Question How do I go about enabling Secure Boot on my PC without issue?

[Cro55ed]

Up until recently, I found out that Secure Boot is being required by certain games. (The ones I know of are Valorant and a recent update was released requiring Secure Boot to be enabled). The update has a few folks up in a stir, and some have bricked their PC doing so.

PC Specs
Mobo: MSI Z370 Gaming M5 (on the latest BIOS version)
CPU: Core i7-8700
GPU: GTX 1080
RAM: 16GB

How should I go about doing this?

 

[Lutfij]

How should I go about doing this?
If you installed the OS with UEFI disabled, then enabling Secure Boot will warrant you to reinstall the OS with UEFI enabled. Considering you're on the latest BIOS version, see if your motherboard is currently in UEFI mode(CSM/legacy boot disabled), then you should be good to enable Secure Boot.

 

[Cro55ed]

How should I go about doing this?
If you installed the OS with UEFI disabled, then enabling Secure Boot will warrant you to reinstall the OS with UEFI enabled. Considering you're on the latest BIOS version, see if your motherboard is currently in UEFI mode(CSM/legacy boot disabled), then you should be good to enable Secure Boot.

Funny thing about that. The motherboard was initially set to UEFI + Legacy. I updated the MB firmware and then switched to UEFI. SSD that I installed windows 10 on years back, is GPT.

Does this mean that I'm in the good?

 

[Cro55ed]

To enable Secure Boot safely:

1. Enter BIOS/UEFI .
2. Set Boot Mode to UEFI).
3. Disable CSM .
4. Enable Secure Boot.
5. Save and exit.

Make sure your system uses a GPT disk and your OS supports UEFI.

In the case that it fails, and my PC BSODs or fails to post, will I have to reflash the BIOS or reinstall Windows?

 

[SkyNetRising]

In the case that it fails, and my PC BSODs or fails to post, will I have to reflash the BIOS or reinstall Windows?

You'll have to revert changes in BIOS or reset BIOS settings.
Reset can be done either from withing BIOS or with CMOS_RESET jumper onboard.
Consult your motherboard manual on, where to find CMOS_RESET jumper and how to operate it.

 

[SkyNetRising]

To enable Secure Boot safely:

1. Enter BIOS/UEFI .
2. Set Boot Mode to UEFI).
3. Disable CSM .
4. Enable Secure Boot.
5. Save and exit.

This usually is not enough.
You also have to enroll default platform keys, to enable Secure Boot.