Secure Boot?

Disposable · Jun 29, 2021

I run Windows 10 64 bit with 32 gig ram latest build 21H1 19043.1081.
My MOBO is a Micro-Star B450M Pro-VDH MAX 8.0
AMD B.A0-AMD AGESA COMBO AM4V2PI 1.1.0.0

The Desktop PC this belongs to is less tan a year old, an 8 core: AMD Ryzen 7 1700X Eight-Core Processor 3.40 GHz

I have been into the BIOS and found ftpm and enabled 2.0 and UEFI is enabled But I cannot find the secure boot setting anywhere? Is there another name for this setting I have looked under Boot and Security and all other tabs in that section.

So my question is how do I find secure boot on this setup?

dupek · Jun 29, 2021

Do not worry about the secure boot. In my cmos is grey out. As long as you get the tpm enable, you are OK.

Disposable · Jun 29, 2021

Not according to the Health Check App? Still says I can't run Windows 11?

badrobot · Jun 29, 2021

it is usually under Security tab.

johnlgalt · Jun 29, 2021

On my MSI MMEG X570 GODLIKE, I had to change from CSM to UEFI, then Change Secure boot type to customer and then use the item that said something along the lines of "configure" or "Pre-load keys" and let it do it's thing and then reboot the machine and then go back into the UEFI FW settings and then I was able to change from Custom to Standard, and then also it would allow Secure Boot to be enabled.

I can't reboot currently, but I;'ll try too within the next half hour or so to get some pics to see if they can help.

Also, though, if your drives are MBR instead of GPT, the mobo might disable changing Secure boot, too. I think.

jbcarreon123 · Jun 29, 2021

Some on the Security tab - but some others on the Boot tab.

dupek · Jul 1, 2021

Secure boot should be under "Boot" on cmos.

BunnyJ · Jul 1, 2021

dupek said:
Secure boot should be under "Boot" on cmos.

it is on mine.. but keep in mind not all BIOS's are the same.. YMMV

ShamrockRig · Jul 1, 2021

Enable Secure Boot

Precautionary notice: If you haven't had this enabled before, your OS will not boot if your boot disk partition style is not GPT.

Enter the BIOS:
1. Reboot system and press Del repeatedly at system start.
2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
If you want to enable Secure Boot: "Advanced"-> "Settings"-> "Windows OS Configuration"-> look for "Windows 8/8.1 Feature" or "Windows 10 WHQL Support" and set it to "UEFI".
Save and exit.
Enter BIOS.
Go to "Advanced"-> "Settings"-> "Windows OS Configuration"->Secure Boot-> set "Secure Boot" to Enabled.
Save and exit.

This guide i believe is based on MSI boards for secure boot, Not sure if it'll help but thought id post it anyway, Found on another site

FreeBooter · Jul 1, 2021

Type msinfo32 into Start Menu from System Information --> Secure Boot State check to see if Secure Boot is enabled (On).

Gramps · Jul 1, 2021

Devlin1888 said:
Enable Secure Boot

This guide i believe is based on MSI boards for secure boot, Not sure if it'll help but thought id post it anyway, Found on another site

I have an MSI board and it is exactly the steps I followed.

Ghot · Jul 2, 2021

Disposable said:
I run Windows 10 64 bit with 32 gig ram latest build 21H1 19043.1081.
My MOBO is a Micro-Star B450M Pro-VDH MAX 8.0
AMD B.A0-AMD AGESA COMBO AM4V2PI 1.1.0.0

The Desktop PC this belongs to is less tan a year old, an 8 core: AMD Ryzen 7 1700X Eight-Core Processor 3.40 GHz

I have been into the BIOS and found ftpm and enabled 2.0 and UEFI is enabled But I cannot find the secure boot setting anywhere? Is there another name for this setting I have looked under Boot and Security and all other tabs in that section.

So my question is how do I find secure boot on this setup?

It looks like it's under: Settings > Advanced > Windows OS Configuration

Disposable · Jul 2, 2021

Thanks to all of you for your help! I think I have enabled Secure Boot, but how do I check now that Microsoft have removed the Health Check App?

Gramps · Jul 2, 2021

Disposable said:
Thanks to all of you for your help! I think I have enabled Secure Boot, but how do I check now that Microsoft have removed the Health Check App?

Right click Start, then Run. Type in msinfo32 and hit enter. System Info window will open and the secure boot status will be listed on the right.

Disposable · Jul 2, 2021

Thanks! All enabled OK!

A Guy · Jul 2, 2021

The 3rd party tool regularly updates

Release 2.3.0.3 · rcmaehl/WhyNotWin11

2.3.0.2+ and 2.3.1 are to be considered Security Patches. If you are on an older build, please update. Advisory Coming 7/9, Not Currently Exploited 2.3.0.3 comes with the following changes: Added...

github.com

A Guy

Ghot · Jul 2, 2021

A Guy said:
The 3rd party tool regularly updates

Release 2.3.0.3 · rcmaehl/WhyNotWin11

2.3.0.2+ and 2.3.1 are to be considered Security Patches. If you are on an older build, please update. Advisory Coming 7/9, Not Currently Exploited 2.3.0.3 comes with the following changes: Added...

github.com

A Guy

THIS

Disposable · Jul 2, 2021

That tool seems to be almost as useful as a wet paper hanky!
msinfo32 shows Secure Boot as being On, and UEFI - But this tool shows Secure Boot and UEFI as being disabled?

ShamrockRig · Jul 2, 2021

Mine seems to show everyything as expected on that program, Might be worth rechecking the bios incase you haven't saved it

Disposable · Jul 2, 2021

I can't download the tool, so I only get the online details. But Belarc Advisor (which is very accurate) says I have both Secure Boot and UEFI enabled and working!