How to Enable TPM & Secure Boot on ASRock Motherboard for Windows 11

🔔 Turn POST NOTIFICATIONS ON so you NEVER miss a video! 🔔❤️
DON'T CLICK THIS 😉 bit.ly/3sFRDvg
How to Enable TPM & Secure Boot on ASRock Motherboard for Windows 11
🐥 Twitter: / limsteven10
📸 Instagram: / limsteven10
✉️ Contact: [e-mail]

[@Chimchimchiree]

I don't understand why it was so difficult to find a written how to guide for this. You made this so much easier than I thought it was going to be. Cheers.

[@hokymerej]

Great video. Helped heaps in my time of need. And if anyone who is reinstalling windows encounters the 'warning: disable csm first' while trying to enable secure boot, head over to boot tab to disable csm then reboot, then enable secure boot. And you can thank windows 11 for that

[@keena5972]

Thank you so much!

[@IntuitiveLegend777]

Thankyou it helped

[@LittleSiss96]

Thanks🎉

[@KassMaster2000]

bruh i worked for days until seeing this. needs to be pinned frfr

[@gaspartorres9075]

I did this and now I can’t get past the asrock screen. Can’t get to the bios menu or nothing it just get stuck

[@heirtothevoid]

You made this so simple, I’m a visual learner and watching you really helped. Thanks man!

[@chubbychickyyt2690]

Honestly love this guy

[@DanielXavierDosReis]

sorry, bro, there's no such thing as a "visual learner"

[@pescado.]

@@DanielXavierDosReis there's multiple types of processing information, monkey see, monkey do is probably what he's referring to. By seeing someone else do it he's able to create meaningful connections to certain buttons helping him learn

[@Lickies-6]

Dude i can't thank you enough for this short video! You solve my problem from being able to launch valorant in Windows 11. I can now enable secure boot just by changing from standard to custom, then back to standard. and now my secure boot is active! THANK YOU!

[@brycec.8790]

who else is here for valorant?

[@shreysandhu3910]

ME BRO. Like why do they think imma cheat. Going so far as to make us go into our bios just to prevent it 😭

[@brycec.8790]

@@shreysandhu3910 Its 100% worth it though, the anti-cheat is amazing, so you almost never see cheaters. CSGO needs this badly every other match has a cheater lol

[@bradleydrew2013]

What a ridiculous requirement

[@Matthewsisinthehouse]

It has to be disabled and custom done for me to install anyway?

[@IamMaki13]

Meeeee

[@jasonianduke4985]

You didn't show that in order to enable Secure Boot, you need to disable CSM. That's what it said in my X570 Phantom Gaming 4 BIOS. Disabling CSM makes my boot drive invisible to BIOS. With both CSM and Secure Boot enabled BIOS can see my boot drive but PC refuses to boot into Windows 10. It boots only to BIOS over and over again. Disabling Secure Boot with CSM enabled lets me boot to Windows 10.

[@Alezord]

Same problem here. Any solutions?

[@Dunklen0Drachen]

Same.

[@0xF81]

If you can't disable CSM maybe you have too old hardware? What is your CPU ?

[@Alezord]

@@0xF81 we can disable csm the problem is that we can't run Windows after that

[@jasonianduke4985]

@@0xF81 ASRock X570 Phantom Gaming 4 motherboard and Ryzen 3700X CPU

[@laksmanraveendrakumar9910]

Lim you can’t jus play off posting bare videos while being gone for a week. HOW ARE YOU WELCOME BACK KING 👑

[@StevenLim_]

Appreciate it QUEEN 👸

[@levaya_papaya]

asrock steel legend b450 user here: I had followed all of these steps before finding this guide, but PC Health Check is still telling me that I need to enable Secure Boot before I can update to Windows 11. Any help?

[@armzies3085]

I also have the same problem. Waiting for some reply to help this TT

[@AndikaNugraha]

me too, using B450M has same issue

[@gilltoby64]

Glad I’m not the only one, really annoying though so glad if somebody knows a fix :/

[@Rikkzera]

same problem

[@clydegallaza5220]

H yes, I'm not alone

[@hipBob01]

Nice. I first needed to install platform key defaults. Did that, and was able to turn on secure boot without changing from custom, but your vid lead me the final leg by going to that AMD fTPM option. So slightly different path but appreciate your guide

[@CbrF4i600cc]

Maybe this is what I have to do? How do I know?

[@radeeo1658]

Two years later you’re still saving lives. Thank you 🙏

[@shambodasofficial]

Easy... simple..... Short... to the point.... Worked so well... Thanks man ❤️

[@StevenLim_]

Glad I was able to help :)

[@jffffff]

@@StevenLim_ thank you bro

[@RIOTVIRUS]

Thank so much dude!! I was having issues playing valorant because of a damn error code regarding TPM 2.0 and secure boot and this fixed it! 😭😭 You da real MVP!

[@dhm-2920]

Bro you saved me , I couldn't turn on secure boot but this helped me so much

[@Dylbog]

thank you!! I couldn’t find a way to enable secure boot and every tutorial said to download the secure keys from the factory but that then stopped my pc from posting. Had to clear CMOS like 3 times until I found this video. Thanks!

[@emileedelaisse6465]

Thanks so much! Made it super clear and easy to understand.

[@bryanrios9586]

literally love u bro i tried so many videos cuz i couldn’t even open valorant but now i can, thank u bro

[@jeffgump9849]

Bro thank you so much man I’ve been lookin for something like this for a while much love brother

[@horsza]

Thank you so much bro! You were the only person who helped me with this. Nobody said that I need to change Secure Boot Mode to Standard!

[@kristentuazon9894]

Bro I need help, I have done the same process as you did, and I have successfully enabled secureboot and ftpm, but unfortunately, once I hit save and exit, it keeps on booting me on the bios.

