Install Windows 11 or Windows Server 2025 on Proxmox with TPM and UEFI

Windows 11 and recent Windows Server releases expect UEFI with Secure Boot and a TPM 2.0 chip. Proxmox provides both virtually, so a Proxmox Windows 11 VM installs cleanly once the VM is set up right.

Before you start

• The Windows ISO uploaded to Proxmox (ISO images).
• The latest stable virtio-win driver ISO uploaded too.
• A valid Windows licence.

Create the Proxmox Windows 11 VM

1. Click Create VM, set a name, and on OS pick the Windows ISO with type Microsoft Windows, version 11/2022/2025. Tick Add additional drive for VirtIO drivers and select the virtio-win ISO.
2. System: machine q35, BIOS OVMF (UEFI), tick Add EFI Disk and Pre-Enroll keys (Secure Boot), tick Add TPM with version v2.0, choose storage for both, and tick Qemu Agent.
3. Disks: bus SCSI with VirtIO SCSI single, enable Discard and IO thread, at least 64 GB.
4. CPU: 2 or more cores, type host (or a modern generic type in mixed clusters).
5. Memory: 4096 MiB or more.
6. Network: model VirtIO.
7. Finish and start the VM. Press a key in the console when asked to boot from CD.

Load drivers during setup

1. When Windows setup shows no disks, click Load driver.
2. Browse the VirtIO CD to vioscsi\w11\amd64 (or the folder for your Windows version) and install the driver; the disk appears.
3. Optionally load NetKVM now too, so networking works during setup.
4. Complete the installation.

Install guest tools

In Windows, open the VirtIO CD and run virtio-win-guest-tools.exe. It installs remaining drivers (balloon, display, serial) and the QEMU guest agent (guest agent). Then remove both ISOs from the VM hardware.

Check afterwards

• Device Manager shows no unknown devices.
• The Proxmox summary shows the VM's IP (agent working).
• tpm.msc in Windows shows a ready TPM 2.0.

Troubleshooting

• "This PC can't run Windows 11": TPM, UEFI or Secure Boot is missing; check the System settings, which cannot be added to BIOS VMs without reinstalling.
• No disk in setup: load the vioscsi driver from the matching folder.
• Boots to UEFI shell: the ISO was not selected in time; reset and press a key at the prompt.

Frequently asked questions

Can I back up a VM with a TPM?

Yes, the TPM state disk is included in backups.

Do I need Secure Boot?

Windows 11 expects it; pre-enrolled keys handle it automatically.

How do I access the VM remotely?

Enable Remote Desktop in Windows and restrict it with a firewall or VPN.

Next steps

• Windows on KVM with VirtIO
• VM performance tuning
• QEMU guest agent