Windows 11 25H2 Update: New NPU Requirements & ESU Pricing (Jan 2026)

Windows 10 support ended on October 14, 2025. If your PC is older than 2019, it may not meet Windows 11 requirements. This guide helps you understand your options: purchasing Extended Security Updates ($30 for 12 months), upgrading compatible hardware, or replacing your system. Windows 11 requires TPM 2.0, Secure Boot, modern processors, and NPU chips (40+ TOPS) for AI features.

For consumers, ESU is a one-time $30 purchase covering 12 months only (not renewable). For businesses, it's $61 in Year 1, increasing annually. ESU provides security patches only; you get no new features, performance improvements, or application compatibility updates. Use this year to plan your replacement.

• Missing security updates: Systems without ESU do not receive monthly security patches released since October 2025
• Increased vulnerability exposure: Unsupported systems may be more susceptible to security threats
• Compliance requirements: Many regulations (HIPAA, PCI-DSS, SOX) require organizations to use supported operating systems
• Insurance considerations: Some cyber insurance policies require systems to receive active security updates

• 1 GHz or faster CPU with two or more cores
• 64-bit compatible processor or System on a Chip (SoC)
• Must support SSE4.2 instruction set (Intel) or SSE4A (AMD)
• Must support POPCNT (Population Count) instruction

• 4 GB RAM minimum (8 GB recommended for optimal performance)
• 64 GB available storage space
• Additional space required for updates and specific features

• UEFI firmware with Secure Boot capability
• Trusted Platform Module (TPM) version 2.0

• DirectX 12 compatible graphics with WDDM 2.0 driver
• High definition (720p) display, 9 inches or larger diagonally
• 8 bits per color channel

• Internet connectivity for initial setup and ongoing updates
• Microsoft account is required for Windows 11 Home and Pro personal use

• 12th Generation Intel Core (Alder Lake)
• 13th Generation Intel Core (Raptor Lake)
• 14th Generation Intel Core (Raptor Lake Refresh)
• Intel Core Ultra Series 1 (Meteor Lake)
• Intel Core Ultra Series 2 (Lunar Lake) - includes NPU for Copilot+ features
• Intel Core Ultra Series 3 (Panther Lake) - available for pre-order as of Jan 6, 2026; global availability Jan 27. First chips on Intel 18A process with major battery life improvements.

• 8th Generation Intel Core (Coffee Lake) and newer
• Intel Xeon E-series compatible models
• Selected Pentium and Celeron processors from supported generations

• AMD Ryzen 2000 series (Zen+) and newer
• AMD Ryzen 3000, 4000, 5000, 6000, 7000, 8000 series
• AMD Ryzen 9000 Series (Granite Ridge) - released mid-2024
• AMD Ryzen AI 300 Series (Strix Point) - includes NPU for Copilot+ features
• AMD Ryzen AI 300 Max Series - announced CES 2026, high-performance mobile chips with enhanced NPU
• AMD Threadripper 2000 series and newer
• AMD EPYC 2nd, 3rd, and 4th generation processors

• AMD Athlon Gold and Silver series (compatible generations)
• Selected AMD A-series processors from supported lines

• Snapdragon 8cx and 8cx Gen 2
• Snapdragon 8cx Gen 3 (Microsoft SQ3)
• Selected enterprise-focused Qualcomm processors

1. Restart the computer and enter BIOS setup (typically F2, F12, or Del key)
2. Navigate to Security or Advanced settings
3. Look for "Intel Platform Trust Technology (PTT)" or "Intel TXT"
4. Enable the setting and save changes

1. Access BIOS/UEFI setup during startup
2. Navigate to Advanced or Security settings
3. Find "AMD fTPM" or "AMD Platform Security Processor"
4. Enable and save the configuration

1. Visit Microsoft's PC Health Check page
2. Download and install the current version of the application
3. Launch and click "Check now" for immediate assessment

• Compatible: System meets all Windows 11 requirements
• Incompatible: Detailed explanation of specific requirement failures
• Partially Compatible: Some requirements met, others need attention

Windows Update includes built-in compatibility checking for eligible systems. To enable automatic assessment, navigate to Settings > Update & Security > Windows Update.

