News

Can’t upgrade to free Windows 11 without TPM 2.0 security chip?

The release of Windows 11 is a cheering thing for many loyal Windows users.

But just as people shouted Amazing, the reality gave them a head-on-"your computer can't run Windows 11".

Although Windows 11 supports free upgrades, in fact not all old Windows users can enjoy it. Microsoft has set a series of necessary conditions for system upgrades, and if your computer lacks a security chip called TPM 2.0, Windows 11 It almost missed you.


This makes many old Windows users quite angry. What does this chip do? Why didn't the previous Windows system upgrades have such a requirement? Why did Microsoft do this?

TPM (Trusted Platform Module) is a hardware chip promoted by Microsoft to ensure the security of Windows. As early as 2011, it joined a number of PC manufacturers to embed the TPM chip in the computer, but at that time the TPM was still version 1.2, until 2016 The 2.0 version began to be gradually promoted.
Microsoft said that the TPM can be integrated into the motherboard of the PC, or it can be added to the CPU separately.

It can protect the privacy and sensitive data of users, such as Windows hello face recognition function, TPM chip will encrypt and store relevant face data, reducing the risk of data leakage.

Affected by the epidemic and even remote meetings, Microsoft even requires all Windows 11 laptops to be equipped with cameras in 2023. TPM can also be regarded as Microsoft's advance plan for data protection.

In addition, TPM can also ensure the safe startup of Windows, and the system will only start normally if the software is legal and has been certified. With the TPM chip of the security program that comes with Windows, it can also effectively defend against network attacks.

"We found that 83% of companies have experienced firmware attacks, and only 29% of companies have allocated resources to protect their critical data," Microsoft said in response to why Windows 11 requires a TPM module.

However, since its release, the popularity of TPM has not been particularly high. Some computer manufacturers have not installed TPM chips on computer motherboards in accordance with Microsoft's requirements. In some countries and regions, TPM has been replaced by other security technologies, and even some computers There is a TPM chip but the related functions are not turned on.

For example, the more common DIY computer hosts nowadays, although motherboard manufacturers like MSI and other motherboard manufacturers have built-in TPM, they have to enter the motherboard BIOS to enable it.

Although the operation is not complicated, the ways of opening BIOS are different for each computer manufacturer, which is still quite complicated for ordinary users, and the cost of use and upgrade has increased a lot.