The main requirement to upgrade a Windows 10 device to Windows 11 is that the PC be Secure Boot capable by having UEFI/BIOS enabled.
Secure Boot is an important security feature designed to prevent malicious software from loading when your PC starts up (boots). Most modern PCs are capable of Secure Boot, but in some instances, there may be settings that cause the PC to appear to not be capable of Secure Boot. These settings can be changed in the PC firmware. Firmware, often called BIOS (Basic Input/Output System), is the software that starts up before Windows when you first turn on your PC.
Here are the steps to be confirmed on HP 840 G5 BIOS in order to upgrade Windows 10 to 11:
- If BitLocker is enabled, please make sure you have a recovery key before proceeding with these instructions
- Press F10 to enter BIOS.
- Navigate to Advanced tab in BIOS.
- Go to Boot Options & scroll to the bottom. Untick Legacy Boot Order.

- Next go to Secure Boot Configuration and select Legacy Support Disable & Secure Boot Enable

- Press F10 (Save & Exit )
If Legacy boot order is greyed out and you are not able to untick “Legacy boot order”, go to Secure boot configuration & enable legacy support and disable secure boot (IMG2), F10 (save & exit).
You may have to type the code shown and hit enter.
Start at the beginning of this document again.