Trying to upgrade to windows 11 – secure boot issues

Troubleshooting Secure Boot and TPM 2.0 for Windows 11 Upgrade on ASUS TUF B450M-PLUS GAMING Motherboard

Upgrading to Windows 11 promises enhanced security and new features, but certain hardware requirements can pose challenges. One common hurdle involves enabling Secure Boot and TPM 2.0, particularly on systems like the ASUS TUF B450M-PLUS GAMING motherboard. This article provides a comprehensive guide to navigating these settings and resolving typical issues encountered during the upgrade process.

Understanding the Requirements for Windows 11

Microsoft mandates that compatible hardware includes:

Trusted Platform Module (TPM) 2.0
Secure Boot enabled
UEFI firmware with CSM (Compatibility Support Module) either disabled or configured appropriately

These settings ensure a secure boot environment necessary for Windows 11.

Enabling TPM 2.0 and Secure Boot in BIOS

Step 1: Enable TPM 2.0

Restart your computer and enter the BIOS/UEFI firmware settings (commonly by pressing ‘Delete’ or ‘F2’ during startup).
Navigate to the Security tab or Advanced settings.
Locate “TPM” or “Intel PTT” options.
Enable TPM 2.0 or Intel Platform Trust Technology (PTT).
Save changes and exit BIOS.

Step 2: Enable Secure Boot

Reboot and access BIOS.
Locate the Secure Boot menu, often under Boot or Security tabs.
Set Secure Boot to ‘Enabled.’
Save changes.

At this stage, attempting to boot Windows may reveal that Secure Boot isn’t active or recognized, preventing the system from qualifying for Windows 11 upgrade.

Handling the Compatibility Warning: The Role of CSM

Many users, including those with ASUS motherboards, find that enabling Secure Boot alone isn’t sufficient. This is largely due to the Compatibility Support Module (CSM). CSM allows legacy BIOS compatibility and can interfere with Secure Boot’s proper operation.

Critical step: Disable CSM

Within BIOS, locate the CSM setting (may be found under Boot or Advanced menus).
If CSM is enabled, disable it.
When prompted, confirm that the firmware switches from legacy BIOS to UEFI mode.

Important: Disabling CSM often causes the system to stop booting correctly, especially if your drive was previously configured in Legacy mode. If your display goes blank after disabling CSM, follow these tips: