Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Rufus 3.17 and later can create a Windows 11 installation USB that bypasses the installer checks for TPM 2.0 and Secure Boot. After you click START, Rufus presents options to remove those two checks and writes the bypass to the boot image. You must then boot the target computer from that USB; the workaround does not apply when you mount the ISO and run setup.exe inside your existing Windows installation.
This is an unsupported installation on hardware that does not meet Microsoft’s requirements. A clean installation can erase the target drive, and Microsoft says support, compatibility, and even future updates are not guaranteed. Use the method only after backing up your data and confirming that the risks are acceptable.
As an Amazon Associate I earn from qualifying purchases.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWhat does Rufus actually bypass in a Windows 11 installation?
Rufus does not add TPM 2.0 to a computer, turn on Secure Boot in firmware, or make unsupported hardware officially compatible. It changes the Windows 11 boot image so the installer skips two hardware checks. Rufus maintainer Pete Batard describes the process as adding BypassTPMCheck and BypassSecureBootCheck under HKEY_LOCAL_MACHINESYSTEMSetupLabConfig in the boot image.
The bypass is therefore tied to the media created by Rufus and to the installation checks performed after booting from that media. It is not a general registry tweak for the copy of Windows already running on the PC.
Popular on Amazon
- Spacious Design: Measuring 21.1" wide and 14.1" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy ergonomic support with the integrated cushioned wrist rest.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a sleek black carbon color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.8 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
What are Windows 11’s normal hardware requirements?
Microsoft’s requirements are the baseline Rufus is helping you bypass. The current Microsoft requirements page lists the following core specifications; a 2021 Microsoft hardware document adds the firmware details.
| Component | Normal Windows 11 requirement | What Rufus bypasses |
|---|---|---|
| Processor | Approved 1 GHz or faster processor with at least two cores | Nothing in the standard Rufus Windows 11 workflow |
| Memory | 4 GB RAM | Rufus does not add a standard RAM bypass because very low memory can cause poor performance, crashes, or update failures |
| Storage | 64 GB or larger storage device | Rufus does not add a standard storage bypass |
| Security hardware | TPM 2.0 capability | Rufus can remove the installer’s TPM 2.0 check |
| Firmware | UEFI firmware, version 2.3.1 Errata or later, capable of Secure Boot | Rufus can remove the installer’s Secure Boot check, but it does not change your firmware configuration |
Secure Boot being capable and Secure Boot being enabled are separate states. A computer can have compatible UEFI firmware while the setting is disabled, and a bypassed installer does not alter that setting.
Free tools Windows power users keep installed
One-click scans. No signup required.
Can you install Windows 11 without TPM 2.0?
Yes, Rufus can let the booted installer continue without detecting TPM 2.0, but the resulting installation remains outside Microsoft’s supported hardware policy. Microsoft warns that an unsupported PC may have compatibility problems, is not entitled to Microsoft support, and is not guaranteed to receive updates, including security updates.
Microsoft’s unsupported-device notice, updated December 12, 2024, says that damage caused by incompatibility is not covered by the manufacturer’s warranty. Its installation guidance, updated February 4, 2025, recommends checking eligibility before installing and rolling back to Windows 10 if the PC does not qualify. These are policy warnings, not a prediction that every unsupported computer will fail; Microsoft does not publish a success rate or performance benchmark for this workaround.
Also popular on Amazon
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
What do you need before creating the Rufus USB?
- An empty USB flash drive: The cited installation guide specifies at least 8 GB. Check the actual ISO size and use a larger drive if necessary.
- A legitimate Windows 11 ISO: Obtain the image from Microsoft’s official download channel or another source you trust. An altered ISO can contain different files or unwanted software.
- Rufus 3.17 or newer: The TPM and Secure Boot controls are available in this version range. Rufus says these controls are not offered when Rufus runs on Windows 7; use a Windows 8 or newer host.
- A complete backup: Copy personal files, browser data, game saves, license information, and any recovery keys to separate storage. Rufus will write to and normally erase the selected USB.
- A second backup of the target PC: A booted clean installation can delete partitions on the computer’s internal drive.
- Power and time: Keep a laptop connected to AC power and allow time for Windows setup, drivers, and updates.
- A plan for activation: The bypass does not supply a product key or a Windows license. Have a valid key or a digital license associated with the edition you intend to install.
How do you create a Windows 11 Rufus USB with TPM and Secure Boot bypasses?
Use these steps for a bootable installation USB. The wording of Rufus controls can change between releases, but the bypass choices appear after you begin writing the image.
- Back up the USB. Move every file off the flash drive. Rufus formats the selected device while creating the installer.
- Start Rufus on a supported host. Run Rufus on Windows 8 or later. If the program is portable, launch it with administrator permission when Windows asks.
- Select the correct device. In the Device field, choose the USB flash drive you intend to erase. Disconnect other removable drives if you are worried about selecting the wrong one.
