Fix TPM Error for Windows 11 VM on VMware Workstation Pro

If you see a TPM error when trying to install or run Windows 11 in VMware Workstation Pro, the fix is to enable a virtual TPM (vTPM) module in the VM’s settings and ensure the VM uses UEFI firmware. This article walks you through the exact steps, explains why the error occurs, and covers common pitfalls.

Why Windows 11 Requires a TPM

Windows 11 introduced stricter hardware requirements than Windows 10, including a Trusted Platform Module (TPM) version 2.0. The TPM is a secure cryptoprocessor that handles encryption keys, attestation, and other security functions. On physical PCs, TPM is usually a chip on the motherboard or a firmware feature (Intel PTT, AMD fTPM). In a virtual machine, there is no physical chip, so the hypervisor must provide a virtual TPM device that emulates the hardware interface.

VMware Workstation Pro (version 15.5 and later, especially 16.x and 17.x) includes a virtual TPM that is compatible with Windows 11. However, it is not enabled by default when you create a VM with a Windows 10 template or when you convert an existing VM. The error typically appears as “This PC can’t run Windows 11” during setup, or as a warning in the Windows 11 compatibility check tool.

Prerequisites: Check Your VMware Version and Host

Before you make changes, ensure your environment meets these requirements:

VMware Workstation Pro version: You need at least version 15.5.0 for vTPM support. Version 16.x or 17.x is recommended. If you are on an older version, update first.
Host operating system: The vTPM feature works on Windows and Linux hosts, but the exact menu wording may differ slightly between versions.
Host BIOS/UEFI: Your physical host may need to have its own TPM or firmware TPM enabled, but this is not strictly required for VMware to provide a virtual TPM. However, some older hosts with certain security software may interfere.
VM firmware: The VM must be set to UEFI, not BIOS. Windows 11 requires UEFI and Secure Boot capability.

Step-by-Step Fix: Enable vTPM in VMware Workstation Pro

Follow these steps to add a virtual TPM to your Windows 11 VM:

Shut down the VM completely (not suspend).
Open the VM’s settings by selecting the VM and clicking Edit virtual machine settings.
Go to the Hardware tab.
Click Add at the bottom.
Choose Trusted Platform Module from the device list and click Finish.
If the VM is currently set to BIOS firmware, you will see a warning. Change the firmware to UEFI by going to the Options tab, selecting Advanced, and under Firmware type choose UEFI.
Optionally, enable Secure Boot in the same Advanced section (it is recommended for Windows 11).
Click OK to save.
Power on the VM. Windows 11 should now pass the TPM check.

If you already have Windows 11 installed and you add the vTPM later, the OS will detect it on the next boot. If you are doing a fresh install, the setup should proceed without the TPM error.

Common Mistakes and Troubleshooting

Even after adding the vTPM, you might still encounter issues. Here are the most common problems and their solutions:

VM firmware is still BIOS: Windows 11 will not install with BIOS firmware. Double-check that the firmware type is UEFI. If you change from BIOS to UEFI after Windows is installed, the system may not boot; it’s best to set UEFI before installing.
vTPM not available in the Add dialog: This happens if your VMware Workstation Pro version is older than 15.5. Update to the latest version.
Host TPM is disabled: Some VMware versions require the host to have a TPM (or firmware TPM) enabled to create a vTPM. Check your host’s BIOS settings for Intel PTT or AMD fTPM and enable it.
Encryption error: The vTPM is tied to the VM’s encryption. If you see an error about encryption, you may need to encrypt the VM first. In the VM settings, go to Options > Access Control and set a password to encrypt the VM. Then add the vTPM.
Windows 11 still says no TPM: Run the Windows 11 compatibility check again. If it still fails, use the Trusted Platform Module option in the VM’s hardware list and ensure it is not disabled.

What to Do If the Error Persists

If you have followed all the steps and the TPM error remains, try these additional checks:

Recreate the VM: Sometimes the VM configuration file gets corrupted. Create a new VM, but choose “I will install the operating system later” and then add the vTPM before installing Windows 11.
Check for VMware updates: VMware Workstation Pro 17.x has the most mature vTPM support. Older versions may have bugs that are fixed in later updates.
Use the VMware compatibility checker: VMware provides a tool to check if your VM meets Windows 11 requirements. Make sure the VM’s virtual hardware version is compatible (version 18 or 19 is typical for Workstation 16/17).
Consider a fresh install: If you upgraded from Windows 10 to 11 inside a VM that did not have a vTPM, the upgrade might fail. A clean install with the vTPM present from the start is the most reliable path.

Alternatives to VMware Workstation Pro

If you cannot get vTPM to work in VMware Workstation Pro, you have other options:

VirtualBox: Oracle VirtualBox 6.1 and later support a virtual TPM, but the implementation is less mature. You must also enable UEFI and Secure Boot.
Hyper-V: On Windows hosts, Hyper-V supports vTPM natively, but it requires a Windows Pro/Enterprise edition and is more complex to set up.
QEMU/KVM: On Linux, QEMU with the swtpm package can provide a vTPM. This is the most flexible but requires command-line knowledge.

Is It Safe to Bypass the TPM Requirement?

You might be tempted to bypass the TPM check using registry edits or the setup command with the /product server flag. These workarounds are widely discussed online, but they are not recommended for production use. Windows 11 may not receive updates or may behave unpredictably without a TPM. The vTPM in VMware is the correct, supported way to run Windows 11 in a VM, and it provides the same security features as a physical TPM.

Frequently Asked Questions

Do I need to enable TPM on my physical host?

Not always, but it helps. VMware Workstation Pro can create a virtual TPM without a physical one, but some security software or older versions may require it. If you get an error when adding the vTPM, enable Intel PTT or AMD fTPM in your host’s BIOS.

Can I add a vTPM to an existing Windows 10 VM and then upgrade to Windows 11?

Yes, in most cases. Add the vTPM, set the firmware to UEFI, and then run the Windows 11 upgrade. However, changing firmware from BIOS to UEFI can prevent the VM from booting. It is safer to create a new VM with UEFI and vTPM from the start.

Will the vTPM slow down my VM?

No noticeable slowdown. The vTPM is a software emulation that uses the host’s CPU for cryptographic operations. The performance impact is minimal, especially on modern processors with hardware acceleration.

What is the difference between TPM 1.2 and 2.0?

Windows 11 requires TPM 2.0. VMware’s vTPM is version 2.0. TPM 1.2 is an older standard used by Windows 10 and earlier. You cannot choose the version in VMware; it always provides 2.0.

Why does my VM show “TPM not found” even after adding it?

This usually means the VM is still using BIOS firmware. Change to UEFI and restart the VM. Also, ensure the vTPM device is not disabled in the hardware list.

Can I use a vTPM with a VM that has an existing operating system?

Yes, but the OS must support it. Windows 10 and 11 will recognize the vTPM on the next boot. Linux distributions with TPM support will also work. However, if you change firmware type, the OS may not boot, so plan accordingly.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →