Can You Disable TPM and Secure Boot After Installing Windows 11?

Microsoft has issued the final version of Windows 11 for the broader public after days of the testing phase and fault suppressing. It is presently available as a free update to all Windows 10 customers with sufficient technology. This means that a significant portion of the population is missing out on the upgrade cycle. The majority of it’s tems from Windows 11’s extensive list of prerequisites, which includes TPM 2.0. Presently, though, we will not discuss how to deactivate TPM and other prerequisites in order to obtain Windows 11.  We’ll go through can you disable TPM and Secure Boot after installing Windows 11 on your PC in this article? Let’s get started now, without further ado!

What is the relationship between TPM and Secure Boot?

As you may be aware, Windows 11 necessitates the use of a Trusted Module Platform, or TPM 2.0, on your computer. Your machine will be unable to execute the most recent version of Windows if it does not have it. But it’s inconvenient to exclude a big segment of the population from receiving the upgrade. We can’t criticize Microsoft for making TPM 2.0 one of the system requirements for Windows 11.

TPM, which functions as an extra layer of security, ensures that no possible virus has access to important data such as your login credentials, encryption keys, and more. The module is available in three different forms. It is possible to attach it to your CPU. This may take the form of a hardware chip that you adhere to your motherboard. Ultimately, it might be a soft, firmware-based application of the TPM structure in your CPU. The ultimate result is the same in all three versions.

Secure Boot is integrated into the UEFI software itself, whereas TPM is more of a hardware configuration. As far as you have UEFI enabled, Secure Boot will prevent unauthorized devices from messing with your system’s boot process. You can utilize Secure Boot on Windows 11 even though you don’t have TPM.

On Windows 11, is it possible to deactivate TPM and Secure Boot?

Yes, after installing Windows 11, you may disable TPM and Secure Boot. It needs to disable Secure Boot and TPM in the UEFI settings.

Few more Windows 11 functions now demand that you have them switched on at all instances. When you deactivate TPM and Secure Boot, you will lack these benefits and be vulnerable to problems. Here are some well-known programs, applications, and Windows 11 capabilities that rely on Secure Boot and TPM:

  1. Advantage of Windows Hello login.
  2. Users will have the ability to operate certain virtual machines (VMs).
  3. Also affect all Android applications, as well as the Windows Subsystem for Android.
  4. Anti-cheat and anti-tamper tools in subsequent games and safe apps: As Valorant’s Vanguard recently showed, these apps and services take full use of this hard prerequisite.
  5. Other encryption technologies, antivirus programs, administrative applications, and remote access systems are available.

What occurs if TPM and Secure Boot are turned off in Windows 11?

Eliminating TPM and Secure Boot on Windows 11 will not affect your day-to-day operations in reality. When you siwtch on Bitlocker, you’ll have to input your reset keys every moment your machine starts up. When you deactivate TPM and Secure Boot on Windows 11, Windows Hello, the biometric data authentication functionality for Windows 11, will also cease operating.

The following is a comprehensive list of disadvantages associated with deactivating TPM and Secure Boot on Windows 11.

Signing in with Windows Hello is not possible

You probably aren’t going to log in to your Computer if you used this before deactivating TPM and Secure Boot.

Compatibility issues with future competitive games

If y disable Secure Boot and TPM then you won’t be able to play games onlin. Consider the problems that the participants of the Valorant game encounter.

Bitlocker

If you deactivate TPM and Secure Boot on a disc with Bitlocker activated, you’ll have to explicitly decode it with your password after each startup.

Unavailable for the Android Windows Subsystem

WSA is a virtual machine that can be mounted in Windows to execute Android applications, similar to Linux’s WSA. Not only does WSA have strict TPM 2.0 and Secure Boot specifications, but that also requires a faster speed, at minimum 8GB of RAM, and an SSD to function effectively. If you want to use Android applications on your Windows 11 PC, you shouldn’t disable TPM 2.0 or Secure Boot.

Problems with Windows Updates

Since there isn’t much reliable data on the subject, Microsoft’s support package indicates that disabling TPM will prevent you from receiving Attribute and Periodic upgrades. As a result, disabling Secure Boot will prevent you from receiving frequent security updates and guidelines. So you should not deactivate TPM and Secure Boot on your computer if you want to stay your computer upgraded to the newest version for optimal confidentiality and protection.

This is not an exhaustive list of the disadvantages of deactivating TPM and Secure Boot. We don’t know what programs will make use of these security enhancements because Windows 11 is still in beta. As time goes and we approach 2022, we may witness a slew of new games and applications with TPM and Secure Boot as a strict requirement.

Will automatic updates be stopped if TPM and Secure Boot are turned off?

Before the introduction of Windows 11, Microsoft created a fantastic fuss about TPM and Secure Boot, finding it challenging for Windows 10 customers to update to the new OS in an authorized manner. As a result, it makes perfect sense that deactivating TPM and Secure Boot after installing Windows 11 has certain consequences. Windows Updates are a good example of this.

After Windows 11, if you disable TPM, you will no longer receive automatic Windows Updates. However, considering the unpredictability of Windows 11 upgrades, turning off TPM and subsequent auto-updates is not really a poor decision. Before deactivating TPM, make very sure you’re on a release that’s pretty bug-free.