Question Secure Boot turned off after updating the BIOS ?

[Cyrillium]

Hello All,

So I recently updated the BIOS to F7c on my Gigabyte GA-A320M-S2H (rev 3.x) motherboard.
https://www.gigabyte.com/Motherboard/GA-A320M-S2H-rev-3x/support#support-dl-driver

and after booting to Windows 11 Pro, the Secure Boot went off. Tried resetting the bios (software side) and TPM clear and none of it worked. Haven't tried clearing the CMOS (short pin or remove battery).
Anyone else had the same issue?

System info:
BIOS Mode - UEFI
OS: Windows 11 Version - 10.0.22631 Build 22631
Windows Defender Application Control user mode policy - Off

 

[Lutfij]

Welcome to the forums, newcomer!

Ideally, after you've verified that the BIOS was flashed to the latest version, you're told to clear the CMOS. In order to do this, disconnect from the wall and display, then remove the CMOS battery, press and hold down the power button for 30secs and then replace the battery after 30mins.

 

[Cyrillium]

Thanks Lutfij for the welcome and advice,

It's my 1st time to hear a hardware bios reset (ditto, unplug, short pin or remove battery - I prefer the latter) after successful flash. Will do it and update over the weekend coz its a work pc.

By the way, in clearing TPM using software (pc will reboot if TPM clear selected and save changes), on logon Windows says PIN cannot be used due to something... hardware security not sure...can't recall.
I had to use my MS account password to reset PIN...Hopefully it doesn't escalate to something worse.

Have a great day! 😊

 

[Cyrillium]

Hi Lutfij,
Apologies for the late reply.
I did hard reset the bios and it only reset the time. New version came out and still the same thing - secure boot off.
Gonna leave it like that for now.
Thanks

 

[SkyNetRising]

I did hard reset the bios and it only reset the time. New version came out and still the same thing - secure boot off.
Gonna leave it like that for now.

You have to enroll platform keys, to enable secure boot.
Explained in this video.

View: https://www.youtube.com/watch?v=03Zjo-RyYbI

 

[Cyrillium]

Thanks 👍🏻
Btw for another topic, how bad is getting infected with rhc.exe? Twas a bitcoin mining app as per lookup. Deleted some folders in
C:\Users\johnc\AppData\Roaming
and a scheduled task in task scheduler...do I have to format all my drives?

 

[SkyNetRising]

Malwarebytes should be able to clean it.

 

[Cyrillium]

Sentinel One company installed antivirus found none. Windows defender also none. Before that (file and task deletion) in task manager at least 5 or more php.exe process runs causing total slow down. For now pc is fine, I guess 🤔
Edit, gonna check my Trend Micro expired subscription for free scan