This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
With Windows 11, we were instructed to use GPT/UEFI when using Rufus to create a Windows 11 Insider ISO. Rufus has changed their policy and in order to use the newly created ISO states that Secure Boot must be disabled. Can Microsoft offer any help here?
FAQ · pbatard/rufus Wiki · GitHub
Feedback Hub: https://aka.ms/AAdjkc0
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
Oh! I could be wrong but I think I know what's going on. If you download/use the official ISO, it contains both Home & Pro and it's too big for FAT32, therefore Rufus changes to NTFS automatically.
Ahhh that makes sense.
So that means we would have to turn off Secure Boot.
Hi Davy,
I added a comment too. Stop using Rufus. 😉
Hi fg,
It's not just the use of Rufus or the pointing towards Rufus I object to. It's the insistence of using secure boot when MS know that if Insiders/public users use Rufus with secure boot enabled they will fail.
So either remove the need for secure boot or the need to use Rufus to make bootable media.
Or am I asking too much...?
Davy.
@fg2001, you just missed an opportunity to add to the data base of which systems will or will not work. What are the configurations of the systems that do not work?
The more folks that know the NTFS drive might be an option, the more info we will get as to what system will work. If a system does work then it is so easy to set up bootable media. Will this situation show up in Public builds with Win 11, I don't know..
Oh! I could be wrong but I think I know what's going on. If you download/use the official ISO, it contains both Home & Pro and it's too big for FAT32, therefore Rufus changes to NTFS automatically.
Ahhh that makes sense.
So that means we would have to turn off Secure Boot.
C.K.
There are 11 editions of Windows in the ISO not just Home and Pro, but even with only Pro the size of the install.wim exceeds the 4GiB limit for creating the normal FAT32 USB Media.
Rufus always used a the weird UEFI-NTFS trick to get around this issue, it is nothing new.
The bottom line is that Rufus does not create the correct USB installation media like it is done with MCT.
MS should make the insider ISO with the compressed install.esd instead of the install.wim and that would fit just fine in the normal FAT32 Installation USB media and there would be no need for Rufus or any other weird utility to create the Installation media.
It only takes a little extra extra step effort for MS to distribute the ISO in the right format, and that would eliminate all these issues.
Will this situation show up in Public builds with Win 11, I don't know..
@Saltgrass,
For public build MS uses the Media Creation Tool.
That is creating the correct Installation media and will have no problem.
Rufus with UEFI-NTFS is just a kluge !