Why your PC says it cannot run Windows 11 (and what to do)
The check failed because one or more items do not match Microsoft's minimums. TPM and Secure Boot are often just switched off and cost nothing to fix. The processor is the one that usually cannot be fixed.
First, find out which check failed
A red result does not tell you much on its own. The fix depends on which item failed, and that is easy to find out.
- Install Microsoft's PC Health Check app, or open it if it is already there (search for it in the taskbar).
- Press "Check now" next to the Windows 11 banner.
- Read the list. Microsoft says this screen explains why the device is or is not eligible and what you can do about it.
Settings > Update & Security > Windows Update gives a similar answer on a Windows 10 PC. Write down every item that is marked, not just the first one. A PC can fail two or three checks at the same time, and fixing one will not help if another one is still red.
The requirements and what you can do about each
These are Microsoft's minimums. The last two columns show what you can do about each item.
| Requirement | Minimum | Fixable? | How |
|---|---|---|---|
| Processor | 1 GHz or faster, 2 or more cores, and on Microsoft's list of approved CPUs | Usually not | Needs a different processor, often a different PC |
| TPM | Version 2.0 | Often yes | Switch it on in the firmware settings |
| Firmware | UEFI, Secure Boot capable | Often yes | Switch from legacy mode to UEFI; the disk may need converting |
| Memory | 4 GB | Sometimes | Add or replace memory modules |
| Storage | 64 GB | Sometimes | Fit a larger drive |
| Graphics | DirectX 12 or later with a WDDM 2.0 driver | Sometimes | Update the graphics driver, or fit a newer card |
| Windows version | Windows 10 version 2004 or later | Yes | Run Windows Update |
| S mode | Pro, Education and Enterprise must leave S mode first | Yes, one way | Switch out of S mode; you cannot switch back |
The "Sometimes" rows, and the graphics advice, are our reading of Microsoft's wording. For memory and storage, Microsoft says memory and storage have "sometimes" options for upgrading. Whether your PC can take more memory or a bigger drive depends on the model.
The processor: the one that is hard to fix
Microsoft keeps lists of processors that meet its requirements. The Intel list of Core i3, i5, i7 and i9 starts at 8th generation. The AMD list includes Ryzen from the 2000 series on. Processors from before those generations, such as 7th generation Intel Core or first generation Ryzen, are not on the lists, even though they are fast enough on paper. Microsoft says processors released later that follow the same principles count as supported even if not listed yet.
Clock speed and core count are not something you can change with a setting. Microsoft calls them not upgradable components. So if the processor is the problem, no menu in the PC will turn the red result green.
- Open Settings > System > About. Under Device specifications, the Processor line shows the processor name.
- Find the model in the name. For example, "Core i5-8400" means an Intel Core i5, 8th generation (for four-digit models, the first digit after the dash is the generation; for five-digit models such as 10700, the first two digits are).
- Search that exact model on Microsoft's lists for Intel or AMD processors.
These are examples of where the lists start, not a full list of what passes or fails. Check Microsoft's list for your exact model.
TPM and Secure Boot: the two usual fixable causes
On many PCs that fail, the hardware is fine and the setting is off. Microsoft says most PCs sold in the last five years can run TPM 2.0, and that boards built by hobbyists often ship with TPM turned off even though it is almost always available.
To change it you open the firmware settings (UEFI, still called BIOS by many people). On Windows 10 the route is Settings > Update & Security > Recovery > Restart now, then Troubleshoot > Advanced options > UEFI Firmware Settings (on Windows 11 it is Settings > System > Recovery). The option may be called Intel PTT, AMD fTPM or Security Device, depending on the maker. The steps vary by PC, so use the maker's support page if you are unsure. Our other guide walks through checking both settings.
Secure Boot has a catch. It only works when the PC starts in UEFI mode, and older installations start in legacy mode (also called CSM). Microsoft says that for the upgrade the PC only has to be Secure Boot capable, meaning UEFI is enabled, though turning Secure Boot on is better for security.
If the disk was set up in the old MBR style, switching to UEFI can stop Windows from starting. Microsoft has a tool called MBR2GPT that converts the disk to GPT without deleting data. You can run it in check-only mode first, and afterwards the firmware must be set to UEFI. Back up before you try this, and do not convert if you are not sure the PC supports UEFI.
Other causes, and one that is not a fault
- Memory below 4 GB, or a module that is not detected. Check the amount under Settings > System > About.
- A system drive smaller than 64 GB, including a small virtual disk.
- A graphics driver that is too old to report DirectX 12 and WDDM 2.0.
- A Windows 10 version older than 2004. Windows Update fixes this.
- Possible: a leftover setting. A PC that once passed can fail after a firmware reset that turned TPM off.
