You are right on this. To ensure smooth installation, temporary disable Secure boot, once done you can re-enable it.
Here are couple of links:
Neosmart Disabling Secure Boot
Technet Disabling Secure Boot
Having said that, I'll bow out too since we've already given you enough info on how to install Windows
you need to DISABLE SECURE BOOT (not UEFI of course) since the SECURE BOOT prevents you from booting alternative OS'es such as Linux or bootable recovery media such as a bootable Free Macrium from a USB.
It will probably prompt you for a key --just hit enter. (This key is the secure boot key - not windows but usually hitting enter is enough). If it insists on a key then in your BIOS menu there will be some option to display it. Take the key down on a piece of paper (in the age of phones - can people even WRITE any more !!!) and then enter that number.
You can often convert an HDD to GPT without losing data --in Diskpart in Admin mode simply type Convert GPT.
As for Windows install --you don't need to set any preference for booting the windows media -if your computer is set for UEFI it will load the appropriate software --same as MBR.
Note - if installing clean with MBR HDD make sure you don't have more than 4 HDD's online at install time and sometimes a built in SD (or Micro SDHC card) card can cause problems too so eject it before doing the install.
You CAN have GPT HDD's on non UEFI computers --they just can't be the BOOT device !!!!.
After install you can then re-connect HDD's and SD card again - the problem only occurs with MBR installs.
Don't re-enable secure boot after re-installing Windows -- it will hose you up -- simply leave it off -- IMO this was a STUPID feature - possibly the idea was for Ms to actually have Windows fixed in ROM (eventually). For home computers where you might often want to boot all sorts of things it's a royal pain. It's probably OK for "Work" / locked down machines to ensure people don't boot unofficial OS'es or bootlegged software.
You can Disable Secure Boot and UEFI to install from a non UEFI Windows version and device (Ie) Flash Drive.
Or better yet, create a bootable UEFI Windows USB Flash Drive using Rufus in my signature. Leave Secure Boot and UEFI turned on UEFI Bootable USB Flash Drive - Create in Windows
Asus motherboard with UEFI firmware.Option One: Use Media Creation Tool to create Bootable Windows 10 USB for Legacy BIOS and UEFI
This option will use the Media Creation Tool from Microsoft to download an ISO file and create a bootable USB flash drive that is 32-bit, 64-bit, or both, and be used to install Windows 10 with or without UEFI.
- Asus UEFI setups allow for both UEFI and Legacy BIOS (aka CSM) booting to be enabled.
- You do not need to change the default UEFI firmware settings, if you install Windows 10 64-bit in UEFI mode or Legacy BIOS mode.
Asus motherboard default UEFI firmware settings.
- When you boot in UEFI mode, Secure Boot is automatically turned on.
- When you boot in Legacy BIOS mode, Secure Boot is automatically turned off.
Asus motherboard default UEFI firmware settings.
- When you boot from the Windows 10 USB/DVD in UEFI mode (UEFI prefix in the boot menu), then Windows setup creates a GPT partitioned disk.
- When you boot from the Windows 10 USB/DVD in Legacy BIOS mode (without UEFI prefix in the boot menu), then Windows setup creates a MBR partitioned disk.
Asus motherboard default UEFI firmware settings (see screenshots below).
CSM (Compatibility Support Module) > Launch CSM
- [Auto]: The system automatically detects the bootable devices and the add-on devices.
- [Enabled]: For better compatibility, enable the CSM to fully support the non-UEFI driver add-on devices or the Windows UEFI mode.
- [Disabled]: Disable the CSM to fully support the Windows Security Update and Security Boot.
Secure Boot > OS Type
- [Windows UEFI Mode]: Execute the Microsoft Secure Boot check. Only select this option when booting on Windows UEFI mode or other Microsoft Secure Boot compliant OS.
- [Other OS]: Get the optimized function when booting on Windows non-UEFI mode, Windows Vista/XP, or other Microsoft Secure Boot non-compliant OS.
If you install Windows 7 64-bit in UEFI mode, then you must select the following option.
Secure Boot > OS Type > Other OS (default: Windows UEFI mode)
Or you get the error message "Secure Boot Violation" after installing KB3133977 from the Windows Update, which makes the system fail to boot into the operating system.
Last edited by Feather; 22 Aug 2016 at 07:02.
Hi Debgram, If you would set your Secure Boot to Disabled and the CSM to Auto, it will enable either Secure boot or MBR boot. This will be useful when you are booting from another device such as many USB drives or a DVD drives. If you would like to, you can enable secure boot and set the CSM to disabled after the install. However, if you do that you are going to have to change those options any time you need to boot into many other devices. But, for the install I would disable Secure Boot and set CSM to auto. Once you are installed in UEFI Mode, you can change them however you want them.
Yes, as long as your boot selection is your USB drive name with UEFI. If you use the one time boot selection menu, you will have 2 entries for your USB drive, 1 will be the make of your USB the second will be the Make of your USB with UEFI appended to it. Select the one with UEFI appended to it.