Understanding Windows 11 Virtual Machine Differences from Other VMs

Windows 11 imposes stricter requirements for security than other operating systems. Supporting a Windows 11 virtual machine (VM) requires several emulated components and configurations to enable these security features. everRun automatically makes these changes in any Windows 11 VM, including:

• Enabling Secure boot

  This also requires the system to change the chipset emulation from i440fx to q35, and requires the user to select the UEFI boot interface when creating the VM.

• Configuring virtual Trusted Module Platform (vTPM) security

• Setting the vCPU model for the VM to be newer than Sandy Bridge

To verify that your PMs can support running Windows 11 VMs

Open the Virtual Machines page of the everRun Availability Console. In the upper-right corner, next to the Create button, check the status of the Windows 11 compatibility icon:

• Windows 11: The PMs support running Windows 11 VMs.

• Windows 11:  The PMs do not support running Windows 11 VMs.

To configure the UEFI Boot interface for the VM

When running the VM Creation wizard, under Boot Interface, select UEFI.

To see which vCPU processor type is being presented to the VM

In the Windows 11 guest operating system, open the Control Panel, click System, and click About.

To verify that secure boot and TPM are enabled on the VM

In the Windows 11 guest operating system, right-click the Start button and click Run to open the Run window, type tpm.msc, and click OK. The Trusted Platform Module (TPM) Management snap-in appears. The Status should be similar to The TPM is on and ownership has been taken.

For more information about TPM, see the Microsoft Windows documentation.