Advanced users can verify specific requirements using PowerShell commands:

Get-WmiObject -Class Win32_Tpm -Namespace "root\cimv2\security\microsofttpm"

1. Check BIOS Settings: TPM is often disabled by default. Look for "PTM" (Intel) or "fTPM" (AMD) in BIOS settings.
2. Hardware age consideration: Systems without TPM 2.0 are typically 8+ years old. Replacement is often more practical than adding discrete TPM modules.
3. Temporary option: Consider ESU ($30 for 12 months) while planning your hardware upgrade.

1. Enable in BIOS: Access firmware settings and enable Secure Boot
2. Convert to UEFI: Legacy BIOS systems need conversion to UEFI mode
3. Clear Secure Boot Keys: Reset and reinstall security certificates if corrupted

1. Verify Generation: Confirm exact processor model. Intel 8th Gen+ and AMD Ryzen 2000+ are supported.
2. For older processors: System replacement is typically recommended. Processor upgrades are rarely cost-effective for consumer systems.
3. Alternative approach: Workarounds exist but may prevent security updates, which reduces the benefit of upgrading.

1. Disk Cleanup: Remove temporary files and unused applications
2. Storage Optimization: Move files to external storage or cloud services
3. Storage Upgrade: Install a larger SSD or additional storage drives

For server and enterprise deployments, professional workstations like the HP ProLiant DL320 Gen11 provide enterprise-grade reliability with full Windows 11 compatibility, making them suitable for demanding business applications and virtualization environments.

For new laptop purchases in January 2026, systems with Intel Core Ultra Series 3 (Panther Lake) processors offer significant battery life improvements over Series 2 on Intel's new 18A process (available for pre-order now, shipping Jan 27). AMD's Ryzen AI 300 Max series (announced at CES 2026) provides high-performance alternatives with enhanced NPU capabilities. When shopping, look for "Copilot+ PC" certification to ensure full AI feature support. For immediate availability, the Microsoft Surface Laptop 7 offers proven Windows 11 compatibility with Series 2 processors and includes enterprise-friendly features like Windows Hello facial recognition.

For design and engineering workflows requiring specialized graphics capabilities, our CAD workstation guide for architecture firms covers systems that meet both Windows 11 requirements and professional application needs.

• Enable TPM 2.0 in existing systems
• Upgrade storage to meet minimum requirements
• Ensure Secure Boot capability

• Increase RAM to 8 GB or higher
• Add SSD storage for improved responsiveness
• Update graphics drivers for enhanced compatibility

• Plan processor upgrades for unsupported systems
• Consider complete system replacement timing
• Evaluate business laptop options for mobile workforce needs

• Maintains existing files and applications
• Requires full compatibility verification
• Recommended for compatible systems with Windows 10 21H2 or later

• Fresh Windows 11 installation
• Requires data backup and application reinstallation
• Provides optimal performance and stability

• Volume licensing and management tools
• Requires a comprehensive compatibility assessment
• May use Windows Autopilot for automated deployment

• Current hardware age and remaining useful life
• Compatibility upgrade costs vs. replacement costs
• Employee productivity impact during transitions
• Security risk tolerance for unsupported systems

Many industries require supported operating systems for compliance. Windows 11's enhanced security features may simplify compliance with HIPAA, SOX, and GDPR regulations.

• Hardware-based security through TPM 2.0
• Secure Boot prevents malware injection during startup
• Enhanced BitLocker integration for data protection
• Improved Windows Defender integration

• Test Windows 11 on representative hardware configurations
• Validate critical application compatibility
• Assess user training requirements
• Document performance baselines

• Run PC Health Check on all target systems
• Test line-of-business applications in a Windows 11 environment
• Verify peripheral device drivers and functionality
• Assess network and domain integration requirements

• Document current system performance metrics
• Monitor application launch times and responsiveness
• Track system resource utilization patterns
• Establish user satisfaction benchmarks

• Compare Windows 11 performance to Windows 10 baselines
• Monitor security incident reduction
• Assess user productivity impacts
• Document support ticket volume changes

Windows 11 requirements establish a baseline that should remain relevant through the operating system's lifecycle. Investing in hardware that exceeds minimum requirements provides extended compatibility assurance.

As cyber threats evolve, Windows 11's hardware-based security foundation provides adaptability for future security enhancements without requiring additional hardware changes.

Windows 11's enhanced cloud integration capabilities require reliable internet connectivity and modern authentication methods, factors that should influence hardware selection decisions.

The increased prevalence of remote work makes hardware reliability and security more critical, supporting the value proposition of meeting Windows 11's enhanced requirements.