Forum Discussion

DeltaS5471's avatar
DeltaS5471
Rising Rookie
12 days ago
Solved

I don't know if I can secure boot I am stuck(PC)

Ok, I waited a few days before I started looking into secure boot myself. I have seen other peoples' issues trying to get it to work. I have read about them not being able to boot their PC anymore, having take parts out and back in like the MB battery to even get the PC to boot again, they got the secure boot to work but still can't play, and others aren't able to even get secure boot because their hardware is older. 

I am not really tech savvy. I really just know the parts of the PC and can put it together. I have not done a PC build in 15 years. So this PC I have used for the past 5-6 years was a build from NZXT, and I found that it does not have Secure Boot enabled. 

So as I started looking into the steps to enabling secure boot. I found out I have the UEFI for BIOS, so I thought that is good. However, I found out that I don't have the TPM on or enabled. And I need 2.0 for this secure boot to work for 2042. So when I checked if I have TPM, that window tells me I don't have a compatible TPM. So as I looked further into the steps on turning on TPM I need to check my manufacturer page to do it. I have no idea what manufacturer page I need to look at to enable the TPM. My motherboard is a Gigabyte Z590 Auorus Elite, processor is an 11th Gen Intel i5-11400F, graphics is MSI Nvidia GeForce 3070 Ti, both SSD are Samsung, and I have a HDD from Western Digital. I don't have DELL, Lenovo, HP, or Asus, anywhere on my PC to my knowledge.  The only thing on the list is MSI but that's just for graphics card, and I don't know if that is the option I need to select.

I then checked the next steps to see what I would do after enabling the TPM. It said I have to check my windows disks (I'm assuming hard drives), if it is MBR or GPT. And if it isn't the right one, it looks like I would have to change it with command prompts or something. Which I have no idea if I should mess with that or not.

Seriously, I am not trying to be difficult or like "woe is me, I can't do it because it is too hard (when it isn't hard)", or "oh, I see change, I'm not going to change". But this stuff is really foreign to me I really don't know a lot about this stuff, and I really don't know how NZXT did all their setups to get my PC working and don't want to undo their work to find out I needed those settings for my PC to work. Plus I don't know if the NZXT cam or my antivirus is seen as malware to the secure boot. I don't know professionals or who to ask to do all this, plus I don't know how much I need to know about this PC to help the professional to understand and do it correctly.

IF, I am going to try and figure out the TPM thing, which manufacturer page will I need to look at to enable TPM.

Personally, this really bothers me that I can't play this game right now because I honestly enjoy it. Played it since beta, and even pre-ordered the ultimate edition. It's not the best battlefield title, but I find it's really fun. Knowing EA over the many years of playing, this will probably become the norm for their titles requiring Secure boot and it won't change. Because it sounds like secure boot will help mitigate the hacking/cheating. So in the distant future I guess I need to make sure I build my own PC again, or ask the builders to make sure it is secure boot with the TPM enabled.

BIG sorry for wall of text. I honestly have no idea how to proceed with secure boot. In the meantime I found I can still play though cloud gaming on game pass ultimate. It's okay, I can play my EA profile, but I don't have access to the battlefield coins I have on my account through this method. I hope you all have a great weekend!

  • Enabling Secure Boot on Gigabyte Z590 Motherboard: Complete Guide

    Secure Boot is an important security feature that ensures your system only boots with trusted software. For Gigabyte Z590 motherboard users, enabling Secure Boot requires several preparatory steps and careful configuration in the BIOS. This comprehensive guide will walk you through the entire process.

    Prerequisites for Enabling Secure Boot

    Before enabling Secure Boot on your Gigabyte Z590 motherboard, you need to ensure several system requirements are met:

    1. UEFI Mode: Your system must be running in UEFI mode, not Legacy BIOS mode 7
    2. GPT Partition Style: Your boot drive must use GPT (GUID Partition Table) rather than MBR (Master Boot Record) 7 14
    3. Updated BIOS: Ensure you have the latest BIOS version installed for your motherboard 12
    4. TPM 2.0 Enabled: Windows 11 requires TPM 2.0 (though Secure Boot itself doesn't require it) 16

    Step 1: Check Current Secure Boot Status

    Before making any changes, verify your current Secure Boot status:

    1. Press Win + R, type msinfo32, and press Enter
    2. In System Information, look for:
      • Secure Boot State (should show "Off" initially)
      • BIOS Mode (must say "UEFI") 7

    Step 2: Verify Disk Partition Style

    Secure Boot requires GPT partition style:

    1. Press Win + X and select Disk Management
    2. Right-click your boot disk > Properties > Volumes tab
    3. Check "Partition style" - must be "GUID Partition Table (GPT)" 7

    If your disk is MBR, you'll need to convert it to GPT before proceeding. Backup your data first as this process may erase your disk.

