with TPM and Secure Boot support to install Windows 11, use these steps:
-
Open Hyper-V Manager.
-
Right-click the host computer on the left pane, select the New submenu, and click the Virtual Machine option.
-
Click the Next option.
-
Specify a name for Windows 11 VM.
Quick note: You can also use the Store the virtual machine in a different location option to choose where to store the VM. -
Click the Next button.
-
Select the Generation 2 option.
-
Click the Next button.
-
Specify the amount of memory for the virtual machine. In the case of Windows 11, you need to assign at least 4096MB.
-
Click the Next button.
-
Use the “Connection” drop-down menu and select the Default switch option.
-
Click the Next button.
-
Select the Create a virtual hard disk option.
-
(Optional) In the “Name” option, select a name for the virtual hard disk.
-
(Optional) In the “Location” option, specify a location to store the virtual machine.
-
In the “Size” option, specify the virtual hard drive size. In the case of Windows 11, you must use 64GB or higher.
-
Click the Next button.
-
Select the “Install an operating system later” option unless you have the Windows 11 ISO file, in which case, you would select the “Instal an operating system from a bootable image file” option.
-
Click the Next button.
-
Click the Finish button.
-
Right-click the Windows 11 VM and select the Settings option.
-
Click on Security.
-
Under the “Secure Boot” section, check the “Enable Secure Boot” option.
-
Use the “Template” drop-down menu and select the Microsoft Windows option.
-
Under the “Encryption Support” option, check the “Enable Trusted Platform Module” option to enable TPM to install Windows 11.
-
(Optional) Check the “Encrypt state and virtual machine migration traffic” option.
-
Click the Apply button.
-
Click the OK button.
After you complete the steps, you can perform a clean install of Windows 11 on the virtual machine.
Mauro Huculak is a Windows How-To Expert who started Pureinfotech in 2010 as an independent online publication. He has also been a Windows Central contributor for nearly a decade. Mauro has over 15 years of experience writing comprehensive guides and creating professional videos about Windows and software, including Android and Linux. Before becoming a technology writer, he was an IT administrator for seven years. In total, Mauro has over 21 years of combined experience in technology. Throughout his career, he achieved different professional certifications from Microsoft (MSCA), Cisco (CCNP), VMware (VCP), and CompTIA (A+ and Network+), and he has been recognized as a Microsoft MVP for many years. You can follow him on X (Twitter), YouTube, LinkedIn and About.me. Email him at [email protected].