Windows 10: Enabling Secure Boot

Hello, I have been wanting to enable secure boot, but I've read everywhere I should firstly make sure my drive is in GPT. I know this might sound very stupid, but does a DVD drive in the MBR partition cause any problems? I read that it's only the windows install drive partition style that matters and it wouldn't make sense for the DVD drive to cause conflict, but I'm asking this because in the past I have sadly bricked my whole PC while trying to enable secure boot and after doing some research now, I suspect that my older drive wasn't GPT and that caused the damage. I had to replace my mother

:)

 

Windows 8 Secure Boot Feature: Not So Secure?

So Linux is switching to secure boot also? Or they have to because of UEFI?

 

Windows 8 Secure Boot Feature: Not So Secure?

• Linux
• Linux
• Linux
• Linux
• Oh and OSX

Here is a statement from a Kernal Developer at Red Hat:

I'm not sure this exploits the legacy BIOS but rather it exploits the legacy boot method on MBR drives, injecting a signed key before the OS boots, which you are correct in that it has nothing to do with Windows 8. And the simplest fix would just be to require boot drives use GPT when Secure Boot is enabled in UEFI.

 

Enable Secure Boot B550M DS3H AC

Hello Jose Luis Beltran Adame

Welcome to the Microsoft Community.

Can you tell me your motherboard model? Click Search on the taskbar and enter Device Manager.

To enable Secure Boot on your Gigabyte B550M DS3H AC motherboard, follow these steps:

1. Enter BIOS Setup:
   
   Restart your computer and press the Del key (or the key specified for your motherboard) repeatedly as soon as the system starts to boot, to enter the BIOS setup.
   
2. Navigate to the Boot Menu:
   
   Once in the BIOS, use the arrow keys to navigate. Look for a tab or section named Boot, Security, or something similar.
   
3. Enable Secure Boot:
   
   1. Inside the Boot or Security menu, find the Secure Boot option. It might be under a submenu, often labeled as Windows OS Configuration, Boot Mode Selection, or similar.
      
   2. Change the Secure Boot setting from Disabled to Enabled.
      
4. Change Boot Mode if Necessary:
   
   Make sure that the Boot Mode is set to UEFI and not Legacy or CSM (Compatibility Support Module). Secure Boot requires UEFI mode to be enabled.
   
5. Save and Exit:
   
   Save the changes and exit the BIOS. This is usually done by pressing the F10 key and selecting Yes to save the configuration and restart the computer.
   

This is the official detailed documentation:

Enable Secure Boot on Windows devices - Microsoft Intune | Microsoft Learn

If you cannot find the Secure Boot option, ensure that you have the latest firmware/BIOS version for your motherboard. Manufacturers sometimes update the BIOS to improve compatibility and add new features. You can check Gigabyte's official website for the latest BIOS version and instructions on how to update it.

In case the Secure Boot option still doesn't appear, it might be hidden or disabled due to another setting in the BIOS, such as a legacy boot mode or CSM compatibility mode being enabled. Make sure these are set correctly or disabled to allow Secure Boot to be enabled.

If you continue to face difficulties, consulting the motherboard's manual can provide more specific guidance, or contacting Gigabyte's support for assistance might be necessary.

Disclaimer: Please back up important data in advance before performing any actions that may cause data loss.

If there is anything not clear or I can't understand your problem, please do not hesitate to let me know.

Best Regards

| Microsoft Community Support Specialist