    Step 3: Enter BIOS Setup

    1. Restart your computer
    2. During startup, repeatedly press the Delete key to enter BIOS 16
    3. Press F2 to switch to Advanced Mode if needed 16

    Step 4: Disable Compatibility Support Module (CSM)

    Secure Boot cannot be enabled while CSM is active:

    1. Navigate to the BIOS tab
    2. Find CSM Support (may be under Boot options)
    3. Set CSM Support to Disabled 7 12
    4. Save changes and exit (F10)
    5. Re-enter BIOS to continue configuration 12

    Step 5: Enable TPM 2.0 (Optional for Windows 11)

    For Intel processors on Z590:

    1. Navigate to Settings > Miscellaneous or Peripherals
    2. Find Intel Platform Trust Technology (PTT)
    3. Set to Enabled 16
    4. Save changes (F10)

    Step 6: Enable Secure Boot

    Now you can enable Secure Boot:

    1. Navigate to the BIOS tab
    2. Find Secure Boot option (may be under Security tab)
    3. Set Secure Boot to Enabled 7
    4. If prompted about Platform Keys (PK), select Install Default Secure Boot Keys 12
    5. Save changes and exit (F10)

    Note: Some systems may require you to first set Secure Boot Mode to "Custom", restore factory keys, then switch back to "Standard" mode 14

    Step 7: Verify Secure Boot is Active

    After rebooting:

    1. Press Win + R, type msinfo32, and press Enter
    2. Check that Secure Boot State now shows "On" 7 14

    Troubleshooting Tips

    If you encounter issues:

    • Black screen on boot: Likely indicates your disk is still MBR - convert to GPT 14
    • Secure Boot option greyed out: Ensure CSM is completely disabled 12
    • Error about Platform Keys: Install default Secure Boot keys 12
    • Windows won't boot: You may need to disable Secure Boot temporarily to access recovery options

    Important Notes

    • Enabling Secure Boot is not strictly required for Windows 11 installation (the system just needs to support it) 14
    • Some older operating systems or hardware may not work with Secure Boot enabled
    • Certain games (like Valorant) require Secure Boot for their anti-cheat systems 14

    By following these steps carefully, you should successfully enable Secure Boot on your Gigabyte Z590 motherboard, adding an important layer of security to your system.

7 Replies

  • lNAPPROPRlATE's avatar
    lNAPPROPRlATE
    New Veteran
    11 days ago

    I'm not sure if you have that option as Creator of that post but if you do then mark this post as "Solved" then people know where to look for help. 

  • DeltaS5471's avatar
    DeltaS5471
    Rising Rookie
    11 days ago

    Thanks for sending me this step-by-step guide!! As mentioned to the other reply, I did spend the time today to really attempt secure boot today. I found in my BIOS the secure boot was already set to "Standard" but was inactive, so the step where I had to change "standard" to "custom" to restore the factory keys. Which enabled the secure boot when I got to that step, after doing the TPM and checking my windows disk. I really appreciated the help, thanks!!

  • DeltaS5471's avatar
    DeltaS5471
    Rising Rookie
    11 days ago

    Thank you! I was able to spend the time today and go over all of this stuff. I really did not want to get along with this nonsense, but was able to do it successfully. Did not know about the TPM being called PTT. Found it in the exact place you said. Really appreciated the help, thanks!!

  • Enabling Secure Boot on Gigabyte Z590 Motherboard: Complete Guide

    Secure Boot is an important security feature that ensures your system only boots with trusted software. For Gigabyte Z590 motherboard users, enabling Secure Boot requires several preparatory steps and careful configuration in the BIOS. This comprehensive guide will walk you through the entire process.

