October 14, 2025 will mark the end of free security updates for Windows 10, forcing millions of perfectly capable PCs into a corner. Owners must either pay Microsoft for Extended Security Updates (ESU), replace their hardware, or find a way to install Windows 11 on devices that officially fail the compatibility check. The good news is that a carefully prepared USB installer created with the free tool Rufus can bypass the TPM 2.0, Secure Boot, and CPU requirements—all while keeping your apps, files, and settings intact through an in-place upgrade.

This isn’t a hack in the dark. Microsoft itself acknowledges that Windows 11 can be manually installed on unsupported hardware, though it warns that updates and some features may be limited. In practice, countless enthusiasts have found that monthly security patches arrive normally, and everyday performance is often surprisingly good—especially after a few sensible hardware upgrades.

The Windows 10 Deadline and the Hardware Hurdle

Windows 10’s end of support affects well over a billion devices. Many of those machines—from sixth-generation Intel Core desktops to first-generation Ryzen laptops—run 64-bit processors and have more than enough RAM and storage to handle Windows 11. Yet they hit a wall because they lack a TPM 2.0 module, Secure Boot, or fall below Microsoft’s arbitrary CPU generation cutoff.

For home users and small offices, the choices are stark. Paying for ESU is expensive and only postpones the inevitable. Retiring functional hardware adds to e-waste and budget strain. Upgrading to Windows 11 by removing the setup checks offers a middle path: stay on a supported operating system, continue receiving security fixes, and avoid a new PC purchase for another two to three years.

Microsoft’s official Windows 11 requirements remain unchanged since launch: a compatible 64-bit processor with two or more cores running at 1 GHz or faster, 4 GB of RAM, 64 GB of storage, UEFI firmware with Secure Boot, and TPM 2.0. The installer enforces these checks, but tools like Rufus can strip them out of the installation media. The result is a USB stick that behaves almost like a standard installer, except it silently ignores the hardware roadblocks.

Why Rufus Has Become the Go-To Tool

Rufus is a long-trusted utility for creating bootable USB drives. Starting with version 3.16, it added a dedicated option to “Remove requirement for 4GB+ RAM, Secure Boot and TPM 2.0” when writing a Windows 11 ISO. That single checkbox automatically applies registry-based bypasses during setup, making the process accessible even to less technical users. Unlike downloading pre-patched ISOs from unknown sources, Rufus modifies only the temporary installation environment on your own USB drive, using the official Microsoft ISO you download yourself. This keeps you on the right side of licensing and security.

Because Rufus leaves the core Windows image untouched, the installed system remains functionally identical to one installed on supported hardware—driver support, Windows Update, the Microsoft Store, and most features work as expected. The only permanent difference is that Microsoft may not offer major feature updates automatically on ineligible devices; those must be installed manually once a year using the same Rufus method.

Before You Start: Laying the Groundwork

A successful upgrade starts with preparation. Rushing into an in-place upgrade without checking firmware settings or disk layout can lead to headaches or data loss. Follow these steps first.

Check your Windows 10 edition and architecture. Open Settings > System > About. If the system type says “32-bit operating system,” an in-place upgrade is impossible—Windows 11 is 64-bit only. You’ll need a clean install, and you should back up all data first. Also note whether you have Home, Pro, or another edition; your Windows 11 ISO must match.

Inventory your firmware options. Reboot into the BIOS/UEFI setup. Look for TPM settings—Intel platforms label it PTT (Platform Trust Technology), AMD calls it fTPM (Firmware TPM). Enable them if they exist. Check whether Secure Boot is present and can be turned on. Even if you plan to bypass these checks later, having them enabled improves real-world security and avoids potential driver signature issues. If your motherboard offers UEFI boot but currently boots in legacy mode, consider switching.

Assess disk partition style. Windows 11 prefers GPT disks with UEFI. If your system drive is MBR and you boot in legacy BIOS mode, use Microsoft’s mbr2gpt.exe tool to convert the disk without losing data. The command runs from within Windows 10 and requires that the disk pass validation. Back up everything first, and be ready to change firmware to UEFI-only boot after conversion. Once on GPT, the upgrade path is smoother.

