Windows 10: I cannot get secure boot enabled. I have tried everything.

I have a home built computer with:AMD ryzen 5 3600 6 core processor 3.6GHz32 GB RAMNVIDIA GeForce RTX 2070 8GB graphics card64-bit operating systemHere is what I have tried so far in my boot settings:Fast boot - enabledNVMe support - enabledNext boot after AC power loss - normal bootAMI Native NVMe driver support - enabled-I attempted to disable CSM, but then the system would not boot up-Launch CSM - enabledBoot device control - UEFI and legacy OPROMBoot from network devices - UEFI driver firstBoot from storage devices - UEFI driver firstBoot from PCI-E expansion devices - UEFI driver firstU

:)

 

Windows 8 Secure Boot Feature: Not So Secure?

So Linux is switching to secure boot also? Or they have to because of UEFI?

 

Windows 8 Secure Boot Feature: Not So Secure?

• Linux
• Linux
• Linux
• Linux
• Oh and OSX

Here is a statement from a Kernal Developer at Red Hat:

I'm not sure this exploits the legacy BIOS but rather it exploits the legacy boot method on MBR drives, injecting a signed key before the OS boots, which you are correct in that it has nothing to do with Windows 8. And the simplest fix would just be to require boot drives use GPT when Secure Boot is enabled in UEFI.

 

Enable Secure Boot B550M DS3H AC

Hello Jose Luis Beltran Adame

Welcome to the Microsoft Community.

Can you tell me your motherboard model? Click Search on the taskbar and enter Device Manager.

To enable Secure Boot on your Gigabyte B550M DS3H AC motherboard, follow these steps:

1. Enter BIOS Setup:
   
   Restart your computer and press the Del key (or the key specified for your motherboard) repeatedly as soon as the system starts to boot, to enter the BIOS setup.
   
2. Navigate to the Boot Menu:
   
   Once in the BIOS, use the arrow keys to navigate. Look for a tab or section named Boot, Security, or something similar.
   
3. Enable Secure Boot:
   
   1. Inside the Boot or Security menu, find the Secure Boot option. It might be under a submenu, often labeled as Windows OS Configuration, Boot Mode Selection, or similar.
      
   2. Change the Secure Boot setting from Disabled to Enabled.
      
4. Change Boot Mode if Necessary:
   
   Make sure that the Boot Mode is set to UEFI and not Legacy or CSM (Compatibility Support Module). Secure Boot requires UEFI mode to be enabled.
   
5. Save and Exit:
   
   Save the changes and exit the BIOS. This is usually done by pressing the F10 key and selecting Yes to save the configuration and restart the computer.
   

This is the official detailed documentation:

Enable Secure Boot on Windows devices - Microsoft Intune | Microsoft Learn

If you cannot find the Secure Boot option, ensure that you have the latest firmware/BIOS version for your motherboard. Manufacturers sometimes update the BIOS to improve compatibility and add new features. You can check Gigabyte's official website for the latest BIOS version and instructions on how to update it.

In case the Secure Boot option still doesn't appear, it might be hidden or disabled due to another setting in the BIOS, such as a legacy boot mode or CSM compatibility mode being enabled. Make sure these are set correctly or disabled to allow Secure Boot to be enabled.

If you continue to face difficulties, consulting the motherboard's manual can provide more specific guidance, or contacting Gigabyte's support for assistance might be necessary.

Disclaimer: Please back up important data in advance before performing any actions that may cause data loss.

If there is anything not clear or I can't understand your problem, please do not hesitate to let me know.

Best Regards

| Microsoft Community Support Specialist