This article explains how to install Windows 11 as a guest OS in a virtual machine running on VMware Workstation or VMware ESXi hypervisors. When trying to install Windows 11 on a VMware virtual machine, most users see an error message stating that Windows 11 cannot run on this computer. Let’s try to explain why this message appears and how to bypass it.

Microsoft published a set of minimum system requirements to install Windows 11:

• 4 GB RAM
• 1 GHz dual-core CPU
• TPM 2.0 (Trusted Platform Module) chip

If your computer or the virtual machine doesn’t meet the requirements, the following error appears when you try to install Windows 11 from an ISO image:

This PC can’t run Windows 11. This PC doesn’t meet the minimum system requirements to install this version of Windows. For more information, visit aka.ms/WindowsSysReq </pre

How to Bypass TPM and Secure Boot when Installing Windows 11 to a VMware VM?

You can skip the system requirements check when installing Windows 11 on a virtual machine. You can bypass the minimum requirements checks for memory, compatible CPU, TPM chip, and UEFI+Secure Boot.

1. To do it, run a normal Windows 11 installation on a VMware virtual machine. After the installation error appears (see the screenshot above), go one step back (click an arrow in Windows Setup window);
2. Press Shift + F10 to open the command prompt;
3. Enter regedit.exe to open the Registry Editor;
4. Go to the reg key HKEY_LOCAL_MACHINE\SYSTEM\Setup and create a new registry key named LabConfig;
5. Create three DWORD (32-bit) parameters with values of 1 in the LanConfig reg key:
   BypassTPMCheck
BypassSecureBootCheck
BypassRAMCheck
6. Close the Registry Editor and the command prompt and get back to Windows 11 setup screen;
7. Select Windows 11 edition and click Install;
8. You should now be able to continue installing Windows 11 without checking the minimum system requirements and the TPM device.

Installing Windows 11 on VMware Workstation

To install Windows 11 in a native mode (meeting all system requirements) on VMware Workstation, create a virtual machine with UEFI support, Secure Boot and a virtual TPM chip.

Open virtual machine settings, go to the Advanced tab and make sure that UEFI firmware is used for the VM. Also check the Enable secure boot option.

Then add a virtual TPM module (vTPM) to the VM. Before doing it, encrypt the VMware Workstation virtual machine.

Go to Access Control in the Options section and click Encrypt. Set the encryption password. The encryption takes some time.

Then open the Hardware tab, click Add and add the Trusted Platform Module.

Then you can install Windows 11 on this virtual machine as usual.

How to Install Windows 11 on VMware ESXi/vSphere?

To install Windows 11 to a VMware ESXi virtual machine in vSphere, add the Virtual Trusted Platform Module to the VM. Before doing it, you will have to configure the Key Management Server (key provider) to manage encryption keys.

In vSphere 7.0 and newer, vCenter supports a built-in Key Provider, so you don’t need using an external KMS. To enable the built-in Key Provider in vCenter:

1. Select your vCenter and open Configure -> Security -> Key Provider;
2. Click Add -> Add Native Key Provider;
   
3. Enter the provider name and uncheck the option Use key provider only with TPM protected ESXi hosts. It allows using vTPM for hosts without a physical TPM chip;
4. Then back up the Key Provider. Click BACK-UP and download the .p12 file. Save it to a secure location.

To enable vTPM for a VMware ESXi virtual machine, it must meet the following requirements:

• vSphere 6.7 or newer (you will not be able to use free VMware Hypervisor)
• VM Hardware 14 (ESXi 6.7) or higher
• EFI and Secure Boot
• VM encryption
• Windows Virtualization Based Security option must be enabled in the VM settings

Make sure that all VM options are enabled and you can encrypt the disk of your VM.

To encrypt an existing VM, open the VM Options tab and enable disk encryption in the Encryption section.

Then you can add the TPM in the Virtual Hardware tab (Add New Device -> Trusted Platform Module) and run normal Windows 11 installation on the VM.