Solved Secure Boot and BIOS update


meimeiriver

Member
Local time
4:46 PM
Posts
75
OS
Windows 11
I have a fully updated Windows 11 system, but I would like to update my UEFI BIOS. I am a little hesitant, though, as I have Secure Boot enabled (mandatory), but no bitlocker going or something alike.

So, can safely update my BIOS? Or do I run the risk of changed BIOS keys preventing my machine to boot into Windows any more? (even though I use no cryptography).

Thanks.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    i9 12900K
    Motherboard
    ASUS ROG STRIX Z690-A GAMING WIFI D4
    Memory
    G.Skill Trident Z Royal Elite 2x32GB 4266Mhz Gold
    Graphics Card(s)
    RTX 3080 Ti
    Sound Card
    Sound Blaster ZxR
    Monitor(s) Displays
    Alienware 38"
    Screen Resolution
    3840x1600
    Hard Drives
    Samsung 980/860 EVO/970 Pro
    PSU
    Dark Power 12 850W
    Case
    Phanteks Evolv X
    Cooling
    MSI Meg CoreLiquid S360
    Keyboard
    Roccat Vulcan 122 AIMO
I have a fully updated Windows 11 system, but I would like to update my UEFI BIOS. I am a little hesitant, though, as I have Secure Boot enabled (mandatory), but no bitlocker going or something alike.

So, can safely update my BIOS? Or do I run the risk of changed BIOS keys preventing my machine to boot into Windows any more? (even though I use no cryptography).

Thanks.


Your manual says to "load BIOS defaults", before flashing the BIOS.

Two things...

1. I've successfully flashed the BIOS with and without, loading the BIOS defaults.
2. Your manual was written 2/11/2022


Two other things...

1. My manual says the same thing.
2. My manual was written before May 2020.

And another thing...

1. The last time I flashed my BIOS was 7/30/2021
 

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦22631.3374 ♦♦♦♦♦♦♦23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 4702)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?
Your manual says to "load BIOS defaults", before flashing the BIOS.

Two things...

1. I've successfully flashed the BIOS with and without, loading the BIOS defaults.
2. Your manual was written 2/11/2022


And what has this to do with secure boot, BIOS keys, and a BIOS update? Or did you just read the first few words?
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    i9 12900K
    Motherboard
    ASUS ROG STRIX Z690-A GAMING WIFI D4
    Memory
    G.Skill Trident Z Royal Elite 2x32GB 4266Mhz Gold
    Graphics Card(s)
    RTX 3080 Ti
    Sound Card
    Sound Blaster ZxR
    Monitor(s) Displays
    Alienware 38"
    Screen Resolution
    3840x1600
    Hard Drives
    Samsung 980/860 EVO/970 Pro
    PSU
    Dark Power 12 850W
    Case
    Phanteks Evolv X
    Cooling
    MSI Meg CoreLiquid S360
    Keyboard
    Roccat Vulcan 122 AIMO
And what has this to do with secure boot, BIOS keys, and a BIOS update? Or did you just read the first few words?


I only enabled Secure Boot after the first time I installed the Insider Windows 11.
Right now, I'm trying to figure out when that was.

I know I joined this forum 6/16/2021
 

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦22631.3374 ♦♦♦♦♦♦♦23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 4702)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?
I only enabled Secure Boot after the first time I installed the Insider Windows 11.
Right now, I'm trying to figure out when that was.

