Getting Windows 10 Computer Ready For Windows 11

HDL · Jun 13, 2022

Dru2 said:
Post #55 was deleted as I needed to research a statement the post was based on. So here we go....

The reason you cannot enable Secure Boot is because you can't disable CSM (Compatibility Support Module). The reason you can't disable CSM is because you are in effect running in "legacy mode" by using a MBR partition. While it's true you can run a MBR partition in a "UEFI" BIOS, it also requires CSM be on. To the BIOS... why disable CSM if you need legacy mode?

Switch From Legacy MBR Disk to GPT Disk With Windows 10 - Windows drivers

Provides guidance to enable a seamless upgrade and enable the user to leverage new and improved security features of Windows 10.

docs.microsoft.com

Note configurations 1, 3 & 4

This is why the tech person suggested you move from MBR to GPT....

The bottom line is if you want to enable Secure Boot, you'll need to disable CSM. To disable CSM, you'll have to have GPT partitions.

In answering the question.... yes, what the tech told is about right. I say about right (not clear on "exit and then reset") as I'm only going by what you posted.

That said, be aware not all BIOS are the same, or have the same layout. Also be aware that some of the BIOS advice given here may NOT apply to your particular BIOS, even if one has the same board. Example the BIOS shown in my owner's manual is not the current BIOS I have for my board as Gigabyte completely changed the layout with a BIOS update a few updates back.

As to this...

First, I want to say you initially left a lot of info out in your first post that would have been helpful from the beginning... you had the PC built a specific way. You're running MBR partitions.

That said, if you "asked" your PC person to set your system up like a previous one, it's very possible they left Secure-Boot alone (off). Also, "if" they used the drives from your previous system, and they were MBR then, well as noted, Secure Boot wasn't possible. Again, why the left Secure Boot off. If they built the machine for you as you say, why not ask them to reconfigure it to allow Secure Boot, instead of calling Asus?

To be honest, and based on your skill level shown here, if possible, just ask those who built the PC to reconfigure for Secure Boot. What you want requires some advanced skills get Secure Boot enabled. If you've already got Windows 11 installed and there are no issues, why do you need Secure Boot? And are you up for doing what it takes to get there?

If you do decide to tackle it, I'd HIGHLY recommend you backup before doing anything.... even if you decide to let someone else do it.

Rant for others.... this is why it is incumbent to ask a lot of questions when trying to troubleshoot certain issue and why we should insist on the info we ask for before proceeding. Here it would have been extremely helpful upfront to know that the PC is question had a MBR partition instead of GPT. And that the OP had someone build this to has wishes with based on a Windows 10 build. It's also equally important an OP provides as detailed info as possible, and to provide any required info asked for.

My two cents.

OK, there still must be a lot of confusion here and I'm sure it is my fault. I started this thread wanting to know how I could get my Windows 10 computer ready for Windows 11. When running PC Health it said I had to enable both Secure Boot and TMP. That was for the Windows 10 computer. The post kind of took another direction when I mentioned that my Windows 11 machine was running but Secure Boot was listed in the system information as being disabled. The Windows 11 is petitioned correctly in that it is GTP. I have no problem with the Windows 11 computer other than I thought I may need to know how to enable Secure Boot BUT, the ASUS technician said that isn't the case so I am letting that computer alone. The rest of this thread is all about getting my Windows 10 computer to be ready to load Windows 11.

I have contacted the computer builder and he will probably make a trip to my house if necessary. I was trying to avoid that added cost.

Dru2 · Jun 13, 2022

HDL said:
OK, there still must be a lot of confusion here and I'm sure it is my fault.

I have contacted the computer builder and he will probably make a trip to my house if necessary. I was trying to avoid that added cost.

Whichever PC (where the confusion lays) the remedy remains - in order to enable Secure Boot, you need to disable CSM, to disable CSM, the drive must be using GPT, not MBR.

And I would suggest you backup your data "before" the tech gets to your house, as this saves time and is one less thing for them to do.

Good luck.

HDL · Jun 13, 2022

I forgot to thank you for your last post so I want to thank you for your help now. I ordered a 2TB external drive for that backup. It is supposed to be here today. So, I plan on using it for that backup. Its format is exFAT. After searching the WEB, I have decided that I better format it to NTFS before doing the backup.

Dru2 · Jun 13, 2022

HDL said:
I forgot to thank you for your last post so I want to thank you for your help now. I ordered a 2TB external drive for that backup. It is supposed to be here today. So, I plan on using it for that backup. Its format is exFAT. After searching the WEB, I have decided that I better format it to NTFS before doing the backup.

I think either is fine. I've never formatted any external drives for use. Just plug and play. My Western Digital 12TB My Book, is still in exFAT and it works just fine. But yes, the "recommendation" is NTFS for Windows.

Some FYI info - NTFS or exFAT for External Hard Drive: Which Format is Better for External Hard Drive

And thanks. Glad I was able to help clarify some things.

Good luck.

HDL · Jun 13, 2022

The fellow who builds my computers is coming to my home on Friday. In the meantime he is going to attach to my computer and run a backup on it the way he does things. All I have to do is have the hard drive get here and it doesn't look like it will be today, as promised. Once he is here, he is not only going to convert the hard drive to GPT, he is also going to load Win 11 on it. So I should be all set once that happens. Thank for the link above.