Solved Secure boot not enabled

NormAtHome · Sep 3, 2023

I've got a computer 10th generation Intel i7, Asus Prime H570M-Plus motherboard, 16gb Corsair ram, 1tb Samsung 980 Pro m.2 now the old ssd a Samsung EVO died and the old installation had Windows 10 but I'm now trying to install Windows 11 on this new ssd which as far as I can tell should be supported but the install keeps saying that the computer doesn't meet the minimum requirements. I tried reinstalling Windows 10 to see if an upgrade attempt would give me more information about what the problem is and the PC Health Check program says "This PC must support secure boot". Now I did Google this and the options OS Type in the bios was set to Windows UEFI mode but Secure Boot Mode was set to Standard and not custom so I changed that bios setting and I still get the same error message when I boot from the Windows 11 USB. That this computer doesn't meet the requirements.

Does anyone have any idea what the problem is here?

Ghot · Sep 3, 2023

NormAtHome said:
Does anyone have any idea what the problem is here?

Everyone in the room: Norm !!

Open a command prompt as Admin and type: Diskpart ...and hit Enter

When the prompt changes to Diskpart, type: List Disk ...and hit Enter.

Hopefully, your disk(s) are GPT as shown by the asterisk.

If there's no asterisk in the GPT column (for the Windows disk), you'll need to do Option #1, here...

Convert Windows 10 from Legacy BIOS to UEFI without Data Loss

How to Convert Windows 10 from Legacy BIOS to UEFI without Data Loss

www.tenforums.com

bobkn · Sep 3, 2023

If you have Secure Boot set to [Windows UEFI Mode], that should be sufficient. I'd leave the Secure Boot mode as Standard. If your new SSD is unallocated, the Windows 11 installer should be able to create and format the necessary partitions.

How are you installing 11? I hope it's from a USB drive booted in UEFI. (For most motherboards, the USB drive must be FAT32. Or one created with a FAT32 boot partition, as made by Rufus.)

Do you have the firmware TPM (PTT, platform trust technology) enabled in the BIOS? According to the BIOS manual, it supports the TPM 2.0 standard.

zbook · Sep 3, 2023

Please run:

https://aka.ms/GetPCHealthCheckApp

Post images or share links into this thread using one drive, drop box, or google drive.

NormAtHome · Sep 3, 2023

bobkn said:
If you have Secure Boot set to [Windows UEFI Mode], that should be sufficient. I'd leave the Secure Boot mode as Standard. If your new SSD is unallocated, the Windows 11 installer should be able to create and format the necessary partitions.

How are you installing 11? I hope it's from a USB drive booted in UEFI. (For most motherboards, the USB drive must be FAT32. Or one created with a FAT32 boot partition, as made by Rufus.)

Do you have the firmware TPM (PTT, platform trust technology) enabled in the BIOS? According to the BIOS manual, it supports the TPM 2.0 standard.

file:///C:/Users/bobkn/Downloads/PRIME_PRO_TUF_GAMING_Intel_500_Series_BIOS_EM_WEB_EN.pdf

Ok so I switched it back to standard, I used the secure erase function in the bios to wipe any data from the Windows 10 installation out so the ssd should be blank. I am using a flash drive created with the latest Windows 11 Media Creation Tool; yes TPM 2 is enabled in the bios. I reset the bios back to their default settings and everything now seems to work. That was honestly the strangest thing.