How to Fix PCR7 Not Supported on Windows 11

Wondering what PCR7 Not Supported on Windows 11 means?

Technology has taken up a large space in our daily activities. In fact, most of our everyday tasks and work are done on computers and smart devices. Therefore, it is vital to save and protect our saved data and prevent its loss. For this reason, Windows has introduced device encryption at a basic level on all compatible systems. 

A more powerful version of this feature is the BitLocker technology. But unfortunately, it is only supported on the latest and premium editions of Windows OS. For Window 10/11 Home, users can use PCR7 Binding technology instead to encrypt their hard drives.

Even for PCR7 Binding Technology, your system must meet certain hardware requirements. If not, you will see the message PCR7 Not Supported on Windows 11. However, there are a few instances where you will have to encounter this issue regardless of whether your PC supports the feature or not. But, don’t fret as it can be easily resolved.

Just follow the guide below!

1. Ensure Your System Meets the Requirements.

Before you start to fix the PCR7 not supported on Windows 11 problem, check whether or not your system meets the requirements in the first place. These include having Secure Boot and TPM Module 2.0 or higher enabled. Along with this, your computer should support UEFI Firmware and Modern Standby Mode. 

2. Ensure the Availability of GPT.

One requirement for enabling device encryption in your system is the availability of the GPT, which is an abbreviation of GUID Partition Table. Your BIOS Mode should not be Legacy. If it is, you need to change it to UEFI. This is done by changing your Partition Style from MBR to GUID.

Follow these steps below to check if the GPT partition system is available:

1. Start by clicking on the Start menu and type ‘computer management’ in the search bar at the top.
   
2. Select the Computer Management app from the left pane and click on Run as administrator from the right side. 

3. A Computer Management screen will appear. From the left pane, expand Storage and click on Disk Management. 
   
4. From the right pane, right-click on a system disc and choose Properties. 

5. A new window will appear. Simply click on the Volumes tab. If the GPT partition system is available in your drive, you will see GUID partition table [GPT]. 

If the system isn’t available in your drive, enable it by following the given steps:

1. Select the Start menu and click on the search bar. 
   
2. Next, type in ‘Windows Powershell’ in the search bar and choose the same from the search results. 

3. Now, copy and paste the following, then press the Enter key:

Convert MBR disk to GPT

3. Enable Secure Boot From BIOS Utility. 

Secure Boot is a security standard by which your system boots using softwares trusted by the OEM or Original Equipment Manager only. When you start your computer, the firmware verifies signatures on each piece before giving control to the OS. This feature is another requirement by your PC to enable device encryption.

Hence, you need to check if the Secure Boot is enabled by following these steps:

1. Launch the Start menu on your computer and type in ‘System Information’ in the search bar. 
   
2. From the right pane of System Information, click on Run as administrator. 
   
3. Once the System Information window opens, ensure you’re on System Summary from the left pane. 
   
4. Look for Secure Boot State in the right pane and check whether it says On or Off next to it. 

If you find that the Secure Boot is off, enable it from your computer’s BIOS utility by following these steps:

1. Begin by heading off to the Start menu and clicking on the Power icon from the lower-right side. 
   
2. Choose Shut down. 

3. Now, restart your PC by pressing the Power button, then press the F10 key to enter the BIOS menu. Accessing the BIOS menu is different for different PCs, so you may look into the user manual to find out how to access it on your computer. 
   
4. From the BIOS Setup Utility screen,  go to the Boot tab.
   
5. Press the downward arrow key from your keyboard to go down to the Secure Boot option and hit the Enter key. 
   
6. Afterward, choose Enabled and press the Enter key again. 

7. Finally, save these changes and reboot your device.
   
   

4. Enable TPM.

The next step to enabling Secure Boot is to configure TPM, which stands for Trusted Platform module. It is a chip designed to store cryptographic keys and provides functions related to security.

To do so, follow the steps below:

1. In the BIOS Setup Utility screen, go to the Advanced tab from the top. 
   
2. Now, look for options like TPM Support, Security chip, TPM State, Security Device Support, Intel PTT, etc., and enable it. The TPM name will be different depending on your PC’s manufacturer. 

3. Save your changes and reboot your computer. 
   
   

5. Check For Modern Standby Support.

You may also have to encounter the message PCR7 not supported on Windows 11 if your device isn’t supporting Modern Standby or if it is disabled on your system. It is not only essential for maintaining a long battery life but also for device encryption.

Here’s how to enable it:

1. Launch the Start menu and type in ‘cmd’ in the search bar. 
   
2. From the right side of Command Prompt, click on Run as administrator. 

3. Once in Command Prompt, copy and paste the following command and hit the Enter key. 

powercfg/a

6. Use Third-Party Software.

In case the message PCR7 not supported on Windows 11 still shows, you have only a few options left to choose from. Either you can upgrade to Windows 11 Pro, which supports BitLocker technology, or use third-party tools instead. Some of the most reliable programs are Diskcryptor and VeraCrypt.

This concludes our guide on how to fix PCR not supported on Windows 11. If you have any other queries or concerns, feel free to comment them down below. We’ll be glad to assist you further. 

If this guide helped you, please share it. 😊