How to Enable TPM 2.0 and Secure Boot [Windows 11]
HTML-код
- Опубликовано: 22 авг 2024
- Here is a complete video tutorial on How to Enable TPM 2.0 and Secure Boot on your Windows 11 PC. Follow this guide to check if TPM is installed on your PC, how to enable it if it is, then also enable Secure Boot.
TPM 2.0 is a requirement for installing Windows 11, therefore, before proceeding with its installation, make sure you activate it.
Secure Boot enables your PC protection against viruses that can load before the operating system starts.
This tutorial is performed on an Asus UEFI but has also shows options relevant for enabling TPM on MSI, GigaByte, ASRock, for both Intel and AMD CPU.
Disclaimer:
Please be careful when changing BIOS options as it can lead to non-bootable PC or even data loss. I cannot be made responsible for such situations.
#TPM2.0 #SecureBoot #Windows11
Thank you so much dude, no one else explained it as well as you did in my opinion. I searched through dozens of vids and yours finally worked!
Thanks man. Watched a couple other videos but there system looked different from mine so I couldn't figure it out. You saved me hours
Same thing for me. Thank you for the video 💪🏼🤟🏼
people who had the wrong BIOS or secure Boot.
Thank you so much for helping, you are explaining all the steps in a way that easy to understand.
Thank you so much, i have tried like 20 different methods, but none of them worked exept your. Thank you
Could you please help me? I have a gigabyte f1 motherboard and I’m not sure how to enable it. I’ve been trying to look for secure boot for hours
Should be straight forward. Did you check gigabyte support? www.gigabyte.com/us/Support/FAQ/3001
when i click it in and confirms it dont work for some reason
I’ve changed Secure Boot to Enabled but the Status still shows as Disabled & in system information it shows as disabled as well
What is you motherboard version? Check in the comments some additional steps to perform for gigabyte motherboard
thank you . took me 2 years to figure this out
i have both correct but it still dosnet work when i play valorant
when i secure boot it won’t let me boot up with my hard drive
This actually helps. Thank you
thank you so much dude u deserve a sub
hey sorry to say this as i can see lot of people have the same problem but in tpm.msc it says i have the tpm 2.0, but when i go into msinfo 32 it still says UEFI, hope you can help
Both values are ok. Your TPM is active and your os is UEFI. In msinfo32 you should check for secure boot state to be on. If it's not, then you need to activate it in the bios.
Thanks for this video although I am struggling to figure out how to enable mine. I have an Asus ROG Strix Scar (G533QR) with a version TPM 2.0 in it. However, going inside the BIOS, I cannot find anything inside the advanced tab to enable the TPM device. :(
Did you check out under the PCH firmware tab? As you have Asus bios it should be very similar naming to the one shown.
👌finally know how to explain thanks
When I disable CSM to UEFI, it doesn’t let me go into windows?
Do you now how to enable this on steam deck (windows os)?
My pc just went of and now it turns on but does not show nothing in the screen and the keyboard doesn’t turn on nether the mause or the mic
Hey there. What option did you change? If upon shutting down ur PC you are still having this issue, you will need to reset the BIOS. Here is a video on how to do it: ruclips.net/video/fGpf_hfOKgI/видео.html
hi so i can’t enable my secure boot and i tried so many times. on my end, it says “secure boot can be enabled when system is in user mode. repeat operation after enrolling platform key (pk)” like what does that mean?
Ok. Can you try this:
- Secure Boot - Change to Disabled, then change to Enabled again
- Secure Boot mode - Change to Custom, then change to Standard
- If you have the option, do Enroll the factory keys
- Save options and reset
- Go back in BIOS, under BOOT options, is System mode set to User and Secure Boot Active? If it is, it should work
Also According to this guide for disabling secure boot, an additional step of deleting secure boot variables might be required (www.gigabyte.com/us/Support/FAQ/3001 ). I am unsure what exactly it does, but i suggest you follow this guide to turn off secure boot, then turn it back on. If it doesn't work, maybe delete the variables after you turn it on. Lmk if it works
pch storage configuration doesnt stand there
Thank you very mutch it works
right it was perfektly
my secure boot on the bios shows its on but when i got on the msi it says its off and i have an aorus motherboard
Try to disable and re-enable secure boot also deleting the variables. Check this tutorial: www.gigabyte.com/us/Support/FAQ/3001
Hi, once I enable secure boot and press exit and save, it just reboots me back to the bios, is there a fix for that ?
