Question How to enable security boot on Gigabyte Z390 Aorus Xtreme before upgrading to Windows 11?

Toggle sidebar Toggle sidebar
M

modeonoff

Distinguished
Jul 16, 2017
1,402
18
19,295
Hello, I went to the BIOS but there is no security nor boot tab. It has M.I.T., System, BIOS, Peripherals, Chipset, Power and Save & Exit only.

Also, am I supposed to enable CSM Support and PTT? Both are disabled by default.
I enabled Trusted Computing yesterday already.
 
Sort by date Sort by votes

Info - How to enable Secure Boot on AMD based Gigabyte motherboards

Note: If you are just enabling it to install Windows 11, its is not necessary. Windows 11 just needs PC to be able to run Secure boot, it doesn't enforce it. Valorant is a different story credit to COLGeek for instructions Steps to enable (all AMD-based Gigabyte mobos) Secure Boot. Make sure...
forums.tomshardware.com forums.tomshardware.com

need to make sure your drive is GPT before you swap.

looks at who asked. oh hi
 
  • Like
Reactions: Dark Lord of Tech
Upvote 0 Downvote
sorry, im used to seeing Amd Gigabyte boards asking that questions

So do you have the latest BIOS on motherboard? its possible boot tab will show up then as a video for the Z390 Aorus master shows a boot tab

since you have csm off I have to guess the boot drive is GPT. That makes it easier.

Secure boot
If you upgrade from win 10 to 11, no, its not needed
If you clean install win 11 it is probably needed.
 
  • Like
Reactions: modeonoff
Upvote 1 Downvote
Intel® Platform Trust Technology (Intel® PTT) - Intel® Platform Trust Technology (Intel® PTT) offers the capabilities of discrete TPM 2.0. Intel PTT is a platform functionality for credential storage and key management used by Windows 8* , Windows® 10 and Windows* 11. Intel PTT supports BitLocker* for hard drive encryption and supports all Microsoft requirements for firmware Trusted Platform Module (fTPM) 2.0.
Click to expand...
https://www.intel.com.au/content/www/au/en/support/articles/000007452/intel-nuc.html
Every search for Trusted computing leads to PTT
AFAIK it should be on - https://www.thurrott.com/forums/microsoft/windows/thread/how-to-enable-tpm-on-gigabyte-z390-boards

leave it as is and see how you go.

2nd post down here has your motherboard - https://www.tenforums.com/tutorials/36454-verify-trusted-platform-module-tpm-chip-windows-pc-5.html
 
  • Like
Reactions: modeonoff
Upvote 0 Downvote
Thanks. There is something wrong. Yesterday things were going well and I expected that Windows 11 would be available today.

Then, I enabled PTT and Secure Boot via disabling CSM. Windows 10 and Health Check said that my system does not satisfy the requirements for Windows 11. Secure boot not supported. I enabled CSM again (PTT and Trusted Computing enabled) and Health Check said my PC satisfies the requirement for the update. Even strange is that after enabling CSM which disables Secure Boot, Health Check said that my PC supports secure boot.
 
Upvote 0 Downvote
Colif said:
well, that explains that then
Wonder if that counts for clean installs too.
Click to expand...
yup it counts

what is needed for win 11 is:
enabled virtualisation
enabled TPM 2.0
secure boot needs to be available, that means bios mode needs to be set as UEFI , boot drive needs to be on GPT
CSM on or off is mainboard specific, basicly if CSM is enabled, storage needs to be in UEFI, that way measured boot will be still running (atleast something, but enough for win11 to pass check)
 
  • Like
Reactions: Colif
Upvote 0 Downvote
You must log in or register to reply here.

TRENDING THREADS

Latest posts

Moderators online

Share this page

COMPANY
RESOURCES
FOLLOW
Top Bottom