Question Why do I need to CLR CMOS everytime I shutdown/restart my PC when Secure Boot is enabled ?

[awpertunist]

I know there are other questions like this here and I have gone through all of them. It feels like my case is unique.

So, I have this problem when I have secure boot enabled. I need to CLR CMOS for it to boot because without that the PC is stuck on BIOS screen with the VGA LED turned on on my motherboard. The only way to fix it is to use the CLR CMOS on my motherboard after which the PC works fine and Secure Boot is still enabled. It only disables Trusted Platform Technology [TPM] and X.M.P which I can enable without any problems by entering bios.

And the same thing happens after every boot. The only way it'd let me in my bios or boot properly is if I use CLR CMOS and I don't get it because clearing cmos doesn't disable secure boot for me and YES when I disable secure boot, I can boot and reboot as many times I want and it doesn't get stuck on the bios screen.
Just to clear, this wasn't always the case. The PC is almost 7 years old and this has only been happening for a few months now.

My specs : ​

• AORUS Z370 Ultra gaming 2.0 [Bios version F15 which is the latest for my mobo]
• Intel i5-8600K
• Nvidia GTX 1060 6 GB
• Deepcool 450W PSU
• 2 x 16 GB Corsair Vengeance @ 3000 MHz
• XPG 1 TB NVME SSD

Things that I have already tried/checked :

1. Replaced CMOS battery.
2. Confirmed that my BIOS is set to UEFI and my SSD is GPT.
3. Reseated GPU and updated drivers [Also did a clean install with DDU].
4. Tried all variations to rule out RAM [single channel in each slot for both sticks].
5. Reflashed BIOS.
6. Replaced PSU.
7. Tried running my PC without the APU.
8. Switching from Standard to custom in Secure boot.
9. Restoring keys/Reset to setup in secure boot.

Please help me. I need secure boot and tpm enabled for valorant.

 

[CountMike]

I know there are other questions like this here and I have gone through all of them. It feels like my case is unique.
So, I have this problem when I have secure boot enabled. I need to CLR CMOS for it to boot because without that the PC is stuck on BIOS screen with the VGA LED turned on on my motherboard. The only way to fix it is to use the CLR CMOS on my motherboard after which the PC works fine and secure boot is still enabled. It only disables Platform Trust Technology [TPM] and X.M.P which I can enable without any problems by entering bios. And the same thing happens after every boot. The only way it'd let me in my bios or boot properly is if I use CLR CMOS and I don't get it because clearing cmos doesn't disable secure boot for me and YES when I disable secure boot, I can boot and reboot as many times I want and it doesn't get stuck on the bios screen.
Just to clear, this wasn't always the case. The PC is almost 7 years old and this has only been happening for a few months now.

My specs : ​

• AORUS Z370 Ultra gaming 2.0 [Bios version F15 which is the latest for my mobo]
• Intel i5-8600K
• Nvidia GTX 1060 6 GB
• Deepcool 450W PSU
• 2 x 16 GB Corsair Vengeance @ 3000 MHz
• XPG 1 TB NVME SSD

Things that I have already tried/checked :

1. Replaced CMOS battery.
2. Confirmed that my BIOS is set to UEFI and my SSD is GPT.
3. Reseated GPU and updated drivers [Also did a clean install with DDU].
4. Tried all variations to rule out RAM [single channel in each slot for both sticks].
5. Reflashed BIOS.
6. Replaced PSU.
7. Tried running my PC without the APU.
8. Switching from Standard to custom in Secure boot.
9. Restoring keys/Reset to setup in secure boot.

Please help me. I need secure boot and tpm enabled for valorant.

You should be able to disable only Secure BOOT as W11 doesn't mandate it to be enabled, just for that option to exist.

 

[awpertunist]

As I've mentioned above, I do want to keep secure boot enabled to be able to play valorant.

You should be able to disable only Secure BOOT as W11 doesn't mandate it to be enabled, just for that option to exist.

 

[CountMike]

As I've mentioned above, I do want to keep secure boot enabled to be able to play valorant.

So disable it in BIOS and save, if it's not saving your CMOS battery may be under 3v and should be replaced.

 

[awpertunist]

So disable it in BIOS and save, if it's not saving your CMOS battery may be under 3v and should be replaced.

what? I'm saying I want to keep secure BOOT on because I can't play valorant if I disable secure boot.
I just want the PC to work fine with secure boot.

My CMOS battery is 3V and I already tried replacing it with a new one

 

[Colif]

The PC is almost 7 years old and this has only been happening for a few months now.

it could be age. If replacing CMOS battery doesn't help it remember, it might be the BIOS chip itself. Pretty sure you can't replace those easily.

Did you change anything around time it started?

 

[awpertunist]

it could be age. If replacing CMOS battery doesn't help it remember, it might be the BIOS chip itself. Pretty sure you can't replace those easily.

