Most enterprise workstations cannot run Windows 11

So does Windows 11 now require TPM 2 or does it not?

I know that a lot of hardware actually does support TPM2 and the "tutorials" how to check for hardware support in Windows are actually wrong (tpm.msc). It will only show support if the module is activated and in use (if not a reinstall of windows is required).

I hate secure boot mainly for the issue of certificate logistics. I don't think it offers me sensible security advantages and OS have to be signed by Microsoft since the root certs shipped with your mainboard probably doesn't include many alternatives. Of course you could add more with effort...

I think at this point it is hard to deny that security arguments are abused to increase lock-in features.