Yes, Secure Boot and TPM 2.0 are supported in Windows 10.
Yes, Secure Boot and TPM 2.0 are supported in Windows 10.
Hello, you're facing compatibility challenges with Windows 11. It's wise to consider your security settings carefully. Keeping secure boot and TPM 2.0 enabled can enhance protection, but it may also introduce issues if your hardware doesn't support them. Running the system with BIOS defaults, CSM on, and secure boot disabled might be a safer approach unless you're certain about the benefits. Always test changes in a safe environment before applying them broadly.
Secure boot makes sense in general. TPM2.0 isn't essential unless you intend to turn on BitLocker (which is sensible, I've activated it) or VBS (which can significantly slow down gaming performance, so usually not a good idea). VBS remains a useful tool for, for example, a professional work laptop. Personally, I wouldn’t want someone gaining direct access to my device and being able to bypass my password or view data I haven’t saved in Chrome.
It’s best to restore factory keys first, then switch to standard settings and enable it before installing Windows 10.