    Prerequisites for Enabling Secure Boot

    Before enabling Secure Boot on your Gigabyte Z590 motherboard, you need to ensure several system requirements are met:

    1. UEFI Mode: Your system must be running in UEFI mode, not Legacy BIOS mode 7
    2. GPT Partition Style: Your boot drive must use GPT (GUID Partition Table) rather than MBR (Master Boot Record) 7 14
    3. Updated BIOS: Ensure you have the latest BIOS version installed for your motherboard 12
    4. TPM 2.0 Enabled: Windows 11 requires TPM 2.0 (though Secure Boot itself doesn't require it) 16

    Step 1: Check Current Secure Boot Status

    Before making any changes, verify your current Secure Boot status:

    1. Press Win + R, type msinfo32, and press Enter
    2. In System Information, look for:
      • Secure Boot State (should show "Off" initially)
      • BIOS Mode (must say "UEFI") 7

    Step 2: Verify Disk Partition Style

    Secure Boot requires GPT partition style:

    1. Press Win + X and select Disk Management
    2. Right-click your boot disk > Properties > Volumes tab
    3. Check "Partition style" - must be "GUID Partition Table (GPT)" 7

    If your disk is MBR, you'll need to convert it to GPT before proceeding. Backup your data first as this process may erase your disk.

    Step 3: Enter BIOS Setup

    1. Restart your computer
    2. During startup, repeatedly press the Delete key to enter BIOS 16
    3. Press F2 to switch to Advanced Mode if needed 16

    Step 4: Disable Compatibility Support Module (CSM)

    Secure Boot cannot be enabled while CSM is active:

    1. Navigate to the BIOS tab
    2. Find CSM Support (may be under Boot options)
    3. Set CSM Support to Disabled 7 12
    4. Save changes and exit (F10)
    5. Re-enter BIOS to continue configuration 12

    Step 5: Enable TPM 2.0 (Optional for Windows 11)

    For Intel processors on Z590:

    1. Navigate to Settings > Miscellaneous or Peripherals
    2. Find Intel Platform Trust Technology (PTT)
    3. Set to Enabled 16
    4. Save changes (F10)

    Step 6: Enable Secure Boot

    Now you can enable Secure Boot:

    1. Navigate to the BIOS tab
    2. Find Secure Boot option (may be under Security tab)
    3. Set Secure Boot to Enabled 7
    4. If prompted about Platform Keys (PK), select Install Default Secure Boot Keys 12
    5. Save changes and exit (F10)

    Note: Some systems may require you to first set Secure Boot Mode to "Custom", restore factory keys, then switch back to "Standard" mode 14

    Step 7: Verify Secure Boot is Active

    After rebooting:

    1. Press Win + R, type msinfo32, and press Enter
    2. Check that Secure Boot State now shows "On" 7 14

    Troubleshooting Tips

    If you encounter issues:

    • Black screen on boot: Likely indicates your disk is still MBR - convert to GPT 14
    • Secure Boot option greyed out: Ensure CSM is completely disabled 12
    • Error about Platform Keys: Install default Secure Boot keys 12
    • Windows won't boot: You may need to disable Secure Boot temporarily to access recovery options

    Important Notes

    • Enabling Secure Boot is not strictly required for Windows 11 installation (the system just needs to support it) 14
    • Some older operating systems or hardware may not work with Secure Boot enabled
    • Certain games (like Valorant) require Secure Boot for their anti-cheat systems 14

    By following these steps carefully, you should successfully enable Secure Boot on your Gigabyte Z590 motherboard, adding an important layer of security to your system.

  • Boro666pl's avatar
    Boro666pl
    Rising Traveler
    12 days ago

    TPM on Intel is called PTT. It should be in settings -> misc -> trusted platform. It's simple. But for secure boot to work you need, for starters, a GPT system partition and booting in UEFI mode. It's in the boot tab. If you switch to UEFI mode you should be fine. Now you have to convert your partition under Windws, if you have MBR (and not GPT). Then you can go back to UEFI and try to enable secure boot. But make sure that all your drivers and hardware supports secure boot. Otherwise your system won't boot. CMS should be disabled in boot (it's support for legacy hardware). I think Gigabyte is disabling it automatically along with secure boot toggle. Note, that all of this may brick your system, if done inncorrectly. So better backup everything, if you really want to go along with this secure boot nonsense.

About Battlefield 2042 Technical Issues & Bugs

Having issues with Battlefield 2042? Join here to report bugs, and find help with, crashes, connectivity and more.12,957 PostsLatest Activity: 6 hours ago