Assessing Windows 11 compatibility for medical devices

What you see

Common error messages

Look for the exact message. Common lines include:

“This PC doesn’t currently meet Windows 11 system requirements.”
“This device isn’t supported for the 64-bit version of Windows.”
Vendor popup: “Application not certified for this OS version.”

Record the exact text. Capture screenshots and the event log entry. Example event log line:

Event Viewer: Source = Application, Event ID = 1000, Faulting application name = MedApp.exe, Faulting module name = ntdll.dll

Unsupported hardware notifications

Windows will flag missing platform elements. Typical diagnostics:

PC Health Check: “TPM 2.0 not detected.”
BIOS message: “Secure Boot disabled” or “Unsupported CPU.”

Run these commands on the device and save the output:

systeminfo

powershell -command "Confirm-SecureBootUEFI"

powershell -command "Get-Tpm"

Expected vs actual:

Expected: Confirm-SecureBootUEFI returns True. Actual: False.
Expected: Get-Tpm shows TpmReady : True. Actual: Not present or False.

Software certification alerts

Vendors may put out hard warnings like: “This version not supported on Windows 11.” Keep the exact wording. One industry report showed clinical suppliers refusing or failing to certify software for the current OS, and some devices cannot move to Windows 11 without vendor intervention [Computerworld]. Save vendor emails and support portal tickets. They are evidence for procurement and risk boards.

Where it happens

Medical device environments

Imaging consoles, bedside monitors and lab analysers often run manufacturer-locked Windows images. Many use older CPUs or drivers that do not meet Windows 11 requirements. That is normal in medical kit. Upgrading a single device can cost more than replacing it; one supplier quoted £25,000 to bring a three-year-old device up to date [Computerworld].

Isolated networks and their implications

Devices on air-gapped or isolated clinical networks need validation before any OS change. Validation means:

Functional testing with clinical software.
Security testing inside the isolated VLAN.
A signed acceptance by clinical engineering.

This stretches the timeline. A simple in-place upgrade in the office turns into months of validation in a ward.

Vendor-specific compatibility issues

Some vendors do not publish drivers for Windows 11. Some certify only specific firmware levels. That creates a blocker:

The device hardware meets Microsoft checks but vendor drivers are incompatible.
Vendor refuses to certify until a batch firmware update is released.

Log the exact vendor compatibility statement and add it to the device record.

Find the cause

Hardware limitations

Run the compatibility checklist. Key failure points:

TPM 2.0 missing or disabled.
No UEFI firmware, only legacy BIOS.
Unsupported CPU (older Intel or AMD families).

Command checklist:

wmic bios get SMBIOSBIOSVersion

powershell -command "Get-CimInstance -ClassName Win32_Processor | Select-Object Name, Manufacturer"

If the CPU model is older than the Windows 11 supported list, that device will not upgrade without hardware change.

Vendor certification delays

Ask vendors for:

A published compatibility matrix.
Firmware and driver timelines.
A formal statement on support for Windows 11.

Keep tickets and timestamps. If a vendor replies “not certified”, treat that as a block. Some vendors only test after a large contract request. That pushes costs and schedule.

Network management challenges

Network controls can block upgrades. Common traps:

Group Policy blocking feature updates.
Imaging servers only providing Windows 10 images.
Isolation that prevents driver downloads during setup.

Diagnose with:

gpresult /h gp-report.html

pnputil /enum-devices

Expected: policies allow upgrades; actual: many sites keep upgrades blocked by policy.

Fix

Upgrading hardware solutions

Decide by cost. If the vendor quoted repair at more than 40% of replacement cost, replace the hardware. Steps:

Inventory affected devices with serial, model, OS, and vendor statement.
Prioritise replacements by clinical criticality.
Budget for controlled swaps and validation cycles.

Where minor firmware or TPM toggles help, do them first. For devices with supported CPUs but only BIOS issues, enable UEFI and Secure Boot in firmware and test.

Engaging with vendors for support

Open formal remediation tracks. Ask for:

A written compatibility schedule.
Test images or a sandboxed Windows 11 build.
A certified firmware driver bundle.

Log every response. Use contract leverage: ask for a statement showing the risk of an unsupported OS and the cost. If the vendor will not certify, ask for technical reasons and a timeline. If there is no timeline, treat the device as non-upgradeable.

Alternative software options

If vendor certification will not arrive, use a compensating control:

Keep the device on Windows 10 with extended support where available.
Isolate the device on a restricted VLAN and limit inbound and outbound services.
Use third-party hardening and monitoring tools to reduce attack surface.

Microsoft publishes guidance for checking after hardware changes; use that to validate remediation steps and repeat checks after fixes [Microsoft Support].

Check it’s fixed

Verifying compatibility post-upgrade

Re-run the same commands used for diagnosis. Expected outputs:

powershell -command "Confirm-SecureBootUEFI"   => True

powershell -command "Get-Tpm"                  => TpmReady : True

systeminfo                                     => OS Name: Microsoft Windows 11

Run vendor functional tests. Have clinical engineering sign off with timestamped test cases. Keep screenshots and logs.

Monitoring system performance

Watch for regressions for 30 days. Track:

Application crashes in Event Viewer.
Network anomalies from the device VLAN.
CPU and driver error counts.

Set alerts for Event IDs tied to the clinical app. If errors come back, revert and reopen the vendor case.

Ongoing vendor communication

Keep a living record. Record:

Software and firmware versions.
Certificate or compatibility statements.
Dates of validation and patch cycles.

If the vendor releases updates, note the change and re-validate. Keep procurement aware of recurring costs.

Final takeaways

Capture exact error text and diagnostic output; they are evidence.
Prioritise by clinical risk, not convenience.
Use isolation and monitoring where upgrades are blocked.
Get written vendor timelines and keep proof of communication.
Re-run compatibility commands and vendor tests after every change.

Industrial and medical devices struggle to upgrade to Windows 11 — Computerworld
Check if a device meets Windows 11 system requirements after changing device hardware — Microsoft Support