Jump to content
154 posts in this topic

Recommended Posts

38 minutes ago, antuneddu said:

@Matgen84 you changed to Dev Chanel ?

 

 

 

Thanks @antuneddu  I have a VMware machine for Windows 11. Despite Encryption and TMP, I can change  the Channel

 

Spoiler

1767597282_Capturedcran2021-09-2314_33_00.png.9f215ba76a4c9bc3bf9be932e240d8e3.png

 

Edited by Matgen84

Hi @all @eSaF

I don't find the answer in this topic. SecureBoot + TPM to install Windows 11 or only TPM ?

Is TPM to be activated necessarily for Windows update under Windows 11 ? I search this information on Microsoft forum without success.

Does somebody have an idea, please.

Edited by Matgen84
1 hour ago, eSaF said:

I too am unclear about the subject but my SecureBoot in the BIOS is set to Standard if I remember correctly (never touched it or changed it) and TPM is enabled. I am sure there is work around  videos on Youtube describing installation without TPM. Sorry I couldn't be more helpful.

 

Thanks a lot 🙂 I read some articles about bypassing TPM (with script). I want to install Windows 11 only on my Z390, so I can activate Intel PTT in the BIOS. The Ivybridge config is too old, I keep Windows 10.

On 10/4/2021 at 3:25 PM, Matgen84 said:

Thanks a lot 🙂 I read some articles about bypassing TPM (with script). I want to install Windows 11 only on my Z390, so I can activate Intel PTT in the BIOS. The Ivybridge config is too old, I keep Windows 10.

 

As far as I know, Win11 requires a TPM 2 enabled device and Secure Boot capable UEFI by default. TPM2 enabled seems to be a must but Secure Boot can be enabled or disabled.
If I am wrong, please correct me.


In Gigabyte Z390 series mobos like mine there are 2 options in BIOS related to TPM:

  • TPM 2 physical connector to be able to plug in an extra TPM2 cryptographic device
  • PTT option in BIOS with a function similar to TPM, this option is the one that Windows 11 can check as an installation requirement (I guess).


I doubt that macOS + Windows 11 users on hackintosh have UEFI Secure Boot enabled because OpenCore does not boot with this option enabled (except if you have digitally signed OpenCore files from Linux). Secure Boot can be Standard or Custom but the important thing is if it is enabled or disabled.


You have already seen that there is more than one way to install Windows 11 without TPM 2. The way to do it with script from the installation program seems complex to me and sometimes it does not work well. The option to replace the Sources folder in the Windows 11 ISO image with the Windows 10 one, renaming the Windows 10 install.esd file to install.wim, usually works fine for me.

Edited by miliuco
  • Thanks 1
10 minutes ago, miliuco said:

 

As far as I know, Win11 requires a TPM 2 enabled device and Secure Boot capable UEFI by default. TPM2 enabled seems to be a must but Secure Boot can be enabled or disabled.
If I am wrong, please correct me.


In Gigabyte Z390 series mobos like mine there are 2 options in BIOS related to TPM:

  • TPM 2 physical connector to be able to plug in an extra TPM2 cryptographic device that in some mobos like mine is not factory installed
  • PTT option in BIOS with a function similar to TPM, this option is the one that Windows 11 can check as an installation requirement (I guess).

When some one says that it has TPM enabled, I don't know if it refers to the TMP 2 option (which when activated informs whether or not you have an associated device) or to the PTT option, it depends on the mobo.


I doubt that macOS + Windows 11 users on hackintosh have UEFI Secure Boot enabled because OpenCore does not boot with this option enabled (except if you have digitally signed OpenCore files from Linux). Secure Boot can be Standard or Custom but the important thing is if it is enabled or disabled.


You have already seen that there is more than one way to install Windows 11 without TPM 2. The way to do it with script from the installation program seems complex to me and sometimes it does not work well. The option to replace the Sources folder in the Windows 11 ISO image with the Windows 10 one, renaming the Windows 10 install.esd file to install.wim, usually works fine for me.

 

I don't find Secure Boot in BIOS, but the security option is set to 'system' by default. For Windows 11, PTT option in BIOS is enabled. So I can boot Monterey via Clover, without any problem. 

