Do I need to update the GOP on my MSI GTX 1650 D6 VENTUS XS OCV3?


ChillWays

ChillWays

New member
Local time
1:42 AM
Posts
2
OS
Windows 11
I just found out about that GOP on NVIDIA GPUs are going to expire and I now wonder if I need to update the GOP on my NVIDIA GPU?

I have a 'MSI GTX 1650 D6 VENTUS XS OCV3' GPU on a 'B550M PRO-VDH WIFI' motherboard.

I have the latest version of the motherboard BIOS '7C95v2O'(2026-05-11), that has a updated Secure Boot Key =

B550M PRO-VDH WIFI

Best AMD AM4 B550 MATX motherboard, lightning PCIe 4.0, lightning M.2, USB 3.2 Gen 1, M.2 heatsink, wifi AC, powerful overclocking, MSI PRO
www.msi.com www.msi.com

In 'Windows 11', it says that I have all the required certificates =
uUt9imS.jpeg



Am I safe or do I need to update the GOP?

My GPUs support page don't have a GOP or VBIOS updater =


Through Google I have found several 'NVIDIA Graphics Firmware Update Tools', but according to their description they are either for older or newer GPUs.

Is there a way for me to check if I need to update the GOP and can I update the GOP on my 'MSI GTX 1650 D6 VENTUS XS OCV3'?
 
Windows Build/Version
Windows 11 23H2
Last edited:

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
MSI
At this point, you have the CA 2023 certs applied. The problem for older NVIDIA cards is some have firmware signed using the PCA 2011 cert, which is scheduled to be revoked later this year. When that happens, your GPU won't communicate with the BIOS during start-up.

There are 3rd-party tools discussed in the NVIDIA community forum, which try to re-sign the existing firmware. But modding support may not exist for all older models. You'll have to browse the NVIDIA forums for the latest details.

Assuming your GPU can't be updated, the last resort is to prevent the PCA 2011 from getting revoked by Windows. This is acceptable, since you've already installed the updated CA 2023 certs.

Run this command as Admin:
Code: 
schtasks.exe /Change /TN "\Microsoft\Windows\PI\Secure-Boot-Update" /Disable
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
@garlin

I have the same question. EVGA 08G-P4-2172-KR Geforce RTX 2070 8GB vid card

Image2.webp Image3.webp

Is there a way to undo my Revoke (YELLOW dots), and is that the best move?



EVGA said this (via email, just now)

Hi Mike,

This card already supports Secure Boot and all Nvidia GeForce cards starting with the GeForce 700 series have shipped with a firmware/vBIOS that supports Secure Boot so we do not have one to update it from not supporting Secure Boot to one that supports Secure Boot. To enable it you would need to go into your motherboard's BIOS and disable CSM, enable Secure Boot, and disable Fast Boot then save and exit for it to take effect and from your screenshot Secure Boot is already enabled.

I apologize for any confusion.

Regards,
EVGA
Click to expand...


Only problem is... this motherboard "likes" to have CSM enabled.
Fast Boot is Disabled and Secure Boot and CSM are enabled.

Brb, I double check BIOS settings...
 
Last edited:

My Computers My Computers

System One System Two

  • At a glance

    Win 11 Home ♦♦♦26200.8737 ♦♦♦♦♦♦♦25H2AMD Ryzen 7 3700XG.Skill (F4-3200C14D-16GTZKW)EVGA RTX 2070 (08G-P4-2171-KR)
    OS
    Win 11 Home ♦♦♦26200.8737 ♦♦♦♦♦♦♦25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 5302)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Total Security
    Other Info
    Speakers: Klipsch Pro Media 2.1

  • At a glance

    Windows XP Pro 32bit w/SP3AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Keyboard
    Logitech Classic Keybooard 200
    Mouse
    Logitech Optical M-BT96a
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 15 years?
In your case, PCA 2011 has already been revoked (we know because you have a SVN). So if don't see any problems right now, then you're not susceptible to the problem. The problem happens as soon as CA 2011 is revoked.

Besides disabling Secure Boot mode, someone could reset their certs back to the CA 2011 factory defaults, which allows the legacy NVIDIA firmware to continue working.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
KevTech said:
It is GOP not GPO.
Click to expand...
Yeah, but I was wondering if the OP was asking if a GPO was available to block revocations. I don't believe there is one explicitly for that step.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
My GFX card (MSI GeForce GTX 1050Ti) has the same problem. I revoked PCA2011. After that my BIOS complained about incompatible gfx card vBIOS. I have all of the updated secure boot certificates. I had to enable CSM in BIOS. Problem solved. I don't know if it is easy to break a system through GOP's outdated certificate.
 

My Computers My Computers

System One System Two

  • At a glance

    Windows 11 Pro build 26200.8524Intel i7-4790Teams DDR3-1600 4x4 GBMSI Nvidia GeForce GTX 1050Ti
    OS
    Windows 11 Pro build 26200.8524
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Intel i7-4790
    Motherboard
    Asus H97 Pro Gamer with add-on TPM1.2 module
    Memory
    Teams DDR3-1600 4x4 GB
    Graphics Card(s)
    MSI Nvidia GeForce GTX 1050Ti
    Sound Card
    Realtek ALC1150
    Monitor(s) Displays
    Dell P2425D
    Screen Resolution
    2560 by 1440 pixels
    Hard Drives
    Corsair NVMe M.2 Core XT 1000 GB (Windows 11 v.25H2); Samsung SATA Evo 870 500 GB (Windows 11 v.25H2);
    PSU
    Corsair HX850
    Case
    Gigabyte Solo 210
    Cooling
    Zalman CNPS7X Tower
    Keyboard
    Microsoft AIO Wireless (includes touchpad)
    Mouse
    HP S1000 Plus Wireless
    Internet Speed
    500 Mb fiber optic
    Browser
    Chrome; MS Edge
    Antivirus
    Windows Defender