Let me clarify then. The moment of turning secure boot on is not that relevant to me (should indeed be after you first set BIOS values to default, then flashed, then re-able secure boot). The real question is, are the BIOS keys used by Secure Boot going to get changed by the BIOS update? (In such a way that Windows won't be able to boot any more).
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    i9 12900K
    Motherboard
    ASUS ROG STRIX Z690-A GAMING WIFI D4
    Memory
    G.Skill Trident Z Royal Elite 2x32GB 4266Mhz Gold
    Graphics Card(s)
    RTX 3080 Ti
    Sound Card
    Sound Blaster ZxR
    Monitor(s) Displays
    Alienware 38"
    Screen Resolution
    3840x1600
    Hard Drives
    Samsung 980/860 EVO/970 Pro
    PSU
    Dark Power 12 850W
    Case
    Phanteks Evolv X
    Cooling
    MSI Meg CoreLiquid S360
    Keyboard
    Roccat Vulcan 122 AIMO
Let me clarify then. The moment of turning secure boot on is not that relevant to me (should indeed be after you first set BIOS values to default, then flashed, then re-able secure boot). The real question is, are the BIOS keys used by Secure Boot going to get changed by the BIOS update? (In such a way that Windows won't be able to boot any more).


Did you or did you not.... SET a Secure Boot Key?

Your downloadable manual doesn't mention anything about Secure Boot.
It only mentions how to flash the BIOS.
Mine says I have to SET a Secure Boot key.... just enabling Secure Boot doesn't SET a key.


So... without a screenshot of your Secure Boot settings in YOUR BIOS...
 

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦22631.3374 ♦♦♦♦♦♦♦23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 4702)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?
Did you or did you not.... SET a Secure Boot Key?

Nope, I set nothing. :) I only enabled Secure Boot and TPM, as Windows 11 wanted me to do so. But that's the crux of the matter: do Secure Boot keys get used merely by enabling Secure Boot, or only when you're using bitlocker or the like? Because if the former, then I will have just bricked my OS after a BIOS update.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    i9 12900K
    Motherboard
    ASUS ROG STRIX Z690-A GAMING WIFI D4
    Memory
    G.Skill Trident Z Royal Elite 2x32GB 4266Mhz Gold
    Graphics Card(s)
    RTX 3080 Ti
    Sound Card
    Sound Blaster ZxR
    Monitor(s) Displays
    Alienware 38"
    Screen Resolution
    3840x1600
    Hard Drives
    Samsung 980/860 EVO/970 Pro
    PSU
    Dark Power 12 850W
    Case
    Phanteks Evolv X
    Cooling
    MSI Meg CoreLiquid S360
    Keyboard
    Roccat Vulcan 122 AIMO
Nope, I set nothing. :) I only enabled Secure Boot and TPM, as Windows 11 wanted me to do so. But that's the crux of the matter: do Secure Boot keys get used merely by enabling Secure Boot, or only when you're using bitlocker or the like? Because if the former, then I will have just bricked my OS after a BIOS update.


This is what I'm trying to figure out by "dates".
I have never used Bitlocker, and I never SET a Secure Boot key.

IF your BIOS also requires you to SET a Secure Boot Key... then the answer is... you can safely flash your BIOS.
I, we, can't answer the question of whether or not YOUR BIOS set a Secure Boot key automatically, until we SEE your Secure Boot BIOS settings. :)


According to MY BIOS settings and WHEN I enabled Secure Boot... Secure Boot keys don't get set by default.




You can use a smart phone to take pics of your BIOS, or a USB stick and the F12 key, to take screenshots of your BIOS.
 

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦22631.3374 ♦♦♦♦♦♦♦23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 4702)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?
Your manual says to "load BIOS defaults", before flashing the BIOS.
That doesn't make sense as the BIOS will reset after a flash so it should be "Load Optimized Defaults" after the flash. NOT before.

