Jump to content

Unable to enable Secure boot for Asus strix X470 I gaming

I am attempting to install win 11 on my fairly modern PC, but I am unable to satisfy PC health check. It thinks my Secure boot is disabled. Even Unsupported. I have updated my bios to the latest version and have tried to find any BIOS settings

that should have any effect. But no success. Does anybody have any idea what's the issue or what are the correct settings. Sys info lists BIOS mode as legacy ( i haven't figured out how to change that) and Secure boot as unsupported.

 

OS Name    Microsoft Windows 10 Pro
Version    10.0.19043 Build 19043
Processor    AMD Ryzen 7 3700X 8-Core Processor, 3600 Mhz, 8 Core(s), 16 Logical Processor(s)
BIOS Version/Date    American Megatrends Inc. 4603, 13/09/2021
SMBIOS Version    3.2
Embedded Controller Version    255.255
BIOS Mode    Legacy
BaseBoard Manufacturer    ASUSTeK COMPUTER INC.
BaseBoard Product    ROG STRIX X470-I GAMING
BaseBoard Version    Rev 1.xx
Platform Role    Desktop
Secure Boot State    Unsupported
PCR7 Configuration    Binding Not Possible

 

Link to comment
Share on other sites

Link to post
Share on other sites

Check out the video I found on YouTube.  I believe it will answer your questions.

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

Unfortunately it does not help.

I the video he has more options. He has a Platform key state.

1623674272_videosetings.thumb.png.46237f5026055c2d013fbe193939e397.png

 

For me it just says "Enabled" as if all is good. I have tried installing and removing the keys.

1370872412_mysetings.png.33fbc206a1e310bb9a6e46f7db41f2d3.png 

 

But the health check still complains!

image.png.bf4d8ab4a739a6ef589720d19ee4845a.png

Link to comment
Share on other sites

Link to post
Share on other sites

I figured it out.

Actually I had installed my windows 10 in Legacy BIOS mode. It is not the same as having the BIOS set to UEFI. Although If your windows is installed in UEFI mode, then the BIOS has to be in UEFI mode aswell for the PC to boot successfully.

 

Anyways it is possible to convert your windows installation to UEFI without reinstalling Windows. There is a tool for this  "Windows\System32\MBR2GPT.EXE". It converts a disk from the Master Boot Record (MBR) to the GUID Partition Table (GPT) partition style without modifying or deleting data on the disk.

 

To convert my disk I opened the Console as administrator and typed in two commands.

"mbr2gpt /validate /allowFullOS" This just validated that it works

"mbr2gpt /convert /allowFullOS" This converted my disk.

Now I have a "BIOS mode UEFI" windows installation and the secure boot feature is ON. Also the PC health check sais that my PC meets windows 11 requirements.

 

Yay.

Link to comment
Share on other sites

Link to post
Share on other sites

  • 1 year later...

I tried that but I keep getting "Invalid Arguments."

Link to comment
Share on other sites

Link to post
Share on other sites

From what I understand "Invalid arguments" generally just means that you have typed something wrong.
*Did you remove the quotation marks from the commands? ("") They need to be removed.
*Did you leave the spaces before the forward slashes. They need to stay there.

*Although I believe you followed my previous suggestion, just make sure you run CMD as administrator.

Link to comment
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×