 

Using these settings, Windows PC Health indicates that Windows 11 can be installed 😊 tomorrow will be the big day to install the release

  • Like 1
  • Haha 2
21 minutes ago, Matgen84 said:

 

I don't find Secure Boot in BIOS, but the security option is set to 'system' by default. For Windows 11, PTT option in BIOS is enabled. So I can boot Monterey via Clover, without any problem. 

 

Using these settings, Windows PC Health indicates that Windows 11 can be installed 😊 tomorrow will be the big day to install the release

I have Secure Boot in BIOS Boot tab, very bottom, clicking displays the options.

 

EDIT: as you say, Secure Boot capable (enabled or disabled) and TPM or PTT enabled >> Win11 can be installed. 

Edited by miliuco
  • Thanks 1
  • Haha 1

Hi @all

 

That's it. I did a clean install of Windows 11 (with only Intel PTT enabled). So I can start Monterey (with Clover) on my other hard drive (and why not with Opencore). In addition, I installed Office 2021.

Pity. When starting the key, Microsoft left the old installer interface, for the selection of the disc, the choice of the version ...😪

"...Windows 11 requires a TPM 2 enabled device and Secure Boot capable UEFI by default. TPM2 enabled seems to be a must but Secure Boot can be enabled or disabled..."

 

Today I've done a fresh install of Windows 11 onto a blank disk with TPM2 and PTT enabled and UEFI Secure Boot disabled. All has gone well. Windows 11 works very fine although I've noticed minor cosmetics bugs related to the Spanish translation.

 

 

Edited by miliuco
  • Like 1

From what I've read there seems to be some confusion about bypassing the TPM and Secure Boot checks using the registry edit. If you are performing a clean install (booting from a USB or ISO disk installer) you can use the registry hack in the installer itself while it is running.

 

https://arstechnica.com/gadgets/2021/10/how-to-upgrade-to-windows-11-whether-your-pc-is-supported-or-not/2/#h2

(there are a bunch of other pages out there with the same info.)

 

Just skip half way down the page to the "Installing on a PC without Secure Boot or a TPM" section. The nice thing about this method is that the only edit to the registry is done to the "live" Windows installer environment running in memory. There's no questionable DLLs to use or installer files that have to be modified before hand, nothing is written to disk anywhere, it simply bypasses the checks at the beginning of the install process. No need to reboot.

 

These are the same registry edits linked earlier by Herve to Chris Titus Techs website, (https://www.insanelymac.com/forum/topic/348126-windows-11-discussion/?do=findComment&comment=2762109) except the explanation above shows how to do it on the fly. It took me all of 90 seconds to do the edit while running the installer and get past the checks.

 

As has been stated elsewhere, there's no telling what running Win 11 without TPM or Secure Boot will do to the environment down the road, but for now it seems completely fine. Ultimately the best solution is likely a bootloader strategy that allows both Windows to see the TPM and Secure Boot and OSx to ignore it.

 

Now that I have a clean install my first disappointment is that I can't use small icons on the taskbar without breaking the clock display. Oh, Micro$oft . . . you never fail to let me down, or run an untested update that breaks my domain shares, or force an update that breaks my printers, or (insert bad Microsoft behavior here.)

  • Like 1
On 10/6/2021 at 6:59 AM, eSaF said:

 

Yes Bro it's a burden I have to contend with, it is an annoyance but it gives me comfort like slipping in between nice clean bed line on a winters night. :hysterical: 

Here She is all dressed up in her finery, Living Wallpaper (Blue Fog) with Audio - this is some serious eye candy which I am partial to very much. :hysterical:

Screenshot 2021-10-06 114355.png

:lol: You managed to find it ... (for a moment, I had assumed it was my screenshot 😆)  yes it's very nice and pleasant in the meantime I armed myself with good will too and I reinstalled everything with final release

Edited by antuneddu
  • Haha 1

Hi @all @eSaF

After clean install Windows 11 Pro, I have noticed for the moment, two problems on my Z390:

  • numeric keypad is not locked automatically in session (solved with regedit).

  • Above all, no screen standby, no PC standby mode. Power settings set display to 10 minutes, PC to 20 minutes.

    Can you help me, i have never had this kind of problem with windows 10.

