Re: Security Requirements on BF6 on PCs!

Have you tried Enroll All Factory Default Keys?

https://youtu.be/KF2vdUnzLlg

Hey ! Yes i did try to "Enroll All Factory Default Keys", exactly like in the video you linked. It doesn't change anything for me, and I still get the same windows infinit "unable to repair" screen when booting.

I message the MSI support aswell. If i find anything on my side in the meantime, I'll let you guys know ! 

Did you get Windows to boot? If not I'll try to help some more.

Run msinfo32 and see if it says "Secure Boot" is enabled (Secure Boot State = on). If it is NOT showing as on, do the following...

1. You need to do an OS Restart but HOLD the SHIFT key down as you press "restart".  Computer should restart in the Blue Diag screen.

2. Select Troubleshoot, Advanced Options, UEFI Firmware Settings. Let it restart your computer into the BIOS screen all by itself (no touching). 

3. Now go to UEFI:Secure boot option and turn on if not done so, save setting. If you had it on, but it didn't show in msinfo32, all you need do is exit out of BIOS and start OS as normal. Just going into BIOS from the Blue Diag Screen seems to toggle the Windows OS to recognise the safe boot option is now live.

First unplug your PC, then you might need to remove your GPU to access you cmos battery, remove the battery. After you remove the battery you will have pins on your mobo (mine was labeled JBAT1 and I also have and MSI mobo) could also be labeled cmos reset. You will need a screwdriver or something else that is metal that you can touch both pins with, do that and hold it for 10-15 seconds. You might be able to put everything back together then, I had to leave my cmos battery removed when I started my computer back up to reset my bios. If you have to do it the way I did you can shut your PC back off and put everything back together. I hope this help you  

Hi ! Thank for your answer ! 

I have no problem turning the secure boot mod in my BIOS. My problem is that every time i set it up, my windows refuse to boot and goes into an infinite automatic repair mod. And it works fine every time i turn back the secure mod to disable again. 

Hi ! No I still didn't manage find a solution to successfully boot my pc while the Secure boot is enabled. Always the same problem no mater what i try... :/ 

Please take a picture of the boot order in BIOS screen. I'm curious if the PC is trying to boot MBR instead of UEFI.

Here's a picture of the boot order in my BIOS. 'UEFI Hard Disk:Windows Boot Manager' is the first boot device.

Also take a picture of 'UEFI Hard Disk Drive BBS Priorities' list in BIOS.

I've attached screenshots of what my BIOS settings for both these lists look like.

Hey ! Thanks for taking the time to help me ! 

Here's the screenshots of my BIOS setting. Looks exactly like yours i think.

Andrakkes​ the boot order in your BIOS looks good! I'm not sure what's causing the blue repair screen on boot with secure boot enabled.

Is there any error messages on the blue screen?

Does is seem like the computer is automatically rebooting 2 or 3 times before the blue repair screen pops up?

Disabling "Full Screen Logo Display" in BIOS might allow you to see more information during boot.

Andrakkes​ You said TPM 2.0 is enabled in MSI BIOS settings. This video might not help but I thought I'd post it anyway. https://youtu.be/WlVaEEZ5oTc

Here's a video on how to disable CSM in BIOS. https://youtu.be/zmice4MzmS0

Hey guys ! I come with good new ! I found it ! This is a rare but knowned issus that i could not find ANYWHERE before today : 

The issue was with "AMD Virtualized AHCI Controller for StoreMI ",  an AMD storage pilot discontinued since 2019 that prevent any secureboot start because windows doesn't recognize it. 

The solution is here (in french) : https//forums.cnetfrance.fr/microsoft-windows-11/6796782-probleme-avec-le-safe-boot-secure-boot

Translation : 

"Go to Device Manager,

Click the > to the left of Storage controllers.

Right-click on AMD Virtualized AHCI Controller for StoreMI, then left-click Uninstall device (if a "Delete the driver software for this device" checkbox is available, tick it).

Click the Uninstall button.

Restart the computer (first time).

Restart (second time) and enter the BIOS/UEFI.

In the Advanced section, enable Secure Boot. Save changes (F10).

Restart."

Works perfectly for me afterward, finally after 10h+ of searching haha. My blue screen error was sending log files in "C:\Windows\System32\LogFiles\Srt\SrtTrail.txt" that lead me to this knowed error. 

I hope it helps some people, thanks everyone for your help !