Yeah, I just read Section 3.3, page 3-3 of the owner's manual (PDF), and see the Note (pointed finger) is misplaced. It should be after the BIOS update procedures. BTW it's "Load Optimized Defaults" not "load BIOS defaults".
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 23H2 (Build 22631.3296)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel i9-9900K
    Motherboard
    Gigabyte Aorus Z390 Xtreme
    Memory
    32G (4x8) DDR4 Corsair RGB Dominator Platinum (3600Mhz)
    Graphics Card(s)
    Radeon VII
    Sound Card
    Onboard (ESS Sabre HiFi using Realtek drivers)
    Monitor(s) Displays
    NEC PA242w (24 inch)
    Screen Resolution
    1920 x 1200
    Hard Drives
    5 Samsung SSD drives: 2X 970 NVME (512 & 1TB), 3X EVO SATA (2X 2TB, 1X 1TB)
    PSU
    EVGA Super Nova I000 G2 (1000 watt)
    Case
    Cooler Master H500M
    Cooling
    Corsair H115i RGB Platinum
    Keyboard
    Logitech Craft
    Mouse
    Logitech MX Master 3
    Internet Speed
    500mb Download. 11mb Upload
    Browser
    Microsoft Edge Chromium
    Antivirus
    Windows Security
    Other Info
    System used for gaming, photography, music, school.
  • Operating System
    Win 10 Pro 22H2 (build 19045.2130)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom Built
    CPU
    Intel i7-7700K
    Motherboard
    Gigabyte GA-Z270X-GAMING 8
    Memory
    32G (4x8) DDR4 Corsair Dominator Platinum (3333Mhz)
    Graphics card(s)
    AMD Radeon R9 Fury
    Sound Card
    Onboard (Creative Sound Blaster certified ZxRi)
    Monitor(s) Displays
    Dell U2415 (24 inch)
    Screen Resolution
    1920 x 1200
    Hard Drives
    3 Samsung SSD drives: 1x 512gig 950 NVMe drive (OS drive), 1 x 512gig 850 Pro, 1x 256gig 840 Pro.
    PSU
    EVGA Super Nova 1000 P2 (1000 watt)
    Case
    Phantek Enthoo Luxe
    Cooling
    Corsair H100i
    Mouse
    Logitech MX Master
    Keyboard
    Logitech MK 710
    Internet Speed
    100MB
    Browser
    Edge Chromium
    Antivirus
    Windows Security
    Other Info
    This is my backup system.
I have a fully updated Windows 11 system, but I would like to update my UEFI BIOS. I am a little hesitant, though, as I have Secure Boot enabled (mandatory), but no bitlocker going or something alike.

So, can safely update my BIOS? Or do I run the risk of changed BIOS keys preventing my machine to boot into Windows any more? (even though I use no cryptography).

Thanks.

You can safely update your UEFI BIOS. The cryptography keys will change because of the update, but this will not prevent you from booting into Windows. And because you have not activated Bitlocker, you also don't need to use your recovery key. I did update my own Secure Boot BIOS and it did go well. I updated my Secure Boot BIOSto Prime X299-AII BIOS Ver. 1004 (with Resize BAR enabled). See attached screenshot for showing my update from Version 0901 to Version 1004.
 

Attachments

  • IMG_20210614_185002.jpg
    IMG_20210614_185002.jpg
    401.1 KB · Views: 5
Last edited:

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Sharkoon SGC1 - RGB
    CPU
    Intel® Core™ i9-10940X - 14 Cores
    Motherboard
    Asus Prime X299-A II
    Memory
    Kingston HyperX Fury RGB 64GB DDR4-3200
    Graphics Card(s)
    NVIDIA RTX 3060 Ti 8GB
    Monitor(s) Displays
    LG Ultra HD
    Screen Resolution
    3840 x 2160
    Hard Drives
    SSD 4000GB Samsung 870 QVO SSD 500GB Crucial MX500 PSSD 2T Samsung T7 SCSI
    PSU
    850W Cooler Master
    Case
    Sharkoon SGC1 - RGB
    Cooling
    Cooler Master H412R
    Keyboard
    Corsair Vengeance-K70-RGB
    Mouse
    CONTUS Gaming Mouse
    Internet Speed
    200 Mbit/s
    Browser
    Chrome
    Antivirus
    Windows Defender
You can safely update your UEFI BIOS. The cryptography keys will change because of the update, but this will not prevent you from booting into Windows. And because you have not activated Bitlocker, you also don't need to use your recovery key. I did update my own Secure Boot BIOS and it did go well.

