Secure boot is a security standard that helps to ensure that your PC boots using only firmware that is trusted by the hardware manufacturer.
Secure boot can help protect your computer against malware and viruses. Secure Boot is enabled by default on most new PCs, but if you have an MSI motherboard, you can enable it manually.
In this blog post, we will show you how to enable secure boot on MSI motherboards. This will be much more different compared to changing BIOS from Legacy to UEFI as we discussed recently.
In a situation where you are trying to install Windows 11 and you get an error like this:
This PC doesn’t currently meet Windows 11 system requirements
- The PC must support TPM 2.0
- The PC must support Secure Boot
The solutions is to simply change your secure boot and your TPM 2.0 settings which can easily help you fix common errors like the System In Setup Mode.
Let’s jump right into it.
How To Enable Secure Boot On MSI Motherboard
Before your begin, make sure you are not using an older graphics card and you have the right firmware like the click BIOS 5.
Also, you should make sure your keyboard is in good conditions because that is what you will use to navigate inside your BIOS settings. You can also use an backlit settings on your keyboard to make sure the keys on your keyboard are visible enough.
Here’s how:
1. Boot into your BIOS using the BIOS key.
2. Navigate to security with your touchpad or keyboard.
3. Click on Trusted computing.
4. Change TPM device selection from PTT to DTPM.
5. Change device select to auto.
6. Now change the TPM device selection back from DTPM to PTT.
7. Go back to settings.
8. Click on advanced.
9. Select Windows OS configuration.
10. Change Windows 10 WHQL from CSM to UEFI.
11. Now, press the X button to close BIOS.
12. Click on Yes to save to restart.
13 Boot back into BIOS while it is restarting.
14. From settings, click on advanced
15. Select Windows OS configuration
16. Click on Secure Boot
17. Now Enable Secure boot.
18. Click on F10 to save.
If you are in the process of installing Windows 11, the installation should work a lot smoother without any interruption.
In a situation where things didn't go right and you are even having more challenges, you can reset MSI CMOS battery to restore your BIOS settings.
This is how errors are being cleared out after enabling XMP in your BIOS, so you have nothing to worry about.
How To Enable Secure Boot On MSI Without BIOS
If you're looking to enable Secure Boot without BIOS, there are a few options available to you.
One is to use the Microsoft Configuration Manager, which is a tool that can be used to manage both UEFI and BIOS settings.
Another option is to use the DISM (Deployment Image Servicing and Management) tool, which is included with Windows.
Finally, you can also use the bcdedit command-line tool to enable Secure Boot.
Let's take a look at how to do each of these methods.
Using the Microsoft Configuration Manager
The first method we'll cover is using the Microsoft Configuration Manager.
To do this, launch the Configuration Manager and go to Computer Configuration > Administrative Templates > System > Secure Boot.
Next, enable the "Secure Boot" setting and select "Full Security." Save your changes and reboot your computer. Your computer should now be secured with Secure Boot.
Using the DISM Tool
The second method is to use the DISM tool. To do this, open a Command Prompt window as Administrator and type the following commands:
dism /image:C: /enable-secureboot
dism /image:C: /Set-BootDebug on
dism /image:C: /cleanup-image /restorehealth
After you've executed these commands, reboot your computer and Secure Boot will be enabled. You may also need to enter your BIOS settings and enable the "Secure Boot" option.
Using the bcdedit Tool
The third and final method is to use the bcdedit tool. To do this, open a Command Prompt window as Administrator and type the following command:
bcdedit /set {bootmgr} bootsequence {bootsecdrv}
Save your changes and reboot your computer. Secure Boot should now be enabled. You may also need to enter your BIOS settings and enable the "Secure Boot" option.
These are three methods that you can use to enable Secure Boot without BIOS. Try out each of these methods and see which one works best for you.
How To Enable Secure Boot On MSI Laptop
If you're trying to install Windows on a MSI laptop and you can't find the Secure Boot option in the BIOS, don't worry - it's probably there, just hidden. Here's how to enable Secure Boot on a MSI laptop:
1. Enter the BIOS by pressing F2 during bootup.
2. Go to the "Boot" tab.
3. Select "Secure Boot."
4. Change the "Secure Boot Enable" setting to "Enabled."
5. Press F10 to save and exit the BIOS.
Now your MSI laptop should be able to boot into Windows with Secure Boot enabled.
How To Disable Secure Boot On MSI
If you're having problems with secure boot, or if you just want to disable it, here's how to do it on MSI motherboards.
To disable secure boot on MSI motherboards, you'll need to go into the BIOS and change the boot order. To do this, press the DEL key when your computer first starts up.
This will take you to the BIOS settings menu. From here, use the arrow keys to navigate to the "Boot" tab.
Under the "Boot Priority Order" section, select the "Secure Boot" entry and press the "-" key to move it down the list. Once you've done this, press the F10 key to save your changes and exit the BIOS.
Now, when you restart your computer, it should boot without secure boot enabled. If you ever want to enable secure boot again, just follow the same steps and change the boot order back to its original setting.
What Is Secure Boot On MSI?
Secure boot is a feature of many modern computers and operating systems that helps to ensure that only trusted software can be run on the device.
Secure boot works by verifying the digital signature of any software that tries to run on the device, before allowing it to run.
This helps to prevent malicious software from running on the device, and ensures that only trusted software can be executed.
Secure boot is an important security measure that can help to protect your computer or device from being compromised by malicious software.
If you are concerned about security, then you should ensure that your computer or device has secure boot enabled.
Advantages
1. Secure boot can help to protect your PC from malicious software or unauthorized operating systems that may try to load during the boot process.
2. Secure boot can also help to ensure that your PC boots using only trusted firmware and drivers.
3. Secure boot may help to improve the overall security of your PC.
Disadvantages
1. Secure boot may prevent you from being able to install and use certain types of software or devices that are not compatible with secure boot.
2. Secure boot may also prevent you from being able to dual-boot your PC with another operating system.
3. Secure boot may require you to take additional steps to configure your PC in order to use certain types of software or devices.
Can Secure Boot Be Enabled On MSI?
Yes, Secure Boot can be enabled on MSI motherboards. To do so, go to the BIOS menu and navigate to the "Boot" tab.
Then, select the "Secure Boot" option and set it to "Enabled". Save your changes and exit the BIOS menu. Your computer will now boot with Secure Boot enabled.
Remember that you can also access your BIOS using the default MSI Boot menu key if you are having difficulty to boot into BIOS.
Conclusion
Secure boot is a process that helps to ensure that the software on your computer is legitimate and has not been tampered with.
It does this by verifying that the software is signed by a trusted authority. This process can help protect your computer against malware and other attacks.
However, it can also prevent you from installing software that is not authorized by the manufacturer.
Overall, secure boot provides an extra level of security for your computer, but it may also limit your ability to install certain programs.
We hope this article has helped you understand what secure boot is and how to enable it on your MSI motherboard.
Have you tried using secure boot on your computer? What were your results?