It might be that your os is not UEFI compatible. Disable secure boot, go to OS and start up msinfo. Look up BIOS mode. If it says Legacy, the OS is not UEFI and secure boot cannot be activated. There is a way to change your OS from Legacy to UEFI but it's pretty complicated. If you are not familiar with technical things you should rather reinstall the OS as UEFI compatible.
My bios mode is uefi and secure boot is disabled but it is greyd out so i cant change it i need some help asap
If you're using a Gigabyte mother board, this message I've sent others might be helpful:
According to this guide for disabling secure boot, an additional step of deleting secure boot variables might be required (www.gigabyte.com/us/Support/FAQ/3001). I am unsure what exactly it does, but i suggest you follow this guide to turn off secure boot, then turn it back on. If it doesn't work, maybe delete the variables after you turn it on. Lmk if it works
Hey so when I go into the boot tab In bios it only let's me change os type. Please help to fix this
What is your motherboard or laptop model?
This is a shit i have to disable Secure boot to do undervolt in my pc... and i can´t play valorant whit secure boot disable :/ ... what can i do?
Man you the best i swear.
my bios already UEFI, but when I disable CSM, it cant access BIOS
Read through the comments. You will probably need to change your OS to UEFI
@@Learn-IT i solved it. I re-flash my vbios GPU
This worked! Thank you 😀
thx u helped me a lot
whenever I do TPM.MSC is pops us as “cannot load management console”
According to Microsoft (docs.microsoft.com/en-us/troubleshoot/windows-client/deployment/cannot-load-tpm-management-console) it seems that is a result of TPM not being enabled. Did you already try to enable it in BIOS? Try it and check again.
Microsoft also states that performing these steps could help:
- press Windows Start button
- start typing Windows Powershell
- right click on the link then select Run as Administrator
Within Powershell window, copy paste the following commands:
$tpm = gwmi -n root\cimv2\security\microsofttpm win32_tpm
$tpm.SetPhysicalPresenceRequest(6)
Hope this helps.
Thank you so much
My secure boot says not supported after I enable it
My motherboard is prime b450m-a ii
i am currently trying to help my friend to enable secure boot to fix a bug in a game, but both secure boot state and also mode are greyed out, he is on UEFI mode, CSM is disabled and is not on a legacy system. Do you have a fix for this?
edit: he has a very similar bios to yours (asus bios)
Did you find a fix?
his pc is a scp he has windows 11 without secure boot i still do not know
Hey man I dont have the drop down for pch fw config pls help someone
Check comments. Look for trusted platform or anything else you can see in the screenshots from the video
This does not work. I clicked on enable secure boot and save changes but when I open msiinfo32 it says it's off.
If you're using a Gigabyte mother board, this message I've sent others might be helpful:
According to this guide for disabling secure boot, an additional step of deleting secure boot variables might be required (www.gigabyte.com/us/Support/FAQ/3001). I am unsure what exactly it does, but i suggest you follow this guide to turn off secure boot, then turn it back on. If it doesn't work, maybe delete the variables after you turn it on. Lmk if it works
@@Learn-IT I am not using a gigabyte motherboard sadly. What do you mean by deleting variables after I turn it on? And secure boot mode doesn't show up as an option. if nothing works should i turn it in to be fixed by a professional?
What is your MB model? Did you also disabled CSM support?
@@Learn-IT how do you disable csm support
Look for any option mentioning CSM (Compatibility Support Module) and you should have some way of disabling it.
i have windows 10 how to enable scure boot pls
Solution is the same. Just follow the video.
