Msi Click Bios 5 Secure Boot

Enable Secure Kicking & TPM for Windows eleven: BIOS How To Guide!

Sponsor- Please utilise our affiliate link for Noctua Redux Fans at
AmazonUS:https://amzn.to/3gV0dnk AmazonUK:https://amzn.to/3xHz0KK
AmazonCA:https://amzn.to/3tbOrHC AmazonIN:https://amzn.to/33aFu6Z

Disclaimer: We may earn a small commission through affiliate links, it helps to back up us, with no added cost to you.

Windows 11 demands extra security

UPDATE x/ten/2021: You lot may demand to convert your current system drive, if information technology's MBR, to GPT. Endeavour updating BIOS to the latest. If yous still have bug, and so try a fresh windows install to a spare drive.

With the release of Windows eleven, Microsoft is stepping upwardly protection for your PC in today's online and work from home world, making securing your PC a necessity. Ii of the requirements for PCs to install Windows eleven are that both TPM and Secure Boot must be enabled in your arrangement. Today we'll wait at both settings in BIOS that may need to be enabled, and information technology'south a absurd breeze if yous follow our guide.

We'll be doing this with an MSI B550 Tomahawk which is an AMD board, and we also tested with an Intel z390 Tomahawk, b360 Gaming Arctic and an older z270 XPower Gaming and this works with all these models. By the mode, don't forget to give us a quick follow on social media, and subscribe and bell, all that practiced stuff, and if you tried your ain upgrade or take questions, leave your comments downwardly below.

Then information technology's quick and like shooting fish in a barrel to do this in BIOS with a few steps, as well every bit requite you some troubleshooting tips, when y'all're prepare to get Windows 11. If you're doing this now, having another device like a laptop or phone with this video volition brand following this walk through nice and piece of cake.

Why do we demand to enable Secure Kicking?

So why does Windows xi need this actress security? Quickly, Secure Kick is role of UEFI, which is the newer interface between your BIOS and your OS. Secure kick resists infection from malware, including kicking loaders. The older type is CSM, and that's why we'll change the OS interface to UEFI kickoff.

The Trusted Platform Module or TPM are embedded chips on most motherboards and enterprise grade notebooks, and they secure hardware with keys. If y'all bought a PC afterward 2016, it should have TPM two.0, but if it's older it may take TPM 1.ii or perchance no TPM at all.

Before we enable Secure Boot, set UEFI

So tapping Delete to get into BIOS, we'll go to Advanced mode by pressing F7. In Settings, get to Advanced, then Windows Os Configuration. Cheque to make sure the BIOS mode is set up to UEFI. If it'southward not, you'll need to alter this to UEFI first, and so hit F10 to Save and exit. In slightly older BIOS versions, this may exist listed as Windows ten WHQL Support, and older boards may take a Windows 8.1/ten WHQL Back up line, which nosotros'll enable.

At this betoken, it's important to hit F10 to Save and restart, and tap Delete to become back into BIOS. If you attempt to install the Secure Boot keys before doing this, the stop dialog is to Reset without saving, which will put you in a loop where Windows x OS withal has CSM selected, and it'll block your enabling of Secure Kicking. So salve and restart kickoff.

Likewise, when you change CSM to UEFI, your calculator may restart a few times or beep a few times and non Mail service. If you look thirty seconds without anything happening on screen, just plow off your power supply, expect 10 seconds, turn it back on and hit power and start tapping Delete over again. By the fashion, if you lot miss borer Delete and become into Windows, holding Alt and pressing F4 a couple of times will give you the Shut Downward box, printing the down pointer to select restart, hit enter, and commencement borer Delete once more to get into BIOS.

Install manufactory keys and enable Secure Kick

At present we've restarted using UEFI, nosotros'll become to Settings…Advanced…Windows OS Config, and downwards to Secure Kicking and striking enter, and nosotros'll install the keys first. Going to Secure Boot Way, we'll change from Standard to Custom, then the options below will plow active. Nosotros'll choose Enroll all Factory Default Keys. The showtime dialog confirms Installing Factory default keys, and the second will enquire to reset without saving. You tin can click No, but you may need to Relieve and exit if you have whatever issues with the next step.

Now we've installed the keys we tin select Secure Kick and choose Enabled.

Enable TPM and run into BIOS condition

Pressing the Escape key a few times will get u.s.a. back to the main Settings menu, and at present nosotros'll select Security… and then Trusted Computing, then we'll put Security Device Support to Enabled. We won't meet an update in Status Information until nosotros hitting F10 to Salve Config and leave, which we'll do now.

If you want to verify what you've done, to encounter the new Status Information, tap Delete into BIOS, and going back to Settings… Security… Trusted Computing, you should be able to see the Status Data listing TPM 2.0 as existence agile.

Windows check: Enable Secure Kick worked?

We'll boot up into Windows, and we can check if TPM is working, click on search and type in tpm.msc and hit Enter. The status volition say ready for employ, and in the eye column, if you whorl correct it will requite the Specification Version which is 2.0.

Then how do y'all see if Secure Boot is working in Windows? Just click search and type "msinfo" and hit Enter, and halfway down the list you'll see Secure Boot Country and this should say On.

You can see if you're ready for Windows 11, in search or your browser, with "Upgrade to the New Windows eleven OS". If y'all striking Ctrl+F to find, showtime typing in Download and and so click Download App. Run information technology, take, install, and then Finish. Microsoft is working on or has pulled this PC Health Check at the time of production, simply we clicked Check Now, and got a green tick.

With Secure Boot and TPM enabled you lot should be ready for Windows eleven. That PC Wellness Check tool did give simulated negatives, and really did cipher to tell you what you demand to set, and then promise Microsoft has a meliorate version out presently. Don't forget PCs older than 5 years or laptops defective TPM two.0 may have issues trying to upgrade to Windows eleven.

So that wasn't as well difficult, and hopefully this helped you lot get secured and ready, and if you lot're thinking about an AMD or other motherboard, clicking through our affiliate links below to shop will help u.s. here with no extra cost to you. And follow us on Twitter, Instagram and Facebook at techspinreview, and we have posts up at techspinreview.com.

Demand an MSI B550 Tomahawk or other motherboard? Please click through our affiliate links for:
AmazonUS: https://amzn.to/3zJTrXO AmazonUK: https://amzn.to/2WosOJn
AmazonCA: https://amzn.to/3iYGClo AmazonIN: https://amzn.to/3x9cwRo

We have tech reviews on the channel and so be sure to check those out also, and thank you to Noctua for beingness our sponsor this episode, with an extensive lineup of high static pressure fans perfect for cooling your rig, check them at the links higher up.

We're interested to hear what you want to see reviewed, allow u.s. know and we'll try and get to it. And go out your all-time episode opening lines and nosotros might but pick yours next fourth dimension. Please accept a second to hitting visit our YouTube video and hit Like and subscribe, and let us know how we can improve. Nosotros read and respond to a lot of comments so if you take a question or if we missed something, delight tell u.s. down beneath. Nosotros actually appreciate your time, and we'll see you lot on the next. Goodbye for now!

See more than MSI product, Motherboard/CPU, PC instance reviews