Why does Windows 11 need secure boot

mcp111 said:

IT told me my PC doesn't meet Windows 11 requirements because secure boot is not enabled

Click to expand...

Whoever "IT" is, "IT" is wrong.

mcp111 said:

But the PC health check tool expects it to be turned on otherwise it fails

Click to expand...

It checks for Secure boot being supported not for it being turned on.

Result obtained on a computer that has Secure boot disabled.

Denis

<SIGH> Once again, a simple question is being asked and the answers are everything but that ...

The question is why Windows 11 NEEDS Secure Boot -- and the simple fact is it DOES NOT! How do I know this? Because I have Win11 running JUST FINE on PCs that do not support Secure Boot. If Windows 11 NEEDED it, those PCs would not work on Windows 11.

The actual fact is that MS WANTS Secure Boot to install Windows 11 -- it is not something the OS requires in order to work.

So yeah, I understand the question is then essentially the same -- why does MS need Secure Boot for Windows 11 -- but I believe the distinction between what the OS needs in order to work and what MS wants in order to install it -- this distinction is important.

Mark Phelps said:

<SIGH> Once again, a simple question is being asked and the answers are everything but that ...

The question is why Windows 11 NEEDS Secure Boot -- and the simple fact is it DOES NOT! How do I know this? Because I have Win11 running JUST FINE on PCs that do not support Secure Boot. If Windows 11 NEEDED it, those PCs would not work on Windows 11.

The actual fact is that MS WANTS Secure Boot to install Windows 11 -- it is not something the OS requires in order to work.

So yeah, I understand the question is then essentially the same -- why does MS need Secure Boot for Windows 11 -- but I believe the distinction between what the OS needs in order to work and what MS wants in order to install it -- this distinction is important.

Click to expand...

In addition, currently, Windows 11 does NOT need TPM, UEFI/GPT, or a CPU on the supported list to run either.

2 Points:

1) We might try slightly rephrasing the statement that Windows 11 needs these features to something like this:

Windows 11 needs TPM, a supported CPU, etc. if you want to run in a supported configuration. However, as a concession to enthusiasts, Microsoft is allowing Windows 11 to be run without these, but the user needs to understand that these configurations are not technically supported configurations.

2) You might also look at this as something being aimed largely at OEMs. In order to get Windows 11 certification, any new system shipping with Windows 11 must support these features.

Windows 11"need" these features so non-expert users will rush to upgrade their hardware. Something similar was attempted with Windows Vista when they had hidden the fact that no WDDM graphics drivers were necessary. You could use an "unsupported" graphics card with the Windows XP drivers (XPDM) as long as it supported at least DirectX 9. Also this is a way to avoid support for non-compliant systems. When we call Microsoft for support they have the right to refuse if our system is non-compliant. Don't worry, just ask us experts in this forum for support. We are much faster than Microsoft and much more helpful to solve your issue. We don't try to buy time by asking useless questions as many formal support employees do.

Hi there

@mcp111

Currently secure boot isn't necessary to make W11 work. In the future I suppose to prevent piracy embedded keys and the TPM module with its keys (when enabled properly in the future) together with full OS encryption will make the OS almost impossible to hack into or pirate.

However for HOME users particularly those who may dual boot / try out different OS'es, different versions of Windows etc I think all this "extra security" is just unnecessary overkill and complications. There's so many legal ways to get Free copies of W11 (or W10 even) that I'm sure Windows piracy isn't even a major concern of Ms any more - especially as it moves more towards subscription offerings e.g Office/365 or cloud services (Azure, OneDrive etc).

I am against on home computers having any sort of encryption as if you get any problem you've usually had it. If I need 100% secure data then it doesn't go on the Internet !!! WD on windows is more than adequate these days -- there's too much paranoia around security -- if people were better educated on how to recognize and deal with Scams they would be much better off - sometimes if you judge by the press to the tune of 100,000's of (equiv in local currencies) ) USD's or even more.

For the applications I run on Windows - I can use a VM quite happily if Ms introduces all this extra complexity into the OS. For people running Internet servers, e-commerce, private cloud services, vpns, company wide servers / cloud services etc then it's probably a good thing to have as much security as its possible to provide - leaving the OS though still useable of course, but for Home users -- C'mon!!!!

Cheers
jimbo

They don't really care about security. They have made deals with manufacturers to make us buy new hardware. Anyone unaware that Windows 11 can be made to run on non-compliant systems, will at least consider buying a new computer. Most will even rush to get it for Christmas. Don't waste your money, unless you really want a new computer. Read the relevant thread of how to bypass compatibility check and install Windows 11 on any computer capable of running Windows 10 64-bit.

spapakons said:

Windows 11"need" these features so non-expert users will rush to upgrade their hardware. Something similar was attempted with Windows Vista when they had hidden the fact that no WDDM graphics drivers were necessary. You could use an "unsupported" graphics card with the Windows XP drivers (XPDM) as long as it supported at least DirectX 9. Also this is a way to avoid support for non-compliant systems. When we call Microsoft for support they have the right to refuse if our system is non-compliant. Don't worry, just ask us experts in this forum for support. We are much faster than Microsoft and much more helpful to solve your issue. We don't try to buy time by asking useless questions as many formal support employees do.

Click to expand...

They don't actually answer questions. They read a prepared script.

spapakons said:

They don't really care about security. They have made deals with manufacturers to make us buy new hardware. Anyone unaware that Windows 11 can be made to run on non-compliant systems, will at least consider buying a new computer. Most will even rush to get it for Christmas. Don't waste your money, unless you really want a new computer. Read the relevant thread of how to bypass compatibility check and install Windows 11 on any computer capable of running Windows 10 64-bit.

