New
#21
Upgrade to Windows 11
Hello,Could you go into BIOS and enable Secure Boot?
In your Motherboard it seems to be:
Disable CSM and enabled secure boot, which appears after disabling CSM......I read.
And there is more:
Check if your boot drive's partition style is GPT. Search for "Create and format hard disk partitions" in the start menu and open it. Find your boot drive in the bottom list section and right click > properties. Click "Volumes". If the Partition Style is not GPT, you need to convert. If it's already GPT, skip to step 3.
Convert to GPT. Open Windows Settings > Update & Security > Recovery. Under Advanced Startup > click Restart Now. Click Troubleshoot > Advanced Options > Startup Settings > Command Prompt > Restart. Type "mbr2gpt /validate". If it looks good, type "mbr2gpt /convert". After a minute or so it should say it converted successfully.
Launch your bios. You can do this by restarting and pressing F12 or directly from Windows by going to Settings > Update & Security > Recovery > Restart Now > Troubleshoot > Advanced > UEFI Reboot.
Disable CSM. This was saved as a favorite for me, I might've done this in the past but I'm not sure. I believe the option is in Boot > CSM. Disable it. Save and exit - this is important!!! The first time I did this I didn't save and exit before the next step and Secure Boot didn't show as enabled. So Save and Exit!
Reboot into BIOS to enable Secure Boot. launch your BIOS again (step 3 for how). This time, you'll enable Secure Boot. Go to Boot > Secure Boot and enable it.
Enable fTPM. Still in the BIOS, go to Advanced and enable "AMD CPU fTPM". If you do not have this, check Gigabyte's site for your motherboard's support page and download & install the latest chipset driver. I believe it was added in v31 or v34. Save & exit.
When you boot back into Windows, search for MSINFO in the start menu. At the bottom of the window you can type "secure" and it will highlight the 'Secure Boot State' field to identify that it is now "On".
This is a list I found for your motherboard, hopefully lot of it is OK already....
If not you are able to do that, you could try to establish this registry key:
HKEY_LOCAL_MACHINE\SYSTEM\Setup\LabConfig
"BypassSecureBootCheck"=dword:00000001
Thanks.
Checked my boot partition, its MBR.
I would stop fiddeling in the bios, and not change the boot partition to GPT.
I will try the registry option.
Thanks a lot
Motim