Thank you. :) This is what I needed to hear.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    i9 12900K
    Motherboard
    ASUS ROG STRIX Z690-A GAMING WIFI D4
    Memory
    G.Skill Trident Z Royal Elite 2x32GB 4266Mhz Gold
    Graphics Card(s)
    RTX 3080 Ti
    Sound Card
    Sound Blaster ZxR
    Monitor(s) Displays
    Alienware 38"
    Screen Resolution
    3840x1600
    Hard Drives
    Samsung 980/860 EVO/970 Pro
    PSU
    Dark Power 12 850W
    Case
    Phanteks Evolv X
    Cooling
    MSI Meg CoreLiquid S360
    Keyboard
    Roccat Vulcan 122 AIMO
Thank you. :) This is what I needed to hear.



So did I... which is what I was trying to figure out in post #2.
"Whether or not I had Secure Boot enabled when I did the last BIOS Flash".


But none of us are on a Z690 motherboard.
Which is why, rather than "guessing", you should "read" or take screen shots of your Secure Boot settings in YOUR BIOS.
 
Last edited:

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦22631.3374 ♦♦♦♦♦♦♦23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 4702)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?
And what has this to do with secure boot, BIOS keys, and a BIOS update? Or did you just read the first few words?
Here's a basic video of how to enable Secure Boot on an Asus board...


Note if you don't get the Secure Boot enable button you may need to disable CSM - that's how it works on my Gigabyte board.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 23H2 (Build 22631.3296)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom built
    CPU
    Intel i9-9900K
    Motherboard
    Gigabyte Aorus Z390 Xtreme
    Memory
    32G (4x8) DDR4 Corsair RGB Dominator Platinum (3600Mhz)
    Graphics Card(s)
    Radeon VII
    Sound Card
    Onboard (ESS Sabre HiFi using Realtek drivers)
    Monitor(s) Displays
    NEC PA242w (24 inch)
    Screen Resolution
    1920 x 1200
    Hard Drives
    5 Samsung SSD drives: 2X 970 NVME (512 & 1TB), 3X EVO SATA (2X 2TB, 1X 1TB)
    PSU
    EVGA Super Nova I000 G2 (1000 watt)
    Case
    Cooler Master H500M
    Cooling
    Corsair H115i RGB Platinum
    Keyboard
    Logitech Craft
    Mouse
    Logitech MX Master 3
    Internet Speed
    500mb Download. 11mb Upload
    Browser
    Microsoft Edge Chromium
    Antivirus
    Windows Security
    Other Info
    System used for gaming, photography, music, school.
  • Operating System
    Win 10 Pro 22H2 (build 19045.2130)
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom Built
    CPU
    Intel i7-7700K
    Motherboard
    Gigabyte GA-Z270X-GAMING 8
    Memory
    32G (4x8) DDR4 Corsair Dominator Platinum (3333Mhz)
    Graphics card(s)
    AMD Radeon R9 Fury
    Sound Card
    Onboard (Creative Sound Blaster certified ZxRi)
    Monitor(s) Displays
    Dell U2415 (24 inch)
    Screen Resolution
    1920 x 1200
    Hard Drives
    3 Samsung SSD drives: 1x 512gig 950 NVMe drive (OS drive), 1 x 512gig 850 Pro, 1x 256gig 840 Pro.
    PSU
    EVGA Super Nova 1000 P2 (1000 watt)
    Case
    Phantek Enthoo Luxe
    Cooling
    Corsair H100i
    Mouse
    Logitech MX Master
    Keyboard
    Logitech MK 710
    Internet Speed
    100MB
    Browser
    Edge Chromium
    Antivirus
    Windows Security
    Other Info
    This is my backup system.
Before ASUS stopped including relevant information in downloadable motherboard pdf manuals...
This is what MY BIOS has for Secure Boot settings...