Back up thoroughly. Create a full system image using something like Macrium Reflect or the built-in Windows 7 backup tool, or at least copy your user folders, browser profiles, and important application data to an external drive. An in-place upgrade usually preserves everything, but a belt-and-suspenders backup is cheap insurance.

Step by Step: Creating the Rufus USB and Upgrading In Place

This method preserves your personal files, installed applications, and most settings. It’s the fastest way to move to Windows 11 without starting from scratch.

What You Need

  • A USB flash drive (8 GB or larger)
  • The official Windows 11 multi-edition ISO from Microsoft
  • The latest version of Rufus (download from rufus.ie)
  • A working Windows 10 installation on the target PC

Create the Installation USB

  1. Download the Windows 11 ISO. Choose the multi-edition x64 version that matches your current language. Save it to your local drive.
  2. Launch Rufus. Under Device, select your USB drive. Click the Select button and point Rufus to the downloaded ISO.
  3. Set Partition scheme to GPT and Target system to UEFI (non CSM). If your PC still uses legacy BIOS, you may need to set MBR instead, but a modern UEFI setup is recommended for better compatibility.
  4. Click Start. Rufus will present a customization dialog. Check the box for “Remove requirement for 4GB+ RAM, Secure Boot and TPM 2.0.” You may also see an option to remove the Microsoft account requirement during OOBE—enable it if you prefer a local account.
  5. Confirm the drive will be formatted and let Rufus create the modified installation media. This takes a few minutes.

Perform the In-Place Upgrade

  1. Insert the USB drive into the target Windows 10 PC while it’s running. Open File Explorer, navigate to the USB, and run Setup.exe.
  2. When the Windows 11 Setup window opens, click “Change how Setup downloads updates,” select “Not right now,” and click Next. This prevents dynamic updates from re-enabling hardware checks during installation.
  3. Accept the license terms. If a warning about unsupported hardware appears, click Accept—the bypass you applied with Rufus allows installation to continue.
  4. Choose “Keep personal files and apps.” Click Install. The upgrade takes 20–45 minutes, depending on your drive speed and installed bloat.
  5. After several reboots, sign in and verify that your apps, files, and Windows activation status are intact. Windows Update will then download the latest monthly cumulative patches and driver updates automatically.

If you see a “This PC can’t run Windows 11” message despite using the Rufus USB, double-check that you enabled the bypass options during creation and chose “Not right now” for updates. Disconnect unnecessary peripherals and, as a last resort, use the manual registry bypass method described below.

Alternative Bypass: The Manual Registry Route

If you prefer not to trust a third-party tool or need to work around a stubborn installation, you can apply the same bypasses manually during setup.

  1. Boot from a standard Windows 11 USB or run Setup.exe from an ISO mounted within Windows 10.
  2. When the unsupported-hardware error appears, press Shift+F10 to open a command prompt.
  3. Type regedit and navigate to HKEY_LOCAL_MACHINE\SYSTEM\Setup.
  4. Create a new key named LabConfig, then inside it create the following DWORD values and set each to 1:
    - BypassTPMCheck
    - BypassSecureBootCheck
    - BypassRAMCheck (if your system has less than 4 GB)
  5. Close the registry editor and command prompt, then click the back arrow in Setup to return to the previous screen and proceed normally.

This method achieves exactly what Rufus automates. It’s best for confident users who need no-frills control.

After the Upgrade: Updates, Performance, and Annoyances

Once Windows 11 is running, the day-to-day experience is largely unremarkable—in a good way. Monthly Patch Tuesday updates install as usual through Windows Update, as do driver and Defender definition updates. The System and Microsoft Store both work, and you can sign in with a Microsoft account or local user as you prefer.

The one regular chore is feature updates. When Microsoft releases a new version (for example, 24H2, 25H2), Windows Update will not offer it on unsupported hardware. You must download the latest ISO, create a fresh Rufus USB, and run Setup.exe again as an in-place upgrade. Most enthusiasts schedule this once a year; the process is identical and preserves everything. You can also use the opportunity to clean up temporary files with Storage Sense afterward.

