[SOLVED] Can't enable secure boot on ASUS B550F wifi

[vondav]

Hi,

Through the day I've tried to get Windows 11 by meeting their requirements.
Enabled TPM and the only thing I'm missing now is the secure boot thing.

When choosing UEFI only on boot mode instead of Legacy, saving and booting, my drive isn't recognized as a UEFI unity.
I read about converting my drive (MP510 480Gb) in MBR to GPT was a possible solution, so tried mbr2gpt but gave me an error when trying to find
my drive too, so I made it with EaseUS Partition Master, my drive is now GPT. But the problem continues when changing to UEFI only.

Everything is updated, Windows 10, motherboar bios, nvme firmware.
I installed Windows two months ago with a flash drive from Microsoft's site.

I'd appreciate any help. Thank you in advance

My system specifications are:
ASUS B550F wifi
Ryzen 5 5600x
nvme MP510 480 Gb
16 Gb Ram 3200

 

[Koekieezz]

Hi,

Through the day I've tried to get Windows 11 by meeting their requirements.
Enabled TPM and the only thing I'm missing now is the secure boot thing.

When choosing UEFI only on boot mode instead of Legacy, saving and booting, my drive isn't recognized as a UEFI unity.
I read about converting my drive (MP510 480Gb) in MBR to GPT was a possible solution, so tried mbr2gpt but gave me an error when trying to find
my drive too, so I made it with EaseUS Partition Master, my drive is now GPT. But the problem continues when changing to UEFI only.

Everything is updated, Windows 10, motherboar bios, nvme firmware.
I installed Windows two months ago with a flash drive from Microsoft's site.

I'd appreciate any help. Thank you in advance

My system specifications are:
ASUS B550F wifi
Ryzen 5 5600x
nvme MP510 480 Gb
16 Gb Ram 3200

How to enable secure boot:

• Go to bios and go to secure boot
• Disable any csm and any legacy option
• save and exit then go to bios again
• go to secure boot, enable, and proceed install the keys
• after installing the keys go back to bios and see if the secure boot mode is on USER, and the option is only to remove/uninstall the keys, indicating that secure boot is installed. then save and exit.

Best method if you're already on Legacy windows is to backup the important files on C:, and proceeed clean install the windows 11.
After installing Windows 11 make sure you install amd chipset driver first, reboot, then install the rest of the driver. make sure your motherboard bios is the latest and loaded to optimized, save and exit, go to bios again and do the secure boot thing.

 

[vondav]

How to enable secure boot:

• Go to bios and go to secure boot
• Disable any csm and any legacy option
• save and exit then go to bios again
• go to secure boot, enable, and proceed install the keys
• after installing the keys go back to bios and see if the secure boot mode is on USER, and the option is only to remove/uninstall the keys, indicating that secure boot is installed. then save and exit.

Best method if you're already on Legacy windows is to backup the important files on C:, and proceeed clean install the windows 11.
After installing Windows 11 make sure you install amd chipset driver first, reboot, then install the rest of the driver. make sure your motherboard bios is the latest and loaded to optimized, save and exit, go to bios again and do the secure boot thing.

Thank you for your kind response. I tried the first method, but nothing happens and I'm still stuck on boot without the drive system being recognized.

I'm gonna try the second method and see I can make it work ;-)

 

[SkyNetRising]

I tried the first method, but nothing happens and I'm still stuck on boot without the drive system being recognized.

Can you show screenshot from Disk Management?
(upload to imgur.com and post link)

 

[vondav]

Can you show screenshot from Disk Management?
(upload to imgur.com and post link)

Sure thanks, I had to switch to Legacy on CMS to see my drive.

Here's my disk management screen shot

https://imgur.com/a/QTyRv2W

View: https://imgur.com/a/QTyRv2W

 

[SkyNetRising]

Windows OS drive is converted to GPT. But bootloader lives on 2TB HDD. Bootloader is small 579MB partition.
Currently your system is booting from 2TB HDD in legacy mode.

You have to create UEFI bootloader on GPT drive instead.
Execute following from elevated command prompt.
(if you get any errors, then stop immediately)

diskpart​

list disk​

select disk 1​

(select 447GB disk)​

list partition​

select partition 2​

(select 528MB partition. We're going to delete it, to free up some space)​

delete partition​

create partition efi size=500​

format fs=fat32 quick​

assign letter=H​

exit​

bcdboot C:\windows /s H: /f UEFI​

Before continuing, show screenshot with command output.
If everything has completed without errors, then next step is

boot into BIOS,​

set first boot device to Windows Boot Manager,​

remove 2TB HDD from boot order and​

boot into windows.​

How to Open the Command Prompt as Administrator in Windows 10

Much of the time, opening the Command Prompt as a regular user is all you need. Sometimes, though, you’ll need to open the Command Prompt as an administrator so that you can run commands that require administrative privileges.

www.howtogeek.com

 

[vondav]

Windows OS drive is converted to GPT. But bootloader lives on 2TB HDD. Bootloader is small 579MB partition.
Currently your system is booting from 2TB HDD in legacy mode.