Did you change anything around time it started?

Is it possible that the bios would only fail when secure boot is on? It works when I clear CMOS and apply the same settings as before. I don't understand ;-;
I do have dual bios. I am unable to switch to the backup bios with the methods I have found online :
1. Switching off the computer and then holding the power button till the computer starts booting and turns off and then pressing the power button again
2. Switching off the computer and holding the power and restart button together for 10 seconds.

I couldn't try shorting the bios pins because I don't have jumper cables. I have a paper clip but I think that would be risky.


Over all I have made a few hardware changes in this system over the years : New PSU after the old one started giving problems and I also got a new SSD when my old HDD got corrupted but the problem started months after all the changes

 

[Colif]

The backup bios is just there in case the original gets corrupted. If that were to happen, it is meant to kick in and flash bios with the copy. You can't as such boot from it.

Might be terminal if you tried everything else. Windows can't make bios forget settings. So its hardware of some kind.

you might want to sleep PC instead of shutting off, or does it do this on a restart?

 

[awpertunist]

The backup bios is just there in case the original gets corrupted. If that were to happen, it is meant to kick in and flash bios with the copy. You can't as such boot from it.

Might be terminal if you tried everything else. Windows can't make bios forget settings. So its hardware of some kind.

Do you think it's my motherboard then? I don't have access to a spare motherboard to test

 

[Colif]

it sure looks like its the motherboard. I don't think anything else could cause it.

it can happen, its 7 years old. Parts can die randomly the more you use them.. the older they get.

might be time for an upgrade. Not sure you could get similar boards now, and would need to reinstall windows anyway.

 

[CountMike]

As I've mentioned above, I do want to keep secure boot enabled to be able to play valorant.

TPM is requirement, not secure boot.

 

[Colif]

I am pretty sure valorant needs secure boot on, its been a problem for ages

You could ask about the behavior on here: https://forum.giga-byte.co.uk/index.php
the steps are a little odd.

So its fine if you don't have secure boot enabled? You just can't play game?

 

[awpertunist]

I am pretty sure valorant needs secure boot on, its been a problem for ages

You could ask about the behavior on here: https://forum.giga-byte.co.uk/index.php
the steps are a little odd.

So its fine if you don't have secure boot enabled? You just can't play game?

Yes the PC works normally if I don't have it enabled.
I can still keep it on and play the game but I need to clear CMOS before every boot.
It doesn't disable secure boot. It only disables X.M.P and TPM which I can then enable and use the computer normally until the next boot

 

[awpertunist]

The backup bios is just there in case the original gets corrupted. If that were to happen, it is meant to kick in and flash bios with the copy. You can't as such boot from it.

Might be terminal if you tried everything else. Windows can't make bios forget settings. So its hardware of some kind.

you might want to sleep PC instead of shutting off, or does it do this on a restart?

It does this for for every boot and restart.

 

[Colif]

Google AI suggests:

Check the Platform Mode
If Platform Mode is set to Setup Mode, change it to User Mode. You can do this by opening the BIOS, clicking Restore Factory Keys, and then setting the Secure Boot Status to Enabled

thats one thing that can stop it booting in secure mode.

Its not a typical problem.

finds another of your posts - https://superuser.com/questions/186...-i-start-restart-my-pc-with-secure-boot-enabl

i found one guy whose PC stopped at boot with red gpu led but his problem was csm related, not uefi boot like you have.

 

[awpertunist]

Google AI suggests:

thats one thing that can stop it booting in secure mode.

Its not a typical problem.

finds another of your posts - https://superuser.com/questions/186...-i-start-restart-my-pc-with-secure-boot-enabl

i found one guy whose PC stopped at boot with red gpu led but his problem was csm related, not uefi boot like you have.

Platform mode is set to user.

What fixed the problem for that guy? Was it the motherboard?

 

[Roland Of Gilead]

I couldn't try shorting the bios pins because I don't have jumper cables. I have a paper clip but I think that would be risky.

This is fine to do. You can use a flathead screwdriver to short the pins. Remove the battery first, then short the pins, then put the battery back in. Just to be sure it's not the CMOS.

Obviously, your system needs to be disconnected from the power outlet, and the system drained of power by holding down the power button for 15 seconds or so (whilst power cord is out)

 

[awpertunist]

This is fine to do. You can use a flathead screwdriver to short the pins. Remove the battery first, then short the pins, then put the battery back in. Just to be sure it's not the CMOS.

Obviously, your system needs to be disconnected from the power outlet, and the system drained of power by holding down the power button for 15 seconds or so (whilst power cord is out)

Are you saying I should try the CLR CMOS jumper thing again with the battery out and power drained?

 

[Roland Of Gilead]

Are you saying I should try the CLR CMOS jumper thing again with the battery out and power drained?

Yes, no harm ruling it out completely.