Thanks a lot!!
ive been researching everywhere. i enter bios keys but it looks way different than the image i have a hp please help me
What model of motherboard/laptop do you have? For accessing the BIOS, you usually need to keep on pressing the F10 key on your keyboard. The TPM should be under Advanced -PCH-FW Configuration menu and Secure boot options in the Security tab.
@@Learn-IT i know nothing about computers but, intel core i5, HP elite. when i go into bios it says on the bottom aptio setup utility- version 2.13.1216 copy right 2012 american megatrends, inc.
@@Learn-IT my options are file, storage, security, power, advanced. in advanced my options are power-on options, bios power-on, onboard devices, bus options, device options, VGA configuration but it looks faded like locked and management operations.
The thing you are looking for is under Security. In that tab, under System Security, you should be able to find TPM. In that same Security tab you can also find Secure Boot Configuration, under which you can enable Secure boot. Normally Legacy boot should be diabled, but if it's enabled and your OS is not UEFI, you might render your PC unbootable. Do remember all the options you change in case you need to change them back.
PS: one more thing, even though your system might support TPM, if it's from 2012, it is highly possible that is TPM 1.2 meaning it's not sufficient for Valorant (provided that is what you are looking for).
If it doesn't work out, your left with only two options: a new PC or reverting back to Windows 10. For the second option, here is how to do it, without losing installed apps: ruclips.net/video/jnS3B__IW4s/видео.html
My tpm is enabled but it shows my secure boot is off ??
Tpm and secure boot are two different things. Did you check the security tab in BIOS?
@@Learn-IT there both active in the bios however when I go back into desktop and check system information it says secure boot if OFF. But tpm works no problem with that only secure boot
Try disabling and re-ebabling Secure boot. Sometimes this works as you can see in the other comments below
i can't go to the advanced BIOS
What is your motherboard version?
I dont know if i can trust you my dad says if i touch in bios its gonna break my pc is that true
He is absolutely right. If you don't know what you change, it can result in bigger problems.
What do I do if secure boot is unsupported
You can always revert back to Windows 10: ruclips.net/video/jnS3B__IW4s/видео.html
Thank you
Top tier help video. 💯
Hi can u do one for colorful b550m-hd pro v14..there are no options to enable the secure boot options..pls help :,)
Go to Security tab. Change System mode state from current option to Custom/User or something. Accept if required something, Should be able to enable secure boot now. Have fun
@@Learn-IT unfortunately theres no security tab :,(
that is rather strange. in this video ruclips.net/video/Yf0rI5Wm88s/видео.html (that's in chinese i guess) there are shown several tabs, including Security. At exactly 3.15 there is a short pass trough the screen too. Do you have any option to change to "advanced" mode?
@@Learn-IT yes there is an option for advanced mode
It looks like the Security page either is locked or missing options. Did you try to perform a BIOS upgrade? I noticed there are new versions of BIOS and maybe one of them unlock secure boot options (altough it is not mentioned in the release notes). You can find it here: en.colorful.cn/product_show.aspx?mid=84&id=894
Since the bios on these mobos are apparently so different from version to version, after you perform bios update, you can also send me a video (with your phone) of how each page in your bios looks like @ learnittips@gmail.com
I could try to look it up, see if there was something else....
i dont have the pch option :/
What is your motherboard or laptop model?
Thanks
i dont know what to press to go onto bios mode i dont knowwhat it says american megatrends
usually you need to continuously press Escape, Delete, F1 or F2 buttons (one of them, dependant on the BIOS implementation).
@@Learn-IT yeh I done it another way but there was nothing about secure boot on there so I’ve gave up now 😂
@@Learn-IT does this one thing disallow me to play every game or is it just valorant which is what it wouldn’t let me. Play
For now, only Valorant has this request (as part of their Vanguard anti-cheat software). I guess that maybe in the future, more games will implement such a system. You can also go back to Windows 10 if you need to play it. They do not require this feature on Windows 10.
@@Learn-IT if I go back to windows 10 does it get rid of any games or anything or can I just go back like with everything
Thenk yuo very much
very good video!
Legend
Fucking g ur the best
msinfo32!!!! THANKS!
Haier, please