- Choose the ISO. Use the Boot selection control to select the Windows 11 ISO. Confirm that the image name and edition are the ones you expect.
- Start the write process. Click START. Rufus may show an image-option dialog before it writes the files.
- Enable the two bypass choices. In that dialog, select the options that remove the requirement for TPM 2.0 and Secure Boot. Rufus moved these controls to the post-START dialog, so they are not necessarily visible on the main window before writing.
- Confirm erasure. Accept Rufus’s warning that the selected USB will be formatted. Wait for the status to report that the operation is complete; do not remove the drive while it is being written.
- Eject safely. Close Rufus and use Windows’ safe-eject command before unplugging the finished installation USB.
Rufus also displays options related to other Windows 11 checks in some releases. Do not assume that selecting a memory or storage workaround makes a severely underpowered computer suitable: Rufus warns that bypassing those checks can produce low performance, crashes, or an inability to install updates.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →How do you install Windows 11 from the bypassed USB?
The bypass works only when the computer starts from the USB. The exact boot-menu key varies by manufacturer, commonly a function key, the Esc key, or a dedicated boot button.
- Insert the Rufus USB into the target computer while it is powered off.
- Turn the computer on and open its one-time boot menu. Select the entry that identifies the USB in UEFI mode when both legacy and UEFI entries appear.
- At Windows Setup, choose the language, time, and keyboard settings, then select Install now.
- Enter a product key if prompted, or choose the option to activate later if you have a digital license. Select the same Windows edition covered by that license.
- Choose Custom: Install Windows only for a clean installation. Review every disk and partition number carefully before deleting anything; deleting a partition permanently removes its contents.
- Select the destination space, allow Setup to create the required partitions, and wait for the first reboot. Remove the USB or choose the internal drive when the computer restarts so Setup does not begin from the beginning again.
- Complete the first-run setup, connect to the internet when ready, install manufacturer drivers, and create a fresh backup before restoring personal files.
If you need to preserve the existing Windows installation, stop before deleting partitions and consider a supported upgrade path instead. Rufus’s TPM and Secure Boot bypass is not designed to turn an in-place upgrade into a supported operation.
Also popular on Amazon
- Note: Not suitable for MacBooks released after 2023 or devices with a protruding front camera; Not applicable to full-screen or notch-style tempered glass screen protectors; Do not use on the rear camera of the phone.
- 💻 Why Do You Need a Webcam Cover Slide? — Safeguard your privacy by covering your webcam with our reliable webcam cover when not in use. Don't let anyone secretly watch you. Stay protected!
- ✅ Thin & Stylish — Enhance your laptop's functionality and aesthetics with our 0.027" ultra-thin webcam covers. Seamlessly close your laptop while adding a touch of sophistication.
- ✅ Fits Most Devices — Compatible with laptops, phones, tablets, desktops! Keep your privacy intact on Ap/ple, Mac/Book, iPh/one, iP/ad, H/P, L/novo, De/ll, Ac/er, As/us, Sa/msung devices.
- ✅ 365 Days Protection — Our upgraded 3.0 adhesive ensures a strong hold that won't damage your equipment. Experience reliable, long-term privacy protection day in and day out.
Will a Rufus USB upgrade Windows 10 to Windows 11 without erasing files?
Not through the Rufus bypass itself. Rufus explicitly distinguishes checks made while booting its media from checks made when running setup.exe inside the existing Windows installation. Mounting the ISO and launching setup.exe therefore still performs the in-place upgrade checks and does not inherit the bypass keys.
| Approach | Installation type | TPM/Secure Boot bypass | Data impact | Support position |
|---|---|---|---|---|
| Boot from Rufus USB | Usually a clean installation | Yes, for the checks performed by the booted installer | Can erase the internal drive if you delete or format partitions | Unsupported if the PC misses Microsoft’s requirements |
Mount ISO and run setup.exe |
In-place upgrade | No; Rufus’s boot-image keys do not apply | Designed to retain files and apps when the upgrade is eligible | Still subject to Microsoft’s normal compatibility checks |
| Install on compliant hardware | Clean install or eligible upgrade | Not needed | Depends on the selected setup path | Within Microsoft’s stated hardware requirements |
Do you need to disable Secure Boot in the firmware?
Usually, no. Rufus 3.17 and later use Secure Boot-signed UEFI:NTFS bootloaders, so a computer can generally boot the Rufus-created NTFS media while Secure Boot remains enabled. The installer bypass option concerns Windows 11’s hardware requirement check; it is not an instruction to weaken the computer’s firmware security.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
If the USB does not boot, check the manufacturer’s UEFI boot settings and the boot-menu entry before disabling protections. Only change Secure Boot or switch between UEFI and legacy/CSM modes when your particular computer’s documented boot path requires it, and record the original settings so you can restore them.
Why is the Rufus TPM or Secure Boot bypass not working?
The bypass options never appear
Confirm that you are using Rufus 3.17 or newer, that you clicked START, and that you are running Rufus on Windows 8 or later. The controls are shown in the dialog that follows START, not necessarily on the initial configuration screen. Rufus does not offer these controls when running on Windows 7.
