Secure Boot and Windows 11 setup concerns
Secure Boot and Windows 11 setup concerns
I just changed the BIOS on my ASUS Z-390 board to work with Windows 11. The PC check shows it’s ready, but Windows Update still flags something wrong. msinfo reports secure boot is off while the BIOS says it’s enabled. The Intel TPM was turned on during the flash. I’m not looking into complicated fixes now—just want to resolve this without extra hassle. The other two PCs I updated to Windows 11 worked smoothly too.
Confirm if your Windows setup is using GPT partition style for UEFI by reviewing the relevant discussion.
I discovered the answer finally! The ASUS guides were confusing, stating that updating the BIOS automatically activates both secure boot and Intel TPM. I spent hours yesterday researching various fixes, including a conversation with ASUS support who recommended reverting to the older driver and configuring manually. I re-flashed to the original BIOS version (2606) which kept secure boot enabled without an option to disable it. I adjusted the TPM settings and verified everything in Windows, confirming secure boot was off but TPM was working. The issue stemmed from the OS setting being set to "Other OS" instead of "Windows UEFI Mode." I’m puzzled why ASUS uses "Other OS" as the default, especially since they market the BIOS update for Windows 11. After changing that setting in the BIOS, the problem resolved. I found several Reddit threads discussing the same problem. Recently, I updated the BIOS on both Gigabyte and MSI boards for Windows 11, and in both instances the secure boot listed the correct operating system.