How To Enable Tpm And Secure Boot On Vmware To Install Windows 11

Although during the development process, Microsoft is not enforcing the security requirements to install Windows 11, eventually, you won’t be able to install the OS on a VMware Workstation virtual machine due to the lack of the Trusted Platform Module (TPM) and Secure Boot.

A TPM is a chip that offers cryptographic functions, such as generating and storing encryption keys to enable features like Windows Hello, BitLocker, and others.

Secure Boot is a firmware technology that protects the boot process so that malware (such as rootkits) cannot attack the trusted OS during startup.

If you plan to install Insider Preview builds or run the final version of Windows 11 on a virtual machine using VMware Workstation, the application includes TPM and Secure Boot options. Since we are dealing with virtualization, you are not required to have the computer components physically.

In this guide, you will learn the steps to enable TPM and Secure Boot on VMware to install Windows 11 on a virtual machine.

• Enable TPM and Secure Boot on VM to install Windows 11
• Create Windows 11 VM on VMware with TPM and Secure Boot support

Enable TPM and Secure Boot on VM to install Windows 11

To enable TPM and Secure Boot on VMware, use these steps:

• Open VMware Workstation.
• Select the virtual machine.
• Click the VM menu and select the Settings option.
• Click the Options tab.
• Select the Access Control option.
• Under the “Encryption” section, select the Encrypt button.
• Create an encryption password.
• Click the Encrypt button.
• Click on Advanced.
• (Not recommended) Under the “Firmware type” section, select the UEFI option and check the Enable secure boot option (if applicable).
• Warning: Changing the firmware type may cause problems. If you don’t have the VM already with UEFI, it is best to create a new virtual machine instead.
• Click the Hardware tab.
• Click the Add button.
• Select the Trusted Platform Module option to run Windows 11.
• Click the Finish button.
• Click the OK button.

Once you complete the steps, the computer should include the required security components to pass the requirements check to upgrade to Windows 11.

Open VMware Workstation.

Select the virtual machine.

Click the VM menu and select the Settings option.

Click the Options tab.

Select the Access Control option.

Under the “Encryption” section, select the Encrypt button.

Create an encryption password.

Click the Encrypt button.

Click on Advanced.

(Not recommended) Under the “Firmware type” section, select the UEFI option and check the Enable secure boot option (if applicable).

Click the Hardware tab.

Click the Add button.

Select the Trusted Platform Module option to run Windows 11.

Click the Finish button.

Click the OK button.

Create Windows 11 VM on VMware with TPM and Secure Boot support

To create a virtual machine with support for TPM and Secure Boot, use these steps:

• Open VMware Workstation.
• Click the File menu and select the New virtual machine option.
• Click the Next button.
• Select the latest virtual machine hardware compatibility option.
• Click the Next button.
• Select the I will install the operating system later option.
• Click the Next button.
• Under the “Guest operating system” section, select the Microsoft Windows option.
• Under the “Version” section, select the Windows 10 x64 option. (If available, choose the Windows 11 option.)
• Click the Next button.
• Confirm a name for the Windows 11 VM.
• Confirm the location to store the virtual machine.
• Click the Next button.
• Under the “Firmware type” section, select the UEFI option.
• Check the Secure Boot option.
• Click the Next button.
• Select the number of processor cores (two or more).
• Click the Next button.
• Specify the amount of RAM (4GB or higher).
• Click the Next button.
• Select the preferred network connection.
• Click the Next button.
• Use the default I/O controller types option.
• Click the Next button.
• Select the virtual disk type option. (NVMe is usually the recommended option, if available.)
• Select the Create a new virtual disk option.
• Click the Next button.
• Specify the disk size in gigabytes (64GB or higher).
• Use the default settings for the rest of the settings unless you need a different configuration.
• Click the Next button.
• Click the Next button again.
• Click the Finish button.
• Select the virtual machine.
• Click the VM menu and select the Settings option.
• Click the Options tab.
• Select the Access Control option.
• Under the “Encryption” section, select the Encrypt button.
• Create an encryption password.
• Click the Encrypt button.
• Click the Hardware tab.
• Click the Add button.
• Select the Trusted Platform Module option.
• Click the Finish button.

After you complete the steps, you should be able to install Windows 11 on a virtual machine using VMware Workstation. (See also this video tutorial to complete this task.)

Click the File menu and select the New virtual machine option.

Click the Next button.

Select the latest virtual machine hardware compatibility option.

Select the I will install the operating system later option.

Under the “Guest operating system” section, select the Microsoft Windows option.

Under the “Version” section, select the Windows 10 x64 option. (If available, choose the Windows 11 option.)

Confirm a name for the Windows 11 VM.

Confirm the location to store the virtual machine.

Under the “Firmware type” section, select the UEFI option.

Check the Secure Boot option.

Select the number of processor cores (two or more).

Specify the amount of RAM (4GB or higher).

Select the preferred network connection.

Use the default I/O controller types option.

Select the virtual disk type option. (NVMe is usually the recommended option, if available.)

Select the Create a new virtual disk option.

Specify the disk size in gigabytes (64GB or higher).

Use the default settings for the rest of the settings unless you need a different configuration.

Click the Next button again.

Select the Trusted Platform Module option.