Image1.png


If your settings look like this... and you never SET a Secure Boot key, you'll probably be OK.
 

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦22631.3374 ♦♦♦♦♦♦♦23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 4702)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?
Ah ha!
It seems ASUS did the same thing for the Z600 series chipset manuals... that they did for the X500 series chipset manuals.

In other words... your manual "for" your actual BIOS settings is ONLY available,
on the ASUS TUF GAMING Z690-PLUS D4 motherboard manuals page.

Here's the link for the BIOS settings manual for the Z600 series motherboards.




YOUR Secure Boot settings seem to be the same, as mine anyway, so you should be OK.
Please post back with your flashing results. :)

 

My Computers

System One System Two

  • OS
    Win 11 Home ♦♦♦22631.3374 ♦♦♦♦♦♦♦23H2
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® [May 2020]
    CPU
    AMD Ryzen 7 3700X
    Motherboard
    Asus Pro WS X570-ACE (BIOS 4702)
    Memory
    G.Skill (F4-3200C14D-16GTZKW)
    Graphics Card(s)
    EVGA RTX 2070 (08G-P4-2171-KR)
    Sound Card
    Realtek ALC1220P / ALC S1220A
    Monitor(s) Displays
    Dell U3011 30"
    Screen Resolution
    2560 x 1600
    Hard Drives
    2x Samsung 860 EVO 500GB,
    WD 4TB Black FZBX - SATA III,
    WD 8TB Black FZBX - SATA III,
    DRW-24B1ST CD/DVD Burner
    PSU
    PC Power & Cooling 750W Quad EPS12V
    Case
    Cooler Master ATCS 840 Tower
    Cooling
    CM Hyper 212 EVO (push/pull)
    Keyboard
    Ducky DK9008 Shine II Blue LED
    Mouse
    Logitech Optical M-100
    Internet Speed
    300/300
    Browser
    Firefox (latest)
    Antivirus
    Bitdefender Internet Security
    Other Info
    Speakers: Klipsch Pro Media 2.1
  • Operating System
    Windows XP Pro 32bit w/SP3
    Computer type
    PC/Desktop
    Manufacturer/Model
    Built by Ghot® (not in use)
    CPU
    AMD Athlon 64 X2 5000+ (OC'd @ 3.2Ghz)
    Motherboard
    ASUS M2N32-SLI Deluxe Wireless Edition
    Memory
    TWIN2X2048-6400C4DHX (2 x 1GB, DDR2 800)
    Graphics card(s)
    EVGA 256-P2-N758-TR GeForce 8600GT SSC
    Sound Card
    Onboard
    Monitor(s) Displays
    ViewSonic G90FB Black 19" Professional (CRT)
    Screen Resolution
    up to 2048 x 1536
    Hard Drives
    WD 36GB 10,000rpm Raptor SATA
    Seagate 80GB 7200rpm SATA
    Lite-On LTR-52246S CD/RW
    Lite-On LH-18A1P CD/DVD Burner
    PSU
    PC Power & Cooling Silencer 750 Quad EPS12V
    Case
    Generic Beige case, 80mm fans
    Cooling
    ZALMAN 9500A 92mm CPU Cooler
    Mouse
    Logitech Optical M-BT96a
    Keyboard
    Logitech Classic Keybooard 200
    Internet Speed
    300/300
    Browser
    Firefox 3.x ??
    Antivirus
    Symantec (Norton)
    Other Info
    Still assembled, still runs. Haven't turned it on for 13 years?
I like the way that my new Dell XPS 9510, that you see in "My Computer" below, just now handled my BIOS update. I have the "Dell Command Update" app installed and it informed me that a BIOS update was ready. I was informed that Updating the BIOS required that my charger remain connected. I initiated the process and from there everything was fully automated. I have BitLocker active and turned ON. As I watched the process, BitLocker was turned OFF for the update and then turned back ON again when finished. After the auto restart I was fully updated to BIOS 1.10.1. My BitLocker Key did not change and remained the same. The entire BIOS update took less than 10 minutes.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Dell XPS 15 9510 OLED
    CPU
    11th Gen i9 -11900H
    Memory
    32 GB 3200 MHz DDR4
    Graphics Card(s)
    NVIDIA® GeForce® RTX 3050Ti
    Monitor(s) Displays
    15.6" OLED Infinity Edge Touch
    Screen Resolution
    16:10 Aspect Ratio (3456 x 2160)
    Hard Drives
    1 Terabyte M.2 PCIe NVMe SSD
    2 Thunderbolt™ 4 (USB Type-C™)
    1 USB 3.2 Gen 2 (USB Type-C™)
    SD Card Reader (SD, SDHC, SDXC)
    Internet Speed
    900 Mbps Netgear Orbi + 2 Satellites
    Browser
    Microsoft Edge (Chromium) + Bing
    Antivirus
    Microsoft Windows Security (Defender)
    Other Info
    Microsoft 365 subscription
    Microsoft OneDrive 1TB Cloud
    Microsoft Outlook
    Microsoft OneNote
    Microsoft PowerToys
    Microsoft Visual Studio
    Microsoft Visual Studio Code
    Macrium Reflect
    Dell Support Assist
    Dell Command | Update
    LastPass Password Manager
    Amazon Kindle
    Interactive Brokers Trader Workstation
    Lightroom/Photoshop subscription
  • Operating System
    Windows 11 Pro
    Computer type
    Tablet
    Manufacturer/Model
    Microsoft Surface Pro 7
    CPU
    i5
    Memory
    8 GB
    Hard Drives
    256GB SSD
    Internet Speed
    900 Mbps Netgear Orbi + 2 Satellites
    Browser
    Microsoft Edge (Chromium) + Bing
    Antivirus
    Microsoft Windows Security (Defender)
    Other Info
    Microsoft 365 subscription (Office)
    Microsoft OneDrive 1TB Cloud
    Microsoft Outlook
    Microsoft OneNote
    Microsoft Visual Studio
    Amazon Kindle
    Interactive Brokers Trader Workstation
    Lightroom/Photoshop subscription

