How to Enable TPM and Secure Boot for Windows 11 on HyperV

Enable TPM and ecure boot on HyperV to run windoows 11

Windows 11 enables us to get the most protection from advanced attacks out of the box with the requirement of a TPM 2.0 chip to help ensure they benefit from security backed by a hardware root-of-trust. You may want to see Measured Boot, Secure Boot, Trusted Boot, and Early Launch Anti-Malware: How to secure the Windows 10 boot process. Also, see how to upgrade to Windows 11 from Windows 10 as a Windows Insider. In this article, I will show you How to run Windows 11 on HyperV.

Please see Bypass unsupported CPU and Processor by upgrading to Windows 11 via Windows Update, and how to Upgrade Windows 11 Pro to Enterprise and vice Versa.

The requirement to run Windows 11 VM HyperV

Windows 11 has several requirements that you must enable before you can install it on Hyper-V. To read more about Windows 11 Hardware and Software Requirements: Upgrade to Windows 11, and also Windows 11 System Requirements, and Hyper-V Server Core Mode: How to install free Hyper-V Server on a VMware Workstation.

			
- Generation 2 VM
- UEFI (System Firmware)
- Secure Boot Enabled (Secure Boot can only be enabled with UEFI)
- TPM 2.0 Enabled
- 1 (GHz) or faster CPU with 2 or more cores
- 4GM Memory or more, and 
- 64GB or more of disk space

		

Enable TPM on HyperV VM

First, create a generation 2 VM. This step assumes you have created your Generation 2 VM already on HyperV. Please see Generation 2 VM: How to set up a Hyper-V Virtual Machine through PXE boot. You may also want to see how to set up a VM via PXE boot on a Generation 1 VM.

Next, click on the VM settings and ensure TPM Module is enabled. By default, this is not enabled. You can read more about the Hardware requirement for Windows 11.

You may want to learn Bypass unsupported CPU and Processor by upgrading to Windows 11 via Windows Update, and how to Enable vTPM and BitLocker on Windows Server on HyperV.

Enable Secure Boot on a Hyper-V VM

To enable SecureBoot, please follow the same steps used in enabling Trusted Platform Module. From Settings, click on Security on the left and on the right side to make sure that the box for Enable Secure boot.

Please see How to enable Secure Boot on PC to install Windows 11, how to fix Enable Secure boot and TPM on HyperV: How to fix “This PC Can’t Run Windows 11” on Hyper V and How to enable or disable Secure Boot in Windows.

			
Microsoft Secure Boot is a component of Microsoft’s Windows 8 extended with more security advancement to Windows 10 & 11 operating systems that relies on the UEFI specification’s secure boot functionality to help prevent malicious software applications and “unauthorized” operating systems from loading during the Computer start-up process. Please see