Hardware that would have been marginal with Windows 10 can benefit from a few cheap upgrades. Moving from a spinning hard drive to even a budget SATA SSD brings the biggest speed jump, while bumping RAM from 4 GB to 8 GB or 16 GB smooths multitasking and modern browsers. If the motherboard has an M.2 slot or an open PCIe x4 slot, an NVMe drive (via adapter) delivers impressive boot and load times. Many older desktops also perk up with a $20 Wi-Fi 6 USB adapter or a driver update from the OEM’s site.

Security: What You Lose and How to Compensate

Bypassing TPM 2.0 and Secure Boot does reduce the security baseline. TPM underpins features like BitLocker drive encryption with automatic unlock, Credential Guard, and certain Windows Hello biometrics. Secure Boot prevents low-level rootkits from loading during boot. On an unsupported PC, these may be unavailable or limited.

You can still enable them if your firmware supports them. In fact, enabling PTT/fTPM and Secure Boot after installation is strongly recommended—Windows will detect the change and start using them where possible. If BitLocker was already active, it will transition to TPM-backed protection seamlessly. For systems that cannot enable these at all, layer other defenses: use BitLocker with a pre-boot password or a third-party encryption tool like VeraCrypt, ensure your user account isn’t an administrator for daily tasks, keep your browser and security software current, and be vigilant about the software you install.

Memory Integrity (part of Core Isolation) is a virtualization-based security feature that can cause performance regressions on very old CPUs or with legacy drivers. If your system feels sluggish after upgrading, check Windows Security > Device Security > Core Isolation and consider turning Memory Integrity off—but only after ensuring all drivers are trusted and up to date.

When to Think Twice About This Approach

Not every unsupported PC is a good candidate for a Windows 11 bypass. If your machine has only 4 GB of RAM and a mechanical hard drive, Windows 11 will struggle with even moderate workloads. Some enterprise VPN clients, anti-cheat systems in games, and digital cable tuner software expect Secure Boot and a TPM to be present; they may refuse to run on a bypassed install. Mission-critical or regulated environments may demand official support and attestation—ESU or a new PC might be mandatory there.

Also, extremely old CPUs (pre-Nehalem Intel or pre-Bulldozer AMD) may lack SSE4.2 instructions, which recent Windows 11 builds require. The installer will usually warn you, but the only safe way to know is to test. If you can run a modern browser and Office suite on Windows 10 today, Windows 11 will likely perform similarly or better after a clean SSD install.

Using Rufus to modify Microsoft’s own ISO for personal installation falls into a gray area but does not constitute piracy. You are using genuine software, licensed either through a digital entitlement or a purchased key, and you’re not circumventing activation. Microsoft’s official stance is that such installations are unsupported and might not receive updates, but it does not actively block them. The key is to avoid redistributing the modified ISO; the Rufus method keeps everything on your own hardware and lets you download the original bits from Microsoft yourself.

A Quick-Reference Checklist

  1. Back up all important data and note your Windows 10 edition and language.
  2. Enter BIOS/UEFI and enable PTT/fTPM and Secure Boot if possible; if using legacy MBR, convert to GPT with mbr2gpt.
  3. Download the official Windows 11 x64 multi-edition ISO.
  4. Use Rufus to create a USB with the requirement-bypass option enabled.
  5. From Windows 10, run Setup.exe on the USB, choose “Not right now” for updates, accept any warnings, and select “Keep personal files and apps.”
  6. After installation, run Windows Update and install all available driver and security updates.
  7. Annually repeat the Rufus-based in-place upgrade for the latest feature release.

The Real Bottom Line

Older PCs don’t need to become e-waste when Windows 10 support ends. With an hour of preparation and a free tool, you can install Windows 11 on hardware that Microsoft’s compatibility checker dismisses, keep all your files and programs, and continue receiving monthly security patches. The annual manual feature update is a small inconvenience compared to the cost of a new PC. Performance holds up remarkably well, especially if you’ve already upgraded to an SSD and sufficient RAM. As the October 2025 deadline approaches, the Rufus method represents not a hack, but a pragmatic, responsible way to extend the life of perfectly functional computers.