@Matgen84

I don't have numeric keypad problem, it's locked at login.

About standby, I don't know if I understand you. I have the same as you in Configuration. But in Control Panel > Energy I can go into advanced settings and set more options.

Edited by miliuco
  • Like 1
2 hours ago, miliuco said:

@Matgen84

I don't have numeric keypad problem, it's locked at login.

About standby, I don't know if I understand you. I have the same as you in Configuration. But in Control Panel > Energy I can go into advanced settings and set more options.

@miliuco
Strangely, I've numeric keyboard lock at windows login screen, but not in  the session.
About standby, I find advanced settings. Why are necessary to set them ! On Windows 10, I don't use these advanced settings.

 

EDIT: Randomly, Windows 11 restart alone 😪

 

Edited by Matgen84
  • Like 1
37 minutes ago, eSaF said:

@Matgen84 - Hi same as @miliuco (I don't have numeric keypad problem, it's locked at login).

I will check - (no screen standby, no PC standby mode) - and let you know.

 

The attached is how my Power Settings are, let me know if you want me to dig a bit further.

  Reveal hidden contents

609825431_Screenshot2021-10-12105118.thumb.png.544962bb2aa09472e7bedbdc3effa2bf.png

 


@eSaF  - Hi, I have the same Power settings. Thanks to let me known about your system (problem or not with standby).

As I edit before: Windows 11 restart alone randomly. On my Z390 Aorus Master BIOS, I use only Intel PTT (no secure boot) !

54 minutes ago, Matgen84 said:


@eSaF  - Hi, I have the same Power settings. Thanks to let me known about your system (problem or not with standby).

As I edit before: Windows 11 restart alone randomly. On my Z390 Aorus Master BIOS, I use only Intel PTT (no secure boot) !

I haven't noticed this behaviour of random restart. Mine doesn't do.

In BIOS I have PTT enabled + TMP2 enabled + Secure boot disabled.

2 minutes ago, miliuco said:

I haven't noticed this behaviour of random restart. Mine doesn't do.

In BIOS I have PTT enabled + TMP2 enabled + Secure boot disabled.

@miliuco I don't have TPM2 module. In BIOS, my Z390 Aorus Master can only activate PTT + SecureBoot disabled

 

I don't know why there is a random restart.

Since few minutes (strangely), standby works: for display with screen saver. Waiting for standby the PC, now 😂

10 hours ago, Matgen84 said:

@miliuco I don't have TPM2 module. In BIOS, my Z390 Aorus Master can only activate PTT + SecureBoot disabled...

 

In my Z390 Aorus Elite there is a PTT option, as in your Aorus Master. When enabled, it also enables TPM2 that's under Trusted Computing.

Entering Trusted Computing, I see TPM2 enabled using PTT as TPM2 interface type.

So, although I can plug an external specific TPM2 device (no one for now), PTT (when activated) acts as TMP2 device.

I think your BIOS must look like mine, is it so?

 

ptt.jpeg.9dabd1dd09b3186e86b9fe990b5f664b.jpeg

 

tpm2.jpeg.c0f21bef480deb71a07e8a7b0d7c65a5.jpeg

 

Edited by miliuco
  • Thanks 1
On 10/13/2021 at 12:19 AM, miliuco said:

 

In my Z390 Aorus Elite there is a PTT option, as in your Aorus Master. When enabled, it also enables TPM2 that's under Trusted Computing.

Entering Trusted Computing, I see TPM2 enabled using PTT as TPM2 interface type.

So, although I can plug an external specific TPM2 device (no one for now), PTT (when activated) acts as TMP2 device.

I think your BIOS must look like mine, is it so?

 

Thanks @miliuco

 

My BIOS looks like yours. Yes, the Aorus Master Z390 (rev. 1.0) motherboard has TPM 2.0 support. Right, PTT emulate as TPM2. I don't want to buy TPM2 module for now. GC-TPM2.0_S module

 

Now I have black screen of the death with stop code 0xc000021a 😪 Instead of randomly restart.  Maybe, I have to reinstall Windows 11. But I don't remember how to format the hard disk after I remove the partition via the installer (if it is possible).

×
×
  • Create New...