Skip-tpm-check-on-dynamic-update.cmd -
This is the most common method. When a user creates a Windows 11 bootable USB using Rufus, the software asks if the user wants to remove the requirement for 4GB RAM, Secure Boot, and TPM. If the user selects "Yes," Rufus automatically downloads and injects this script (or code performing the same function) into the installation media.
: It creates the AllowUpgradesWithUnsupportedTPMOrCPU value in the Windows Registry under HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup and sets it to 1 .
: Running the script once installs the bypass; running it a second time typically removes it. Security and Maintenance Official Warning skip-tpm-check-on-dynamic-update.cmd
If you have a PC with a missing TPM (common in custom-built desktops without TPM headers) or a disabled TPM 1.2, this script remains one of the most reliable ways to upgrade via Windows Update as of late 2025. Use it wisely.
Consider a 2017 Intel i7-7700K processor. It supports TPM 2.0 (via a separate module or firmware TPM). But Microsoft’s official list starts at Intel 8th Gen. The CPU is powerful enough for Windows 11, yet the official installer blocks it. This script unlocks that potential. This is the most common method
If a "Windows protected your PC" screen appears, click and then Run anyway .
However, it should be used with respect for the underlying security model. Always back up your data. Always verify the integrity of the script (audit the code yourself). And remember: while you can skip the check, you cannot skip the eventual need for a modern, secure platform. Use it wisely
If you prefer not to use a script, you can manually allow upgrades on unsupported hardware by editing the registry: Press Win + R , type regedit , and press Enter. Navigate to: HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup . Right-click, select . Name it: AllowUpgradesWithUnsupportedTPMOrCPU . Double-click the new value and set it to 1 . Frequently Asked Questions Is it safe to use?