How can you turn on secure boot for your Intel Z490-P?
How can you turn on secure boot for your Intel Z490-P?
I know the process should be easy, but I've heard a lot of people say you have to change other settings to make Secure Boot work. Some even say you might have to reinstall Windows if you don't turn it on at startup. From my experience, you need to turn off CSM and Fast Boot before turning Secure Boot on. Fast Boot looks simple because there are only two things to check: "Fast Boot" and an option for what happens when power cuts. Unless something else needs changing, that's all we have to do. Turning off CSM feels a bit confusing though because there are five different settings in total (the ones in parentheses are my current ones): Launch CSM is On; Boot Device Control is set to UEFI and Legacy OPROM; Boot from Network Devices is set to Legacy only; Boot from Storage Devices is set to Legacy only; and Boot from PCI-E/PCI Expansion Devices is also set to Legacy only. Once I turn off both CSM and Fast Boot, I have to reboot the PC before I can go back into UEFI settings to make Secure Boot work. I only saw one setting for that in the menu: "OS Type," with options like "Other OS" or "Windows UEFI mode." Are there any other things I should know about? Both of my hard drives already have GPT, so I don't need to worry about changing anything related to that. One comment said you had to restore "default key management values," but I'm not sure what that means exactly.
CMI is just old-style BIOS, you have to turn it off to switch to newer UEFI mode so you can get things like TPM and safe boot working properly.