On October 14, 2025, Microsoft will stop shipping security updates for Windows 10. That’s not a suggestion to upgrade—it’s a hard deadline. If your PC can’t run Windows 11, you’ll either pay for ongoing protection or leave your machine exposed to emerging threats. Before you make any decision, you need to know exactly what’s under the hood.

The Clock Is Ticking: What October 14, 2025, Means for You

After that date, Windows 10 will receive no more free security patches, bug fixes, or feature updates. For the first time since 2015, millions of PCs will be left without a safety net unless their owners take action. Microsoft has confirmed that consumer users can purchase Extended Security Updates (ESUs) to receive critical vulnerabilities fixes, but those updates won’t include new features, design changes, or technical support beyond what’s strictly necessary to patch security holes. Pricing for the consumer ESU program has not been publicly locked in as of early 2025, so you’ll need to check your Microsoft account or the official lifecycle pages when enrollment opens. The first ESU year will run until October 13, 2026, giving you at most 12 additional months of breathing room.

For businesses and schools, ESU licensing is already available through volume licensing channels, but the same basic logic applies: it’s a temporary bridge, not a permanent solution. Whether you plan to buy a new PC, upgrade to Windows 11, or stick with a secured-but-aging Windows 10, the first step is identical—inventory what you actually have.

Your Built-In Hardware Toolkit

Windows 10 ships with every tool you need to gather hardware specs, firmware details, and driver versions. You don’t need to download anything. The key players are:

  • Settings > System > About for a quick glance at CPU, RAM, Windows edition, and build number. Since a recent update, this page also shows memory type, graphics card name, and storage capacity in readable cards.
  • System Information (msinfo32) for a deep, exportable report covering firmware type, Secure Boot status, TPM presence, motherboard strings, and every installed driver.
  • DirectX Diagnostic Tool (dxdiag) for a graphics- and audio-focused snapshot that vendors ask for when troubleshooting display or sound problems.
  • PowerShell’s Get-ComputerInfo for automated inventories across dozens of machines.
  • Command Prompt’s systeminfo when you just need a quick command-line dump.
  • Task Manager and Device Manager for live performance monitoring and per-device driver troubleshooting.

The trick is knowing which tool to use when you’re staring down a deadline.

The 10-Minute Upgrade Readiness Check

Microsoft’s official Windows 11 compatibility requirements are a moving target, but the core hardware demands have been stable for years. To cut through the noise, here’s a four-step sequence that tells you whether your PC can make the jump—and exactly what to do if it can’t.

Step 1: Grab the Basics

Open Settings > System > About. Confirm your processor model, installed RAM, and system type (64-bit is mandatory for Windows 11). If you see less than 4 GB of RAM or a very old CPU, you already know a hardware upgrade or replacement is in your future. While you’re there, click the Copy button under Device specifications to stash the details in your clipboard.

Step 2: Check Firmware and Secure Boot

Press Windows + R, type msinfo32, and hit Enter. In the System Summary pane, look for BIOS Mode. It must say “UEFI,” not “Legacy.” Below that, Secure Boot State should be “On.” If either value is wrong, you may be able to flip the settings in your motherboard’s firmware (accessible via a key press during boot, often F2, Del, or Esc). This step alone can rescue many PCs that appear incompatible at first glance, but proceed carefully—changing firmware settings without guidance can prevent the system from starting.

Step 3: Verify TPM 2.0

Still in msinfo32, scroll down to Trusted Platform Module (TPM). The entry should show a manufacturer and version 2.0. If the section is missing or shows version 1.2, check Windows Security > Device Security > Security processor for more details. Some older systems have a disabled TPM that can be turned on in the firmware, but not all motherboards support version 2.0. If yours doesn’t, the hardware is locked out of a standard Windows 11 install.

Step 4: Run the Official Health Check (Optional but Smart)

Microsoft’s PC Health Check app is the definitive arbiter. Download it from Microsoft’s website, run the check, and read the result. It cross-references your CPU against Microsoft’s approved processor list and confirms all other requirements in one glance. If the app gives a green light, you’re clear to upgrade. If not, the message will often explain exactly which component failed.

When Your Hardware Falls Short

If your PC fails the TPM, Secure Boot, or CPU tests and you can’t fix it via firmware tweaks, you have three paths:

  1. Buy a new PC that ships with Windows 11. This is the simplest long-term answer, especially if your machine is more than five years old.
  2. Pay for Extended Security Updates when the consumer program opens. Expect only critical security patches, not feature drops or general technical support. Enrollment will likely happen through Windows Update or your Microsoft account.
  3. Stay on Windows 10 without updates—not recommended for any machine that touches the internet.

For business users, Microsoft offers paid ESUs for up to three years, but that’s a separate licensing discussion with your IT team or reseller.

Share Reports Safely: The Hidden Risk in System Exports

When you export a detailed system report—whether from msinfo32, dxdiag, or PowerShell—the resulting text file can contain hardware serial numbers, motherboard IDs, MAC addresses, and even installed software lists. Sending that file to a public forum or an unverified support address is essentially handing over a fingerprint of your device.

Before you attach any export to a ticket or email:
- Open the file in Notepad and search for words like “Serial,” “MAC,” and “UUID.”
- Redact or delete those lines if you’re sharing with someone you don’t fully trust.
- Compress the report into a ZIP file and password-protect it if the support channel allows.

Most OEMs and Microsoft Support expect you to run msinfo32 and dxdiag when troubleshooting, but they also expect you to use secure portals for submission. Treat exported system files the same way you’d treat an account password.

For Power Users: Script This Entire Process

If you manage a fleet, you don’t need to touch every machine manually. PowerShell’s Get-ComputerInfo can be wrapped into a script that queries BIOS mode, TPM status, and hardware specs remotely and outputs a CSV. Combine it with scheduled tasks or management tools like Intune, and you can build an upgrade-eligibility dashboard in an afternoon. Just remember to store those exports in a locked-down location—they’ll contain the same sensitive identifiers as the manual reports.

Outlook: What to Watch Next

Microsoft may adjust Windows 11 requirements or offer additional migration tools as the 2025 deadline approaches, but the hardware floor isn’t likely to drop. The time to audit your PCs is now, not in September 2025 when support queues are jammed. Run the checks this weekend. If you find a machine that just misses the bar, you’ll have months to budget for a replacement or investigate ESU costs, rather than scrambling at the last minute. And if your hardware passes easily, you can schedule the upgrade on your own terms—without the pressure of a countdown clock.