How to Upgrade a VMware Workstation Virtual Machine to Windows 11 with a Working TPM Module

Windows 11 requires UEFI boot, Secure Boot, and a Trusted Platform Module 2.0. If you are running Windows 10 inside VMware Workstation, you may need to reconfigure the virtual machine so it meets these requirements before upgrading to Windows 11. This guide explains how to upgrade a VMware Workstation VM and add a working virtual TPM module.

1. Prerequisites

• VMware Workstation Pro or Player 16.2 or newer
• An existing Windows 10 VM or a Windows 11 ISO for a clean install
• The latest available hardware compatibility level selected for the VM

2. Upgrade the VM Hardware Compatibility

1. Power off the VM.
2. Right click the VM in VMware Workstation and choose Manage > Change Hardware Compatibility.
3. Select the latest available version, for example Workstation 16.x or higher.
4. Finish the wizard and save changes.

Tip: Without upgrading compatibility, the option to add a TPM module will not appear in the hardware settings.

3. Enable UEFI and Secure Boot

1. Open VM Settings > Options > Advanced.
2. Under Firmware type, select UEFI.
3. Check Enable Secure Boot.

If the GUI options are not visible, you can enforce them by editing the VM configuration file (.vmx) and adding the following lines:

uefi.secureBoot.enabled = "TRUE"
uefi.allowAuthBypass = "TRUE"

4. Add a Virtual TPM Module

1. Go to VM Settings > Hardware and click Add….
2. Choose Trusted Platform Module and click Finish.
3. Save and close the settings window.

If the TPM option is missing, you can force VMware to auto add a software TPM by editing the .vmx file and adding:

managedvm.autoAddVTPM = "software"

5. Upgrade to Windows 11

• In place upgrade from Windows 10: Mount the Windows 11 ISO in the VM and run setup.exe.
• Clean install: Boot the VM from the Windows 11 ISO and follow the installer.

6. Troubleshooting

• Black screen or boot errors after switching to UEFI: If the VM was installed using Legacy BIOS, convert the disk to GPT before enabling UEFI. Use mbr2gpt.exe inside Windows or rebuild the VM if needed.
• TPM option not visible: Confirm VMware Workstation is version 16.2 or newer and hardware compatibility is set to the latest level.
• Encryption prompts: Earlier versions required VM encryption for TPM. The managedvm.autoAddVTPM setting allows adding a software TPM without full encryption.