Configuring Secure Boot for Gigabyte Z390 UD board
Configuring Secure Boot for Gigabyte Z390 UD board
It seems the system is still running CSM despite disabling it. Try verifying the BIOS settings again or checking for any pending updates. If the issue persists, consult the manufacturer's support resources for Windows 11 setup guidance.
I adhere to that sequence, perhaps you'll locate what you require:
1 - Ensure all SATA and USB devices are disconnected, leaving only the M.2 drive active.
2 - Navigate to the BIOS settings, find the boot section, and toggle CSM off.
3 - Select the secure boot setting below and choose an alternative operating system, not Windows UEFI.
4 - Activate key management and remove any secure boot credentials.
5 - Place a USB stick containing a UEFI bootable Windows 10 ISO.
6 - Press F10 to save changes, exit, and restart the computer.
7 - Installation will commence on your NVME device since it includes its own driver.
8 - Upon rebooting, press F2 during BIOS to return to settings, where Windows lists your NVME drive under boot priority.
9 - Revisit secure boot options and set it to Windows UEFI mode.
10 - Go back to key management, install the default secure boot keys.
11 - Press F10 once more to finalize, and installation will complete.
Turn on the TPM. Locate the guide. The manual indicates it falls under Trusted Computing in the peripherals section. You might need to upgrade the BIOS to the latest version and ensure you have an 8th generation processor for it to appear. If TPM remains disabled, secure boot won’t activate. When Legacy CSM is enabled, secure boot also can’t be turned on.
You're confused about the setup. It seems enabling Secure Boot doesn't allow you to install W11, even though TPM isn't enabled.
No, you can't set up Windows 11 since your system doesn’t have TPM activated for Secure Boot. This feature makes sure the boot process is safe, but if the BIOS lacks the necessary keys for the operating system, it won’t start. The TPM is essential, yet modern Intel CPUs from the eighth generation onward include an integrated "fTPM" – you can find more details here: https://www.gigabyte.com/Press/News/1925. As discussed, the newest BIOS version might be necessary for compatibility.
Windows 10 Home operates without needing TPM for secure boot since it lacks BitLocker and doesn't rely on TPM functionality. MS Outlook, however, depends on it. The system will indicate the presence of TPM is missing, even if it exists but isn't activated in the BIOS.
Windows 11 mandates a TPM 2.0 for activation. This is likely to support features like Measured Boot and Windows Hello for Business by default. Secure Boot and TPM can be disabled separately after installation. Secure Boot checks only that the operating system is permitted to start, but once TPM is engaged, additional requirements apply.
For the original query about Windows 11, it confirms a TPM must be enabled. If you're an Insider, you might already know this. UEFI mode and CSM must remain off for Secure Boot to work. Disabling CSM can affect peripherals like keyboards and USB drives. You'll face installation issues if the OS can't start without it.