Windows 10: PC Cannot run Windows 11, even though TPM and secure boot are enabled

Hey all! I just made an account here now to ask this question So with the new windows 11 update, I wanted to see if my computer could handle it. I practically destroy the requirements, but it says i cant run it. For some background, I researched this and ended up doing a bunch of stuff with the BIOS to enable TPM and secure boot, since people said thats the issue. However, that hasnt worked. I'm hyped up for W11, and I really dont want to miss out. Any ideas? My windows version is 21H1.

:)

 

Windows 10 Pro, more or less secure when TPM is enabled?

I'm not an IT professional, just a home user seeking knowledge.

I have two PC's, not networked nor on a domain. Both running Windows 10 Pro version 1703. Both are hardwired to the router. TPM 2.0 is enabled on the newer PC and the older PC does not have TPM, neither 1.2 or 2.0. Neither PC has BitLocker or Secure Boot
enabled.

Automatic enabling of TPM is touted by MS as a security feature in Windows 10 if you have the appropriate hardware. What is the older PC without TPM vulnerable to that the newer PC with TPM is invulnerable? What does the presence of TPM prevent from occurring?
What can happen to the non-TPM PC that cannot happen to the TPM PC?

I understand that antivirus software mitigates infection by a virus, malware etc. What does TPM mitigate? Does it prevent unauthorized remote access to my PC as a result of a download, an email or browsing an infected website?

I have talked with 7 people at MS and no one can give me a meaningful answer to these questions!

Or is it that TPM only enhances security when paired with Bitlocker and/or Secure Boot?

 

Windows 8 Secure Boot Feature: Not So Secure?

So Linux is switching to secure boot also? Or they have to because of UEFI?

 

Windows 8 Secure Boot Feature: Not So Secure?

• Linux
• Linux
• Linux
• Linux
• Oh and OSX

Here is a statement from a Kernal Developer at Red Hat:

I'm not sure this exploits the legacy BIOS but rather it exploits the legacy boot method on MBR drives, injecting a signed key before the OS boots, which you are correct in that it has nothing to do with Windows 8. And the simplest fix would just be to require boot drives use GPT when Secure Boot is enabled in UEFI.