Windows 11 on ESXi Needs EFI Secure Boot and a vTPM
Windows 11 Setup will check your VM like a physical PC - and the TPM line is the one that cannot be waved away. Here is what ESXi can and cannot give you, stated plainly before you waste an evening.
Technical AnshuVMware ESXiWindows 11
Watch the full video - the complete Windows install on ESXi, live and step by step
Plenty of guides promise Windows 11 on ESXi in five clicks. What they skip is the one requirement ESXi itself may not be able to supply on a standalone host: the virtual TPM. This page separates the easy settings from the real condition, so you can check your host first and choose a route that is actually open to you.
VM Options - Boot and Security
FirmwareEFISET
Secure BootenabledSET
TPM 2.0needs key providerTHE HARD ONE
Five of Windows 11's demands are VM settings. The sixth depends on your ESXi licensing and key setup, not on the guest.
1
What Windows 11 actually demands from the VM
Windows 11 checks its hardware list during Setup, and in a VM that list reads: EFI firmware, Secure Boot capability, a TPM 2.0, at least 2 processor cores, 4 GB RAM and a 64 GB disk. On ESXi every item is a VM setting: firmware set to EFI, the Secure Boot option enabled in VM Options, vCPU and memory sized up, disk at 64 GB or more. Five of the six demands take a minute. The sixth - the TPM - is where honesty is required.
2
The vTPM truth on ESXi
A virtual TPM (vTPM 2.0) is not just a checkbox ESXi invents from nothing. The vTPM's secrets are encrypted, and ESXi needs a key provider to protect them: either vSphere's Native Key Provider or an external KMIP key server, managed through vCenter. In plain words:
With vCenter and a key provider configured, adding a vTPM to a VM is a normal, supported step
On a lone standalone ESXi host - especially the free tier, with no vCenter - you may simply have no way to add a vTPM, and no setting inside the guest changes that
Anyone who tells you a free standalone host always offers vTPM is skipping this paragraph
3
Your real options, ranked honestly
Supported route: run the host under vCenter with a key provider, add the vTPM, enable Secure Boot, install Windows 11 exactly like a physical PC
Supported alternative: install Windows 10 in the VM, which asks for no TPM - still a valid choice for many lab and legacy jobs
Know what you are choosing: internet tricks that bypass the Windows 11 checks exist, but they leave you with an unsupported installation Microsoft may refuse updates to - that is a risk decision, not a fix, and it does not belong on a machine you depend on
Also remember the guest settings that must match: the VM's virtual hardware version must be recent enough to offer a vTPM at all, and once a vTPM exists, the VM's files are tied to the key provider - back up the key provider configuration, or a host rebuild can lock you out of your own VM.
Check before you start: if your ESXi host is managed by vCenter with a key provider, Windows 11 is a clean supported install. If it is a lone free host, plan around the vTPM limit instead of discovering it at the Setup screen.
Watch the Complete Installation in the Video
Every click shown live - creating the VM, loading the driver and installing VMware Tools.
Why does Windows 11 Setup say this PC cannot run Windows 11 in my VM?
Setup checks for EFI firmware, Secure Boot and a TPM 2.0 along with CPU, RAM and disk minimums. In an ESXi VM the usual missing piece is the vTPM: check VM Options for EFI and Secure Boot, size the VM up, and confirm a TPM device is actually present.
Can I add a vTPM on a standalone free ESXi host?
Usually not in a supported way. A vTPM's keys must be protected by a key provider (vSphere Native Key Provider or an external KMIP server), which is a vCenter-managed feature. Without vCenter there is generally no supported path to present a TPM 2.0 to the guest.
Is bypassing the Windows 11 TPM check inside a VM a good idea?
It makes Setup continue, but Microsoft treats the result as unsupported hardware and may withhold updates. On a disposable test VM that may be an acceptable experiment; on anything you rely on, use the supported route or install Windows 10 instead.
This guide is based on the Technical Anshu video on installing Windows on VMware ESXi. Stuck on a step? Ask in the video comments - that is where answers come fastest.