Then there is the compatibility safeguard hold. Microsoft says it can delay an upgrade for a while when it finds a compatibility issue. It is a delay on Microsoft's side, not a check your PC failed. Microsoft also says that after you change something to meet the requirements, you should wait until Windows Update tells you Windows 11 is ready for your device.
A worked example: a small office with six PCs
This is an invented example to show the method. The numbers are made up.
An office has six Windows 10 PCs. PC Health Check shows these results:
| PCs | Processor | Red item | Verdict |
|---|---|---|---|
| 3 | Intel 8th generation Core | TPM off, legacy mode | Fixable in the firmware settings |
| 3 | Intel 7th generation Core | Processor | Not fixable with settings |
The first three take an afternoon: change the settings, maybe convert the disk, wait for Windows Update. The other three need a decision. Consumer ESU is for personal use, and Microsoft says it cannot be used in commercial scenarios. For an organization, the paid program is $61 per device in Year One, and the price doubles each year, up to three years.
For the three PCs that cannot upgrade: 3 x 61 = 183 in Year One, 3 x 122 = 366 in Year Two, 3 x 244 = 732 in Year Three. Microsoft says buying in Year Two also means paying for Year One, so three years in a row come to 183 + 366 + 732 = 1,281 USD. Compare that with the price of three replacement PCs. At an invented 600 USD each, that is 3 x 600 = 1,800 USD. Because buying in Year Two also means paying Year One, a business that starts now pays the Year One and Year Two amounts together (183 + 366 = 549 USD for these three PCs) and the Year Three amount (732) later. Your quote will differ. The point is to put both totals next to each other before deciding.
If you have several PCs, a fleet checker that reads these items from each machine and puts them into one report saves going from desk to desk.
If it cannot be fixed: your options
| Option | What it means | Good for |
|---|---|---|
| Consumer ESU | Microsoft says it gives security updates for Windows 10 version 22H2 until 12 October 2027. Free if you sync PC settings, or 1,000 Microsoft Rewards points, or a one-time 30 USD. One license can cover up to 10 devices. | Home PCs that cannot upgrade yet |
| Business ESU | Microsoft charges 61 USD per device in Year One, doubling each year, up to three years. Bought through Volume Licensing. | Organizations |
| Replace the PC | A PC sold for Windows 11 should meet the requirements; check its specs before you buy. | Old machines that are slow anyway |
| Install Windows 11 anyway | Microsoft says this is not recommended: the device is not supported, may malfunction, is not guaranteed updates including security updates, and shows a watermark and a notice in Settings. | Your own decision and risk |
ESU gives critical and important security updates only. It does not include new features or technical support. Windows 10 reached end of support on 14 October 2025. Without ESU, Microsoft says the device is more vulnerable.
Enrolling in ESU does not stop you upgrading later if the PC meets the hardware requirements. Rules for a business, such as licensing and software support, vary by country and by contract. Check with your supplier or the local authority.
Questions
Can I add a TPM chip to my PC?
Many PCs already have TPM built into the firmware or processor and only need it switched on. Whether a separate module can be fitted depends on the motherboard, so check the maker's support pages. Even with a TPM, an unlisted processor still fails.
Can I upgrade my processor instead of buying a new PC?
Microsoft says clock speed and core count are not upgradable components, but it does not say a processor can never be replaced. A new processor must fit your motherboard, and often that means replacing the board and memory too, so compare the total with a new PC.
Does enrolling in ESU stop me upgrading to Windows 11 later?
No. Microsoft says enrolling does not prevent an upgrade if the PC meets the hardware requirements.
What happens to a Windows 10 PC now that support has ended?
Support ended on 14 October 2025. The PC itself can still start and run. What stops is the free security updates, so it becomes more vulnerable over time unless you enroll in ESU, which runs until 12 October 2027.
I fixed the setting, but Windows Update does not offer Windows 11. Why?
Microsoft advises waiting until Windows Update says Windows 11 is ready for your device. A compatibility safeguard hold can also delay the offer for a while.
Does a red result mean my PC is broken?
No. It means the PC does not match Microsoft's list for Windows 11. The PC can keep working on Windows 10.
Keep reading
More guides
About Readylook
Readylook is our Windows app that checks whether the PCs on your network are ready for Windows 11 and builds one report. It only reads: nothing is installed on the PCs it scans, and no data is sent to us. The report is a guide, not a guarantee. It is not in the Microsoft Store yet.
Sources
- Microsoft: Windows 11 system requirements
- Microsoft Learn: Windows 11 supported Intel processors
- Microsoft: How to use the PC Health Check app
- Microsoft: Windows 10 Extended Security Updates for consumers
- Microsoft Learn: Extended Security Updates for organizations
- Microsoft: Installing Windows 11 on devices that don't meet minimum system requirements
Checked 2026-11-03.
Not affiliated with or endorsed by Microsoft. Windows is a trademark of Microsoft Corporation.