If you want to install Windows 11 on a virtual machine using Hyper-V, you will have to use a âGeneration 2â VM and enable the âtrusted platform moduleâ (TPM) and Secure Boot options. Otherwise, the OS wonât install.
Starting with Windows 11, Microsoft is changing the system requirement and making TPM 2.0 and Secure Boot a prerequisite to perform an in-place upgrade or clean install the new version on any device. This is in addition to the new 4GB of RAM and at least 64GB of storage.
A TPM is a piece of hardware that provides cryptographic functions, such as generating and storing encryption keys to enable features like Windows Hello, BitLocker, and others. Usually, it is embedded onto the motherboard, but you may also add it as a separate component. On the other hand, Secure Boot is a firmware technology that protects the boot process to prevent malware (such as rootkits) from hijacking the trusted OS during startup.
If you plan to install Insider Preview builds or run the final version of Windows 11 on a virtual machine using Hyper-V, you need to ensure to enable the TPM and Secure Boot to upgrade from Windows 10 or perform a clean install. Since we are dealing with virtualization, you are not required to physically have a TPM or Secure Boot chips on the computer.
Hyper-V is an optional feature on Windows 10 Pro, which means that you must enable it manually from the âWindows Features.â You can use these instructions to set up the virtualization feature.
In this guide, you will learn the steps to create a virtual machine with TPM and Secure Boot support to install Windows 11.
- Enable TPM and Secure Boot on a Hyper-V VM to install Windows 11
- Create Hyper-V VM with TPM and Secure Boot to install Windows 11
Enable TPM and Secure Boot on a Hyper-V VM to install Windows 11
To enable TPM and Secure Boot on a virtual machine to install Windows 11, use these steps:
-
Open Hyper-V Manager on Windows 11.
-
Click on the host computer from the left pane.
-
Select the Windows 11 VM from the right side.
-
Confirm the âGenerationâ setting reads â2â in the âSummaryâ tab at the bottom of the page.
-
Right-click the Windows 11 VM and select the Settings option.
-
Click on Security.
-
Under the âSecure Bootâ section, check the âEnable Secure Bootâ option.
-
Use the âTemplateâ drop-down menu and select the Microsoft Windows option.
-
Under the âEncryption Supportâ option, check the âEnable Trusted Platform Moduleâ option to enable TPM to install Windows 11.
-
(Optional) Check the âEncrypt state and virtual machine migration trafficâ option.
-
Click the Apply button.
-
Click the OK button.
Once you complete the steps, you will be able to install a fresh copy of Windows 11 or upgrade from Windows 10.
Create Hyper-V VM with TPM and Secure Boot to install Windows 11
To create a VM on Hyper-VM with TPM and Secure Boot support to install Windows 11, use these steps:
-
Open Hyper-V Manager.
-
Right-click the host computer on the left pane, select the New submenu, and click the Virtual Machine option.
-
Click the Next option.
-
Specify a name for Windows 11 VM.
Quick note: You can also use the Store the virtual machine in a different location option to choose where to store the VM.
-
Click the Next button.
-
Select the Generation 2 option.
-
Click the Next button.
-
Specify the amount of memory for the virtual machine. In the case of Windows 11, you need to assign at least 4096MB.
-
Click the Next button.
-
Use the âConnectionâ drop-down menu and select the Default switch option.
-
Click the Next button.
-
Select the Create a virtual hard disk option.
-
(Optional) In the âNameâ option, select a name for the virtual hard disk.
-
(Optional) In the âLocationâ option, specify a location to store the virtual machine.
-
In the âSizeâ option, specify the virtual hard drive size. In the case of Windows 11, you must use 64GB or higher.
-
Click the Next button.
-
Select the âInstall an operating system laterâ option unless you have the Windows 11 ISO file, in which case, you would select the âInstal an operating system from a bootable image fileâ option.
-
Click the Next button.
-
Click the Finish button.
-
Right-click the Windows 11 VM and select the Settings option.
-
Click on Security.
-
Under the âSecure Bootâ section, check the âEnable Secure Bootâ option.
-
Use the âTemplateâ drop-down menu and select the Microsoft Windows option.
-
Under the âEncryption Supportâ option, check the âEnable Trusted Platform Moduleâ option to enable TPM to install Windows 11.
-
(Optional) Check the âEncrypt state and virtual machine migration trafficâ option.
-
Click the Apply button.
-
Click the OK button.
After you complete the steps, you can perform a clean install of Windows 11 on the virtual machine.