Click to expand...

You should report that to someone in authority.

Winuser said:

They don't actually answer questions. They read a prepared script.

Click to expand...

One more reason to forget Microsoft support and consult this forum instead. Since you won't be using Microsoft support, I see no reason why not to install Windows 11 on your unsupported system. Go ahead.

spapakons said:

One more reason to forget Microsoft support and consult this forum instead. Since you won't be using Microsoft support, I see no reason why not to install Windows 11 on your unsupported system. Go ahead.

Click to expand...

Just make sure that everyone that does this has a backup of Win 10 so in-case something goes wrong with updates so they can go back to 10.

The ideal is to clone your Windows 10 installation and then upgrade to Windows 11. This way you will have all your data and applications without having to install everything from scratch. Also you can do a direct comparison of Windows 11 with 10 for your everyday computing. I would upgrade Windows 11 for a year. If everything is OK I would switch permanently. If anything goes wrong at any time I would backup my newest data and return to Windows 10.

spapakons said:

The ideal is to clone your Windows 10 installation and then upgrade to Windows 11. This way you will have all your data and applications without having to install everything from scratch. Also you can do a direct comparison of Windows 11 with 10 for your everyday computing. I would upgrade Windows 11 for a year. If everything is OK I would switch permanently. If anything goes wrong at any time I would backup my newest data and return to Windows 10.

Click to expand...

I wouldn't waste anytime into going to 11 on hardware that's not compliant. There's very little in 11 in ways of improvements over 10 and 10 will receive support until Oct 2025 leaving the user with time to get new hardware that's compatible with 11.

Probably Windows 11 is Windows 10 with a new skin, but this might change in newer builds. Also I would like to test Windows 11, to get familiar with it. I am a computer technician and I should test Windows 11 and find any bugs and their solutions before any of my customers face them. It is a free upgrade from 10 to 11, so why not. I will clone my Windows 10 installation. I am not going to replace Windows 10 without precautions.

spapakons said:

Probably Windows 11 is Windows 10 with a new skin, but this might change in newer builds. Also I would like to test Windows 11, to get familiar with it. I am a computer technician and I should test Windows 11 and find any bugs and their solutions before any of my customers run into it. It is a free upgrade from 10 to 11, so why not.

Click to expand...

That's you and not the average user. They aren't computer techs.,. they just want to use it to browse the internet, do simply business like activities, and play some games. I doubt many can navigate the steps needed to install 11 on non-compatible hardware.

If they can do what they want to with 10 there's no need to upgrade to 11.

If they don't have the knowledge to install Windows 11 on unsupported machines they can consult this forum. Nobody knows everything. Even us experts take advice from others if we don't know something. If they are not willing to try and they rather buy a new computer, so be it. We don't try to force anyone installing Windows 11 on their old systems. We are just trying to help. As a more experienced user, I must inform others that they can use their current computer, buying a new computer is not mandatory to use Windows 11. If anyone is not interested in Windows 11 and would rather use Windows 10, then he is at the wrong forum. He should be at www.tenforums.com I rest my case.

spapakons said:

If they don't have the knowledge to install Windows 11 on unsupported machines they can consult this forum. Nobody knows everything. Even us experts take advice from others if we don't know something. If they are not willing to try and they rather buy a new computer, so be it. We don't try to force anyone installing Windows 11 on their old systems. We are just trying to help. As a more experienced user, I must inform others that they can use their current computer, buying a new computer is not mandatory to use Windows 11. If anyone is not interested in Windows 11 and would rather use Windows 10, then he is at the wrong forum. He should be at www.tenforums.com I rest my case.

Click to expand...

My point is I doubt they can find this site or follow the directions to install 11. Using 11 isn't mandatory either since 10 is just as good and will be supported until Oct 2025. I don't know why you want to push users into using an OS that's not supported on their hardware?

BunnyJ said:

My point is I doubt the can find this site or follow the directions to install 11. Using 11 isn't mandatory either since 10 is just as good and will be supported until Oct 2025. I don't know why you want to push users into using an OS that's not supported on their hardware?

Click to expand...

I agree with you 100%. Very few average computer users even know that sites like this exist let alone how to find them. They depend on other sources for help. Be it a phone call to support, a friend, a local shop or even returning the computer. Win 10 is a great OS and for most there is no reason to upgrade to Win 11 at this time.

Winuser said:

I agree with you 100%. Very few average computer users even know that sites like this exist let alone how to find them. They depend on other sources for help. Be it a phone call to support, a friend, a local shop or even returning the computer. Win 10 is a great OS and for most there is no reason to upgrade to Win 11 at this time.

Click to expand...

And the average user isn't likely going to be capable of navigating through the registry to make the necessary changes to install 11. Win10 is great and I would be using it if I didn't have compatible hardware.

Overall, I like to play it safe rather than taking risks and I use that philosophy when I suggest how to do things to others. I would hate to mess them up and have them hate me or the forum. Like it or not we represent the owner and if we look bad he looks bad.

Yes, the average user is not aware of this forum, but all of us already there might be interested in learning they can use their current computer, no need to spend hard earned cash for a new one. If they find instructions complicated, they can ask a mire advanced friend to help them. They can also ask at the Service Department of a computer store to do it for them.
I am not trying to push anyone to upgrade. I just help anyone already decided to do so.