  • At a glance

    MacOS 12 MontereyIntel Core i58 GBIntel integrated
    Operating System
    MacOS 12 Monterey
    Computer type
    Laptop
    Manufacturer/Model
    Apple Macbook Air
    CPU
    Intel Core i5
    Memory
    8 GB
    Graphics card(s)
    Intel integrated
    Screen Resolution
    1440 by 900 pixels
    Hard Drives
    128 GB
    Keyboard
    Built-in
    Mouse
    Microsoft Wireless
    Internet Speed
    802.11 ac
    Browser
    Chrome; Safari
    Antivirus
    N/A
garlin said:
Yeah, but I was wondering if the OP was asking if a GPO was available to block revocations. I don't believe there is one explicitly for that step.
Click to expand...

I thought GOP as they were asking about updating it.

ChillWays said:
Is there a way for me to check if I need to update the GPO and can I update the GPO
Click to expand...

Anyway, official and unofficial tools to update GOP on older cards is at reddit.

https://www.reddit.com/r/nvidia/comments/1n1jroi/psa_secure_boot_2026_june_cert_expiry_can_block
 

My Computer My Computer

At a glance

Windows 11 Pro
OS
Windows 11 Pro
garlin said:
Yeah, but I was wondering if the OP was asking if a GPO was available to block revocations. I don't believe there is one explicitly for that step.
Click to expand...


After Googling a bit... it seems that various sites call it GPO and some call it GOP (go figure)
 

My Computers My Computers

System One System Two

  • At a glance

    Win 11 Home ♦♦♦26200.8737 ♦♦♦♦♦♦♦25H2AMD Ryzen 7 3700XG.Skill (F4-3200C14D-16GTZKW)EVGA RTX 2070 (08G-P4-2171-KR)
    OS
    Win 11 Home ♦♦♦26200.8737 ♦♦♦♦♦♦♦25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 5302)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Total Security
    Other Info
    Speakers: Klipsch Pro Media 2.1

  • At a glance

    Windows XP Pro 32bit w/SP3AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Keyboard
    Logitech Classic Keybooard 200
    Mouse
    Logitech Optical M-BT96a
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 15 years?

My Computers My Computers

System One System Two

  • At a glance

    All Branches but ReleaseAMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 232 GB DDR5Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB...
    OS
    All Branches but Release
    Computer type
    Laptop
    Manufacturer/Model
    Acer Nitro ANV15-51
    CPU
    AMD Ryzen 7 7735HS 3200-4500 Mhz 8 cores x 2
    Motherboard
    Sportage_RBH
    Memory
    32 GB DDR5
    Graphics Card(s)
    Radeon Graphic / NVIDIA GeForce RTX 4060 8 GB GDDR6
    Sound Card
    AMD/Realtek(R) Audio
    Monitor(s) Displays
    Integrated Monitor (15.3"vis)
    Screen Resolution
    FHD 1920X1080 16:9 144Hz
    Hard Drives
    KINGSTON OM8SEP4512Q-AA 1TB
    Western Digital 256GB
    PSU
    19V DC 6.32 A 120 W
    Cooling
    Dual Fans
    Mouse
    MS Bluetooth
    Internet Speed
    Fiber 1GB Cox -us & 1GB Orange-fr
    Browser
    Edge Canary- Firefox Nightly-Chrome Dev-Chrome Dev
    Antivirus
    Windows Defender

  • At a glance

    Windows 11 BetaAMD A9-94208 GB of DDR4AMD Radeon R5
    Operating System
    Windows 11 Beta
    Computer type
    Laptop
    Manufacturer/Model
    Asus X751BP
    CPU
    AMD A9-9420
    Memory
    8 GB of DDR4
    Graphics card(s)
    AMD Radeon R5
    Screen Resolution
    1600x900
    Hard Drives
    Seagate 1 TB
garlin said:
Run this command as Admin:
Code: 
schtasks.exe /Change /TN "\Microsoft\Windows\PI\Secure-Boot-Update" /Disable
Click to expand...
Can this be reversed later if I find a solution?
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
MSI
GOP is the protocol that UEFI uses in Secure Boot mode to communicate with 3rd-party devices like GPU's or storage controllers. If your GPU has the wrong signing cert, then your UEFI refuses to talk to them and your GPU can't display video while in BIOS.

Separately there are a handful of Windows GPO's to manage the Secure Boot task's behavior.

So the question may play out as "my GPU is signed by CA 2011, and won't talk during GOP, and therefore is there a GPO to block banning CA 2011"... /ahem
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
@garlin


I see a need for a clear cut topic/guide about this.
I nominate... you, as this is above my pay grade. :-)

Just in the past week, I've 2-3 topics about "black screens".

It seems that if this problem occurs due to MS's certifications idiocy... we won't be able to SEE the BIOS, to disable Secure Boot, if needed.
 

My Computers My Computers

System One System Two

  • At a glance

    Win 11 Home ♦♦♦26200.8737 ♦♦♦♦♦♦♦25H2AMD Ryzen 7 3700XG.Skill (F4-3200C14D-16GTZKW)EVGA RTX 2070 (08G-P4-2171-KR)
    OS
    Win 11 Home ♦♦♦26200.8737 ♦♦♦♦♦♦♦25H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 5302)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Total Security
    Other Info
    Speakers: Klipsch Pro Media 2.1

  • At a glance

    Windows XP Pro 32bit w/SP3AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Keyboard
    Logitech Classic Keybooard 200
    Mouse
    Logitech Optical M-BT96a
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 15 years?
You must log in or register to reply here.

Latest Support Threads

Latest Tutorials

Back
Top Bottom