My Computer

System One

  • OS
    Windows 11 Home x64 Version 23H2 Build 22631.3296
Who is mandating that?
It is not MS. MS only specify that Windows 11 computers are Secure-boot-capable not that Secure boot is enabled.
See, for example, Windows 11 and Secure Boot - MSSupport

Denis

True. But I figured I might as well enable it when I bought my new system (needed for TPM). But maybe it's indeed not a bad idea to disable secure boot first, before I do the BIOS update -- just in case.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    i9 12900K
    Motherboard
    ASUS ROG STRIX Z690-A GAMING WIFI D4
    Memory
    G.Skill Trident Z Royal Elite 2x32GB 4266Mhz Gold
    Graphics Card(s)
    RTX 3080 Ti
    Sound Card
    Sound Blaster ZxR
    Monitor(s) Displays
    Alienware 38"
    Screen Resolution
    3840x1600
    Hard Drives
    Samsung 980/860 EVO/970 Pro
    PSU
    Dark Power 12 850W
    Case
    Phanteks Evolv X
    Cooling
    MSI Meg CoreLiquid S360
    Keyboard
    Roccat Vulcan 122 AIMO
A note of caution, I bought a new system and used my old system Windows image (Macrium created) restored to the new systems drive, the new system had already been setup with secure boot enabled from the system builders.
The image restored successfully and booted but threw up a message about the TPM keys had changed and my PIN was no longer valid.
The reason I am mentioning this is because Windows presents a dialogue to allow you to reset the PIN, but the function seemed broken for me, and just loops between "set new PIN" and "something went wrong".
This has been mentioned in other threads on this forum, it may have been fixed in a new build though.
The only option was to fresh install, which worked fine and I could set my PIN to the one I used on the old system during setup with no issue.
So if your BIOS update clears your TPM keys (again, an issue mentioned in other threads on this forum) then it is entirely possible your Windows will need a new PIN/ password setting and this may well bug out, necessitating a fresh install.
It might be an idea to check the forums for your hardware to see if others have had issues with BIOS updates.
 