Also popular on Amazon
- Anti-Slip Surface - Transform your laptop into a mobile workstation with the AboveTEK portable laptop lap desk. The anti-slip surface provides a strong grip for laptops up to 15.6 inches(Diagonal), while the double rubber strip on the bottom ensures a stable display or typing experience on your lap, couch, or bed.
- Retractable Mouse Pad - Retractable laptop mouse pad extends on both directions for the left/right handed with elevation along the edges for stopping mouse from falling off. The size of laptop tray is 14" X 9.7" and the size of mouse pad is 7.4" X 6.1".
- Effective Heat Shield - The effective heat shield made of sturdy and thick material protects your laptop from overheating. Prioritizes your comfort and safety, an ideal lap pad or board for working anywhere.
- EASY to Carry and Store - With an ergonomic and simplistic design, the lap desk is portable to store in a backpack. Only 15" in size, 2.2 lb of weight and with slim 0.6 inch thickness, it is ready to be easily carried around.
- Widely Applicable - The smooth platform accommodates laptops and tablets up to 15.6 inches(Diagonal), making it a versatile accessory and one of the best gifts for mom, dad, students and professionals. Perfect for use as a laptop bed tray or tablet holder anywhere at home, library, or park.
The computer boots the old operating system
Open the one-time boot menu and choose the USB’s UEFI entry rather than the internal disk. If the USB is absent, recreate it, try another port, and check whether the firmware is hiding removable media behind a fast-boot setting. Do not assume that reaching Windows Setup means you booted the intended device; verify that the installation environment came from the USB.
Setup still reports that TPM or Secure Boot is required
This usually means the machine was not started from the Rufus media, the ISO was written without selecting the bypass options, or a different USB was selected at boot. Recreate the drive, make sure the post-START choices are selected, and use the boot menu again.
The USB write fails
Check that the drive is large enough for the ISO, that its data has been backed up, and that no other application is locking it. A failing or counterfeit flash drive can complete with corrupted files; replacing the drive is safer than trusting an installation that reports unexplained errors.
Windows installs but runs poorly
Rufus cannot compensate for an old processor, insufficient RAM, slow storage, missing drivers, or firmware problems. Install the correct chipset, graphics, network, and storage drivers, check temperatures and disk health, and restore your backup if the computer is unstable. Do not treat a successful installation as proof that Microsoft will provide updates or support.
Also popular on Amazon
- Spacious Design: Measuring 21.1" wide and 12" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy laptop support with the integrated device ledge.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a blush pink color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.14 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
Should you use this workaround on a gaming PC?
Use the following decision points before you commit to a clean installation.
| Situation | Practical choice |
|---|---|
| The PC meets TPM 2.0, Secure Boot capability, processor, RAM, and storage requirements | Use Microsoft’s normal installation or upgrade method; the Rufus bypass is unnecessary. |
| The PC only lacks TPM 2.0 or the installer’s Secure Boot check, and you accept unsupported status | A Rufus booted clean install can work, provided you have backups and a recovery plan. |
| The PC has less than 4 GB RAM or less than 64 GB storage | Do not expect the standard Rufus workflow to make it reliable; those checks are not the normal bypass target. |
| You need to keep applications and files through an in-place upgrade | Rufus’s boot-image bypass is the wrong method because it does not apply to setup.exe. |
| The computer is used for work, school, or anything requiring guaranteed security updates | Stay on a supported operating system and hardware configuration rather than relying on the bypass. |
What should you do after an unsupported installation?
Record the original firmware settings, keep the Windows 10 or recovery media available, and maintain an offline backup. Run Windows Update and install device drivers, but treat update availability as uncertain because Microsoft does not guarantee updates for unsupported hardware. If a future update, driver, or game-related workload causes instability, use your backup or the documented rollback path rather than repeatedly forcing setup to run.
Keep the Rufus USB until the new installation has booted reliably and your recovery options have been tested. A bootable installer is also useful if the internal installation becomes unbootable, although it does not replace a separate backup of personal data.
Frequently Asked Questions
Does the Rufus bypass activate Windows 11?
No. It changes installer checks only. Activation still requires a valid product key or a digital license for the Windows edition you install.
Can I use the same Rufus USB on several computers?
The media can boot more than one compatible computer, but each installation still has its own hardware compatibility, driver, activation, and data-erasure decisions. Recheck the target disk every time before choosing a custom installation.
How can I return to Windows 10 if the unsupported install is unstable?
Use the backup or recovery media you prepared before installation, or use Windows recovery options while they are available. Do not rely on a rollback window remaining available after cleanup operations or major changes.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problemsDoes keeping Secure Boot enabled improve the safety of this workaround?
Keeping firmware protections enabled preserves their normal security role, but it does not make an unsupported Windows 11 installation supported. The installer check bypass and the firmware setting are separate controls.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
