To enable Secure Boot on a Gigabyte motherboard, the general process involves entering the BIOS setup, disabling Compatibility Support Module (CSM), enabling TPM (if required), and then enabling Secure Boot itself in the BIOS. Here are the summarized typical steps:
- Enter BIOS by pressing the Del or F2 key during computer startup.
- Switch BIOS to Advanced Mode if in Easy Mode.
- Go to the Boot section and disable CSM support. This ensures the system is in UEFI mode.
- Enable TPM 2.0 or fTPM for AMD CPUs if required (usually under Peripherals or Security settings).
- Navigate to the Secure Boot menu (often under Security or Boot tab).
- Set Secure Boot to Enabled.
- If prompted, choose to install or restore default Secure Boot keys.
- Save the changes and exit BIOS (usually F10).
- On reboot, verify Secure Boot is enabled by running msinfo32 in Windows and checking "Secure Boot State".
Additional notes:
- The boot drive should be formatted as GPT (not MBR).
- Your BIOS should be up to date for best compatibility.
- Some BIOS versions may require setting Secure Boot Mode to "Custom" then back to "Standard".
- Disabling CSM is critical to enable Secure Boot.
This process secures system boot by allowing only trusted firmware to load, which is essential for Windows 11 and some security-sensitive applications and games. This information is compiled from detailed Gigabyte motherboard guides and tutorials.