My Computer

System One

  • OS
    Windows 11 Pro 22H2, build: 22621.521
    Computer type
    PC/Desktop
    Manufacturer/Model
    Scan 3XS Custom 1700
    CPU
    Intel i7-12700K 3.6GHz Base (5.0GHz Turbo)
    Motherboard
    Asus ProArt Creator B660 D4
    Memory
    64GB DDR 3600Mhz
    Graphics Card(s)
    Asus Tuff RTX 3080 10GB OC
    Sound Card
    Onboard Realtek
    Monitor(s) Displays
    Gigabyte G32QC 32inch 16:9 curved @2560 x 1440p 165Hz Freesync Premium Pro/ Dell SE2422H 24inch 16:9 1920 x 1080p 75Hz Freesync
    Screen Resolution
    2560 x 1440p & 1920 x 1080p
    Hard Drives
    WD SN570 1TB NVME (Boot), Samsung 870QVO 1TB (SSD), SanDisk 3D Ultra 500Gb (SSD) x2, Seagate 3Tb Expansion Desk (Ext HDD), 2x Toshiba 1Tb P300 (Ext HDD)
    PSU
    Corsair RM1000X Modular
    Case
    Corsair 4000D Airflow Desktop
    Cooling
    Corsair Hydro H150i RGB Pro XT 360mm Liquid Cooler, 3 x 120mm fans, 1x Exhaust
    Keyboard
    Microsoft Ergonomic
    Mouse
    Logitech G402
    Internet Speed
    800Mbs
    Browser
    Edge Chromium
    Antivirus
    Defender, Malwarebytes
Secure boot is a feature to verify if the OS is digitally signed. It wont interfere on BIOS update and BIOS update wont interfere on booting Windows.
Don't use a Windows BIOS update app. Update your BIOS using BIOS Update on BIOS.
 

My Computers

System One System Two

  • OS
    Windows 7 HP 64 - Windows 11 Pro - Lubuntu
    Computer type
    PC/Desktop
    Manufacturer/Model
    custom build
    CPU
    i5 6600K - 800MHz to 4400MHz
    Motherboard
    GA-Z170-HD3P
    Memory
    4+4G GSkill DDR4 3000
    Graphics Card(s)
    IG - Intel 530
    Monitor(s) Displays
    Samsung 226BW
    Screen Resolution
    1680x1050
    Hard Drives
    (1) -1 SM951 – 128GB M.2 AHCI PCIe SSD drive for Win 11
    (2) -1 WD SATA 3 - 1T for Data
    (3) -1 WD SATA 3 - 1T for backup
    (4) -1 BX500 SSD - 128G for Windows 7 and Lubuntu
    PSU
    Thermaltake 450W TR2 gold
    Keyboard
    Old and good Chicony mechanical keyboard
    Mouse
    Logitech mX performance - 9 buttons (had to disable some)
    Internet Speed
    500 Mb/s
    Browser
    Firefox 64
  • Operating System
    Windows 7 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Asus Q550LF
    CPU
    i7-4500U 800- 3000MHz
    Motherboard
    Asus Q550LF
    Memory
    (4+4)G DDR3 1600
    Graphics card(s)
    IG intel 4400 + NVIDIA GeForce GT 745M
    Sound Card
    Realtek
    Monitor(s) Displays
    LG Display LP156WF4-SPH1
    Screen Resolution
    1920 x 1080
    Hard Drives
    BX500 120G SSD for Windows and programs
    & 1T HDD for data
    Internet Speed
    350 Mb/s
    Browser
    Firefox 64

Latest Support Threads

Back
Top Bottom