Is it OK to disable TPM & SecureBoot once Win11 is installed or will that cause problems? Thanks!

I’ve already updated to Win11, but I’m wondering if disabling SecureBoot and TPM in the BIOS after the doing update will bork anything.

I understand it’s required for the update but is it still required after the update? Thanks,

Unrelated but I hope they fix the Ryzen perf issues soon.

 

Why?

 

Secure Boot isn't a requirement, and never was throughout all the insider previews and RTM. You can freely have it disabled at install-time, and disable it after install.

For TPM, back in the insider previews, I disabled it after install and had no issues. Not sure if that's the same case in RTM, but I expect that if you sign-in with a Microsoft account, you'll likely have to reset your sign-in method on next-boot (if you use a PIN, you'll need to re-enter your MS password and set a new PIN).

 

Thanks mate

 

I prefer the faster boot time and don’t really give a damn frankly about Win11 extra security features. Only turned the stuff on so they’d allow me to update

 

You can create a Windows 11 Installation Media without TPM requirements now using Rufus.

Good if your current MOBO "doesn't meet hardware requirements"

https://rufus.ie/en/

 

Disabling TPM should be fine, up until there is a new build ready to install. Then you may need to mess about with the appraiserres.dll file, or enable TPM again, to install the update.

 

As long as you are a public user or an insider up to beta channel you will be fine. Just do not ever be a dev channel tester without 100% compatibility and measures.

 

This for your gaming rig?What about VBS?
First thing I'm doing when I upgrade to w11 is disable intel virtualization to disable vbs/hvci.Those are the performance hitters.

 

in case of reinstall, you can bypass the check adding a registry entry on installation

 

VBS is completely useless for gaming, but causes some issues with third party drivers and old devices

 

More reason to disable it on a gaming rig.

 

I got a version of windows 11 from a site (I really cannot recall where, but ill try to find it for you) where I didn't have to disable anything. Everything is running very smooth and the windows updates when they arrive, install perfectly fine.

 

Thanks for the tip, are these under windows security? I have a 3900X, but I'd like to disable all of this crap that could be even minorly hitting perf.

 

Your'e better off disabling "SVM" (for AMD cpus) in the bios(It's the equivalent to intel virtualization).Doing that should disable both VBS/HVCI.
https://nerdschalk.com/how-to-disable-vbs-on-windows-11-and-does-it-help/

You could also disable VT-d if you have it but I don't think you need too as disabling SVM should disable VBS which in turn should disable HVCI since its a sub feature.

 

Thanks mate

 

Secure boot has some nice benefits, whats the reason for wanting it off?