[SOLVED] Enable Secure boot question for Windows 10 Running on Asrock B450 Steel Legend

[simtcr]

Hello,

I am currently running Windows 10 on Asrock B450 steel legend motherboard with AMD Ryzen 2400G and 16 GB DDR4 Ram.
When I run, PC Health Check (windows 11 compatibility check app from microsoft) and check, I get message " The PC Must support secure boot"
So I followed https://docs.microsoft.com/en-us/mem/intune/user-help/you-need-to-enable-secure-boot-windows

1. Go to Start.
2. In the search bar, type msinfo32 and press enter.
3. System Information opens. Select System Summary.
4. On the right-side of the screen, look at BIOS Mode and Secure Boot State. If Bios Mode shows UEFI, and Secure Boot State shows Off, then Secure Boot is disabled.

And I see mine shows BIOS Mode as Legacy and Secure Boot State as Unsupported.

I do see option in BIOS->Security->Secure Boot->Enabled

Why Windows 10 still not detecting Secure Boot?

 

[drea.drechsler]

...

I do see option in BIOS->Security->Secure Boot->Enabled

Why Windows 10 still not detecting Secure Boot?

I've had that problem before too. What I did was disable secure boot and restart, then re-enable it and enroll all factory default keys again. It took a couple times doing it for it to work.

Also make sure your system drive (at least) is converted to GPT, not MBR. If BIOS let you put it in secure mode it should be, but double check that anyway. Do that in Drive Manager window, right click on the system disk and select PROPERTIES then the VOLUMES tab to see Partition style.

You can also go to Device Security applet (type it in Cortana search) to see if it's using secure boot. After restarting into windows give it a bit of time to detect and set up it's security before checking.

 

[simtcr]

I've had that problem before too. What I did was disable secure boot and restart, then re-enable it and enroll all factory default keys again. It took a couple times doing it for it to work.

Also make sure your system drive (at least) is converted to GPT, not MBR. If BIOS let you put it in secure mode it should be, but double check that anyway. Do that in Drive Manager window, right click on the system disk and select PROPERTIES then the VOLUMES tab to see Partition style.

You can also go to Device Security applet (type it in Cortana search) to see if it's using secure boot. After restarting into windows give it a bit of time to detect and set up it's security before checking.

In BIOS, I see that secure boot shows enabled.
In Disk Management in Windows 10 the drive which I installed Windows properties shows Partition Style as Master Boor Record (MBR)

To convert it to GPT, can I follow https://www.wintips.org/how-to-change-legacy-to-uefi-without-reinstall-windows-10/#method-1 ?
Basically on a command prompt run mbr2gpt.exe /convert /allowfullOS

 

[drea.drechsler]

In BIOS, I see that secure boot shows enabled.
In Disk Management in Windows 10 the drive which I installed Windows properties shows Partition Style as Master Boor Record (MBR)

To convert it to GPT, can I follow https://www.wintips.org/how-to-change-legacy-to-uefi-without-reinstall-windows-10/#method-1 ?
Basically on a command prompt run mbr2gpt.exe /convert /allowfullOS

I've never done it that way, but that (mbr2gpt.exe) is the Microsoft command line app to do it. To gain confidence in it you can check this site https://www.windowscentral.com/how-convert-mbr-disk-gpt-move-bios-uefi-windows-10 and compare to see if it's similar. Keep in mind they may be using slightly different switches to run the program, you can usually type in mbr2gpt.exe /help to get a listing of the allowed switches and what they do.

What I used was EaseUS Partion Master (https://www.easeus.com/partition-manager/). When I did it the trial (free) version would allow converting MBR to GPT, but not GPT to MBR. Hopefully it still does.

 

[simtcr]

I've never done it that way, but that (mbr2gpt.exe) is the Microsoft command line app to do it. To gain confidence in it you can check this site https://www.windowscentral.com/how-convert-mbr-disk-gpt-move-bios-uefi-windows-10 and compare to see if it's similar. Keep in mind they may be using slightly different switches to run the program, you can usually type in mbr2gpt.exe /help to get a listing of the allowed switches and what they do.

What I used was EaseUS Partion Master (https://www.easeus.com/partition-manager/). When I did it the trial (free) version would allow converting MBR to GPT, but not GPT to MBR. Hopefully it still does.

I ran the command and disk got converted. Shutdown and restarted. It Booted fine.
Went to Disk Management and checked Disk properties to confirm that now it shows Partition Style as GPT
Ran msinfo32 and under System Summary, BIOS Mode shows UEFI and Secure Boot State shows on.

Again ran PC Health Check (windows 11 compatibility check app from microsoft) and check, I got the message "The processor isn't supported for Window 11" :-(
AMD Ryzen 2400G may not be supported then. So I guess , I ran out of luck.

But thank you for helping me.

 

[drea.drechsler]

I ran the command and disk got converted. Shutdown and restarted. It Booted fine.
Went to Disk Management and checked Disk properties to confirm that now it shows Partition Style as GPT
Ran msinfo32 and under System Summary, BIOS Mode shows UEFI and Secure Boot State shows on.

Again ran PC Health Check (windows 11 compatibility check app from microsoft) and check, I got the message "The processor isn't supported for Window 11" :-(
AMD Ryzen 2400G may not be supported then. So I guess , I ran out of luck.

But thank you for helping me.

Bummer....

I'd read MS wasn't going to support "older APU's" with the new release but I kind of assumed they meant the older bulldozer/excavator architecture ones, maybe up to Bristol Ridge. Not anything in the Ryzen generation.

At any rate...go read some of the articles about this. It seems there's a "soft" floor and a "hard floor" for what will or won't work. With a soft-floor limitation it may say it doesn't work but when you actually install it you'll be told it's not advised to use it...but it installs anyway. So if you wanted to try it out go ahead and try to run the install when the time comes. Worst case would be performance stinks and you go get a 5600G or 5700G APU, if you can swing it.

LOL...I just ran it on my Ryzen 1700 system running on a B450 motherboard and it just said the same thing..."The processor isn't supported...".

I can see this is going to be a real fubar situation when MS starts the roll-outs. A LOT of very miffed people.

 

[simtcr]

Bummer....

I'd read MS wasn't going to support "older APU's" with the new release but I kind of assumed they meant the older bulldozer/excavator architecture ones, maybe up to Bristol Ridge. Not anything in the Ryzen generation.

At any rate...go read some of the articles about this. It seems there's a "soft" floor and a "hard floor" for what will or won't work. With a soft-floor limitation it may say it doesn't work but when you actually install it you'll be told it's not advised to use it...but it installs anyway. So if you wanted to try it out go ahead and try to run the install when the time comes. Worst case would be performance stinks and you go get a 5600G or 5700G APU, if you can swing it.

LOL...I just ran it on my Ryzen 1700 system running on a B450 motherboard and it just said the same thing..."The processor isn't supported...".

I can see this is going to be a real fubar situation when MS starts the roll-outs. A LOT of very miffed people.

Any way there is few more months for Windows 11 to come up. Will see if a way, I could install Win 11 with warnings whenever its ready.

I already have a dedicated GPU (GTX 1660 Super). But before that, I had procured 2400G.
So if have to upgrade, I will look for a better CPU.