To enable Secure Boot on a Gigabyte motherboard, follow these general steps. Exact wording and menu locations can vary slightly by BIOS version, so use these as a guide and adapt to what you see on screen. Direct steps
- Enter the BIOS/UEFI setup on startup (usually by pressing the Delete key during boot).
- Switch to Advanced Mode if you’re in Easy/Smart Mode.
- Enable the TPM/PTT if your BIOS requires it for Secure Boot. This is often labeled TPM, PTT, or fTPM depending on the platform.
- Make sure the boot mode is set to UEFI (not Legacy/CSM). If you see a setting for CSM, disable it or set it to UEFI only.
- Navigate to the Secure Boot section:
- Ensure Secure Boot is enabled.
- If the option is visible but shows Not Active, use the option to Restore Factory Keys or Install Factory Defaults, then re-enable Secure Boot.
- Save changes and exit. The system will reboot with Secure Boot enabled.
Common caveats and tips
- BIOS Mode: Secure Boot requires UEFI boot mode with a GPT-partitioned system disk. If your drive is MBR, you may need to convert to GPT (e.g., using a tool like MBR2GPT) before Secure Boot can be active without issues.
- TPM/PTT: Some Gigabyte boards require enabling a Trusted Platform Module source (TPM/PTT/fTPM) before Secure Boot can be activated. If Secure Boot remains unavailable, enable the corresponding TPM option in the BIOS.
- Key state: If Secure Boot shows as Not Active, you may need to restore the factory keys and re-enable, then perform a reboot.
- Make backups: Enabling Secure Boot can affect existing OS installations or boot managers. Ensure you have backups or a recovery plan in case the system doesn’t boot after enabling.
If you’d like, share your exact motherboard model and BIOS version, and I can tailor the steps precisely to your hardware and provide a step-by-step overview based on the latest Gigabyte guidance.
