# Installing in a Microsoft Hyper-V virtual machine

IncusOS can be installed in a Microsoft Hyper-V virtual machine. Of all the supported virtualization platforms, Hyper-V is by far the most difficult to properly configure. As such, running IncusOS on Hyper-V is considered an advanced use case.

```{warning}
Microsoft Hyper-V does not support enrolling custom Secure Boot keys. This requires [disabling Secure Boot](../../reference/installing-without-secureboot.md), which will result in a degraded security state. Only proceed if you fully understand the implications.
```

## Get install media

Follow the instructions to [get an IncusOS image](../download.md). Hyper-V requires using a USB (IMG) install image. A CD-ROM (ISO) image will _not_ work.

The install seed must include `security.missing_secure_boot = true`. If using the web-based customizer UI, you can set this option under the "Advanced settings" section.

![Hyper-V VM configuring advanced install options](../../images/hyperv-vm-download-advanced.png)

## Convert the install media

Hyper-V doesn't support raw disk images, so after downloading the USB install media we must convert the install image into a format it understands:

```
qemu-img convert IncusOS_202512302047.img -O vhdx -o subformat=dynamic IncusOS_202512302047.vhdx
```

## Create a new virtual machine

Create a new virtual machine and when asked to make an installation option, select "Install an operating system later".

![Hyper-V VM configuring virtual machine](../../images/hyperv-vm-configure-vm.png)

Once the virtual machine is created, open its settings and add the `.vhdx` image as a second virtual hard disk.

![Hyper-V VM configuring install disk](../../images/hyperv-vm-configure-install-disk.png)

### Secure Boot and TPM configuration

IncusOS depends on a v2.0 TPM; as mentioned above we must disable Secure Boot when running in a Hyper-V virtual machine. When configuring the virtual machine, make the following selections under "Security":

* Uncheck "Enable Secure Boot"

* Check "Enable Trusted Platform Module"

![Hyper-V VM configuring Secure Boot and TPM](../../images/hyperv-vm-configure-secure-boot-tpm.png)

### CPU, memory, network, and local storage

Configure the CPU and memory for the virtual machine as desired and add at least one network interface.

Remember that the main system drive must be at least 50GiB or larger.

## IncusOS installation

Start the virtual machine; when IncusOS starts you will see a boot warning about Secure Boot being disabled.

![Hyper-V VM boot warning](../../images/hyperv-vm-boot-warning.png)

Before the install commences, a warning message will be displayed for 30 seconds.

![Hyper-V VM install warning](../../images/hyperv-vm-install-warning.png)

Finally, IncusOS will begin its installation.

![Proxmox VM installing IncusOS](../../images/hyperv-vm-install.png)

Upon completion of the install, stop the virtual machine and remove the second hard disk.

![Proxmox VM installation complete](../../images/hyperv-vm-install-complete.png)

## IncusOS is ready for use

Start the virtual machine, and IncusOS will perform its first boot configuration. Once complete, follow the instructions for [accessing the system](../access.md).

Because Secure Boot is disabled, a prominent header will display a warning about the degraded security state of the system.

![Proxmox VM running IncusOS](../../images/hyperv-vm-incusos-running.png)