Question Why do I need to CLR CMOS everytime I shutdown/restart my PC when Secure Boot is enabled ?

awpertunist

Prominent
Oct 18, 2023
13
0
510
I know there are other questions like this here and I have gone through all of them. It feels like my case is unique.

So, I have this problem when I have secure boot enabled. I need to CLR CMOS for it to boot because without that the PC is stuck on BIOS screen with the VGA LED turned on on my motherboard. The only way to fix it is to use the CLR CMOS on my motherboard after which the PC works fine and Secure Boot is still enabled. It only disables Trusted Platform Technology [TPM] and X.M.P which I can enable without any problems by entering bios.

And the same thing happens after every boot. The only way it'd let me in my bios or boot properly is if I use CLR CMOS and I don't get it because clearing cmos doesn't disable secure boot for me and YES when I disable secure boot, I can boot and reboot as many times I want and it doesn't get stuck on the bios screen.
Just to clear, this wasn't always the case. The PC is almost 7 years old and this has only been happening for a few months now.

My specs :
  • AORUS Z370 Ultra gaming 2.0 [Bios version F15 which is the latest for my mobo]
  • Intel i5-8600K
  • Nvidia GTX 1060 6 GB
  • Deepcool 450W PSU
  • 2 x 16 GB Corsair Vengeance @ 3000 MHz
  • XPG 1 TB NVME SSD
Things that I have already tried/checked :
  1. Replaced CMOS battery.
  2. Confirmed that my BIOS is set to UEFI and my SSD is GPT.
  3. Reseated GPU and updated drivers [Also did a clean install with DDU].
  4. Tried all variations to rule out RAM [single channel in each slot for both sticks].
  5. Reflashed BIOS.
  6. Replaced PSU.
  7. Tried running my PC without the APU.
  8. Switching from Standard to custom in Secure boot.
  9. Restoring keys/Reset to setup in secure boot.
Please help me. I need secure boot and tpm enabled for valorant.
 
I know there are other questions like this here and I have gone through all of them. It feels like my case is unique.
So, I have this problem when I have secure boot enabled. I need to CLR CMOS for it to boot because without that the PC is stuck on BIOS screen with the VGA LED turned on on my motherboard. The only way to fix it is to use the CLR CMOS on my motherboard after which the PC works fine and secure boot is still enabled. It only disables Platform Trust Technology [TPM] and X.M.P which I can enable without any problems by entering bios. And the same thing happens after every boot. The only way it'd let me in my bios or boot properly is if I use CLR CMOS and I don't get it because clearing cmos doesn't disable secure boot for me and YES when I disable secure boot, I can boot and reboot as many times I want and it doesn't get stuck on the bios screen.
Just to clear, this wasn't always the case. The PC is almost 7 years old and this has only been happening for a few months now.

My specs :
  • AORUS Z370 Ultra gaming 2.0 [Bios version F15 which is the latest for my mobo]
  • Intel i5-8600K
  • Nvidia GTX 1060 6 GB
  • Deepcool 450W PSU
  • 2 x 16 GB Corsair Vengeance @ 3000 MHz
  • XPG 1 TB NVME SSD
Things that I have already tried/checked :
  1. Replaced CMOS battery.
  2. Confirmed that my BIOS is set to UEFI and my SSD is GPT.
  3. Reseated GPU and updated drivers [Also did a clean install with DDU].
  4. Tried all variations to rule out RAM [single channel in each slot for both sticks].
  5. Reflashed BIOS.
  6. Replaced PSU.
  7. Tried running my PC without the APU.
  8. Switching from Standard to custom in Secure boot.
  9. Restoring keys/Reset to setup in secure boot.
Please help me. I need secure boot and tpm enabled for valorant.
You should be able to disable only Secure BOOT as W11 doesn't mandate it to be enabled, just for that option to exist.
 

awpertunist

Prominent
Oct 18, 2023
13
0
510
So disable it in BIOS and save, if it's not saving your CMOS battery may be under 3v and should be replaced.
what? I'm saying I want to keep secure BOOT on because I can't play valorant if I disable secure boot.
I just want the PC to work fine with secure boot.

My CMOS battery is 3V and I already tried replacing it with a new one
 

awpertunist

Prominent
Oct 18, 2023
13
0
510
it could be age. If replacing CMOS battery doesn't help it remember, it might be the BIOS chip itself. Pretty sure you can't replace those easily.

Did you change anything around time it started?
Is it possible that the bios would only fail when secure boot is on? It works when I clear CMOS and apply the same settings as before. I don't understand ;-;
I do have dual bios. I am unable to switch to the backup bios with the methods I have found online :
1. Switching off the computer and then holding the power button till the computer starts booting and turns off and then pressing the power button again
2. Switching off the computer and holding the power and restart button together for 10 seconds.

I couldn't try shorting the bios pins because I don't have jumper cables. I have a paper clip but I think that would be risky.


Over all I have made a few hardware changes in this system over the years : New PSU after the old one started giving problems and I also got a new SSD when my old HDD got corrupted but the problem started months after all the changes
 
Last edited:

Colif

Win 11 Master
Moderator
The backup bios is just there in case the original gets corrupted. If that were to happen, it is meant to kick in and flash bios with the copy. You can't as such boot from it.

Might be terminal if you tried everything else. Windows can't make bios forget settings. So its hardware of some kind.

you might want to sleep PC instead of shutting off, or does it do this on a restart?
 

awpertunist

Prominent
Oct 18, 2023
13
0
510
The backup bios is just there in case the original gets corrupted. If that were to happen, it is meant to kick in and flash bios with the copy. You can't as such boot from it.

Might be terminal if you tried everything else. Windows can't make bios forget settings. So its hardware of some kind.
Do you think it's my motherboard then? I don't have access to a spare motherboard to test