You have to create UEFI bootloader on GPT drive instead.
Execute following from elevated command prompt.
(if you get any errors, then stop immediately)

diskpart​

list disk​

select disk 1​

(select 447GB disk)​

list partition​

select partition 2​

(select 528MB partition. We're going to delete it, to free up some space)​

delete partition​

create partition efi size=500​

format fs=fat32 quick​

assign letter=H​

exit​

bcdboot C:\windows /s H: /f UEFI​

Before continuing, show screenshot with command output.
If everything has completed without errors, then next step is

boot into BIOS,​

set first boot device to Windows Boot Manager,​

remove 2TB HDD from boot order and​

boot into windows.​

How to Open the Command Prompt as Administrator in Windows 10

Much of the time, opening the Command Prompt as a regular user is all you need. Sometimes, though, you’ll need to open the Command Prompt as an administrator so that you can run commands that require administrative privileges.

www.howtogeek.com

Thanks a lot for your kind help, and sorry for the late answe, I had work through these days and finally tried the steps above.
After writing this line ( bcdboot C:\windows /s H: /f UEFI ) the next screen appears. Any idea?

https://imgur.com/a/loVM8Xw

View: https://imgur.com/a/loVM8Xw


I also tried booting changing Legacy to Boot but BIOS still don't recognize System Drive even if it was converted.

 

[SkyNetRising]

bcdboot command didn't work properly.
Make sure EFI System partition has drive letter H: assigned before executing bcdboot command.

Show screenshot from Disk management and
command output of

diskpart​

list disk​

select disk 1​

list partition​

list volume​

 

[vondav]

bcdboot command didn't work properly.
Make sure EFI System partition has drive letter H: assigned before executing bcdboot command.

Show screenshot from Disk management and
command output of

diskpart​

list disk​

select disk 1​

list partition​

list volume​

Thanks for your fast answer, here they are

https://imgur.com/a/CH9sPjm

View: https://imgur.com/a/CH9sPjm

 

[SkyNetRising]

Drive letter H: is not assigned. Execute following from elevated command prompt.

diskpart​

list disk​

select disk 1​

list partition​

select partition 2​

assign letter=H​

exit​

bcdboot c:\windows /s h: /f UEFI /v​

If drive letter H: is used by some external drive, then use a different (free) drive letter.

Show screenshot of command output.

 

[vondav]

Drive letter H: is not assigned. Execute following from elevated command prompt.

diskpart​

list disk​

select disk 1​

list partition​

select partition 2​

assign letter=H​

exit​

bcdboot c:\windows /s h: /f UEFI /v​

If drive letter H: is used by some external drive, then use a different (free) drive letter.

Show screenshot of command output.

Yeah I noticed that, I was surprised because I received a confirmation that the letter was assigned.
I even tried again but got an error saying it has some kind of protection and then that the letter was free.
So, I used Minitool Partition Wizard to asign letter H, and merged unassigned and EFI partition.
Then run the bcdboot and voila! got this screeen

https://imgur.com/a/dTXxxyH

View: https://imgur.com/a/dTXxxyH

Once I booted my PC checked and Windows Boot Manager was there, changed boot to UEFI only and I run the Health Check program and I finally meet the requirements

https://imgur.com/a/LUutjvg

View: https://imgur.com/a/LUutjvg

I really appreciate your help, I was afraid of having to reinstall everything again. Thank you so much!

Cheers
Dan

 

[SkyNetRising]

Great. 👍

 

[Userneedshelp12]

SkyNetRising, I could really, really use your help or anyone else seeing this. So I seem to be having the same issue as voodoo but different scenario. After sometime I was finally able to update the bios on the motherboard, after doing that I tried the setup above, but like voodoo it would not see my disk, and I keep getting the error message when I run the pc health check "This PC doesn't currently meet windows 11 system requirements - This pc must support secure boot" after several, several failed attempts I gave up, but after seeing this thread there is hope ;-). So my system has 2 SSD's 1 with OS and the 2nd for my important docs which is secured via bitlocker, I am thinking to resolve my issue I need to try and do the same thing voodoo did, could you guide me or provide recommendations. Thank you in advance for your support.diskmanagement

 

[Userneedshelp12]

SkyNetRising, I could really, really use your help or anyone else seeing this. So I seem to be having the same issue as voodoo but different scenario. After sometime I was finally able to update the bios on the motherboard, after doing that I tried the setup above, but like voodoo it would not see my disk, and I keep getting the error message when I run the pc health check "This PC doesn't currently meet windows 11 system requirements - This pc must support secure boot" after several, several failed attempts I gave up, but after seeing this thread there is hope ;-). So my system has 2 SSD's 1 with OS and the 2nd for my important docs which is secured via bitlocker, I am thinking to resolve my issue I need to try and do the same thing voodoo did, could you guide me or provide recommendations. Thank you in advance for your support.diskmanagement

Wasn't sure how to paste the image here, so I added a link

 

[SkyNetRising]

SkyNetRising, I could really, really use your help or anyone else seeing this.

Please start your own topic.
Your situation is different. You have legacy boot system there.
I'd suggest getting rid of bitlocker first. If you don't have bitlocker keys backed up somewhere safe, you'll probably loose your data.

Use mbr2gpt utility to convert to UEFI boot system.
https://docs.microsoft.com/en-us/windows/deployment/mbr-to-gpt