[@Gamer4life29]

I’m stuck here too! Did you Manage to solve it?

[@bryacmee]

Thank you so much. Everyone else just made it the most complicated explanation ever. This was easy to follow tho

[@sureshsharmaph8140]

i ve tried but its still saying enable secure boot ... need help ... my motherboard is asrock b450m-hdv

[@kenjinakachi6671]

The only video that fixed my problem. Thanks so much!

[@KurtiZv]

I followed instructions now my PC always starts in BIOS and doesn't boot

[@wyattsoto1690]

Doomed mf

[@kmkween_4205]

So I did all of that but when I save and exit it just reload up my bios again.

[@BlindBison]

Bump thanks for this you’re the man - prepping my rig for official Win 11 release.

[@stevenortiz4094]

Thank you so much I didn’t see any other videos that explained my situation well you literally saved me

[@SakibReza-xv6ow]

This video was very helpful ❤️‍🔥 worked for me tried to boot for 6h didnt worked but after this video I finally did it 💓 thanks a lot

[@osango310]

Super helpful and easy to follow, even as a Luddite. Thanks!

[@bfuh_055]

Thank you so much, I've spent hours trying to figure this out and you fixed the issue for me within 3 minutes.

[@rahmij2]

am i the only one who doesn’t see this when you click cpu configurations? i have a bunch of different options

[@digitalmarketinghumans]

I can’t see it either

[@rahmij2]

@@digitalmarketinghumans i actually managed to find it yesterday, what i had to do was go to the boot menu at the top and then scroll down all the way to the bottom. then you’ll see the csm setting, turn it off and then save and exit. then go back in on startup and turn on secure boot and it should work. i have an asrock b360 if that makes a difference. also, make sure your in advanced mode (should be a button at the top right, and i think but don’t take my word for it, you can also click f6 to change it)

[@boi8380]

@@rahmij2 I was able to follow these instructions well up until some point where my computer would not boot up and would simply return to the UEFI screen, I changed back my settings and was able to access my computer again but I'm not sure how to enable this without locking my computer out lol, (also im not asking for help from a random stranger, just telling you what happened to me)

[@boi8380]

@@rahmij2 update: I was able to boot the computer with secure boot being checked on in the uefi setup however it had no affect on the windows 11 checking system. meaning it was still indicating secure boot as disabled so, yeah

[@TRiNFleX]

@@boi8380 Same thing for me I turned secure boot on but it still says it’s not activated in the win11 checl

[@nickhall7793]

Did this so quickly with your help. Thanks so much

[@BurkeFahlman]

HUGE help. Just subbed and liked the video. Thanks man.

[@CrónicasEmocionantesOficial]

I'm trying to leave these settings so that the computer is enabled to install windows 11, my motherboard is the same as the video, I do all the configuration presented in the video, but when the computer restarts it always goes back to the setup is in this loop. know what might be going on.

[@jeanbadu68]

I have the same problem. I think it is necessary to have a GPT partition on the boot disk (instead of MBR). It is possible to convert it with the mbr2gpt program (on cmd), but I'm kind of afraid to do this ..

[@churchofcreation8888]

I followed your instructions and when i boot up my pc after its enabled it sends me to the bios everytime. What should i do to get it to boot into windows?

[@BlueRobotMiner]

Another tip for you guys some is a rock motherboards require that you disable CSM to enable secure boot it's found in the boot section and then at the bottom CSM Then at the very top click disabled.

[@BlueRobotMiner]

Okay I just found out you may not want to do this unless you know more research because it will lower your RAM and then your applications won't work anymore they were crash immediately so be careful and you disable this

[@loco58]

@@BlueRobotMiner I’m in the same boat, so basically I can’t play val if I don’t turn of csm?

[@mikesavad]

i was pretty sure the drive also had to be formatted a certain way. Otherwise the bios setting may not make the computer boot up again.

[@Fred_sports]

bro i was struggling for an hour. thank you for this 🙏

[@mdp720]

This helped me get rid of the TPM warning, but mine still says I don't have Secure Boot enabled, even though I do. I'm not sure what to do from here because it _should_ be reading it just fine. I might have to repair Win10 just so I can install Win11, which is kind of dumb.

[@gabrielmartinez2225]

thanks so much man you don’t know how much this helped

[@ThisIsZaz]

Thanks your the only one who actually helps like not even asrock does it well

[@jeffhansman2829]

Many thanks. One note: my Asrock motherboard did NOT have a TPM module installed, so I had to buy on off Amazon ($20) first, install it, and then make the modifications in BIOS. Before installing the module, none of the options shown in this vid were available to me.

[@chillaxorus8327]

Thanks for the help Steven and Happy birthday bro ❤

[@Pipe_S04]

i enabled it but in the PC-Health checker where you can see if its enabled it says that its disabled, you know why? (I have everything set as you said)

[@ctorres0620]

I HAVE THE SAME PROBLEM

[@tylerzimmerman7120]

Same

[@sonarfreq]

Same problem here too! ???

[@JFinns]

Thanks, worked great on my Asrock B550 motherboard. Updated it to the latest BIOS for AGESA 1.2.0.3 was I was at it. Ready for Windows 11.

[@ceezrs]

Bro thank you you literally saved my life, I watched a video before yours and they missed a step you included and it fucked my pc up

[@Steamrick]

Thanks. Initially I just wanted to know where the ASRock has hidden the ftpm settings, but your instructions regarding SecureBoot saved me a bunch of annoyance. Very helpful!

[@onceuponafatass]

Thank you so much! A lot easier when I have a visual aid

[@ApplesRgud]

Holy fuck you just saved my life! May good blessings come your way brother

[@racketyjack7621]

Thank you Steven, well done. Good video that got me squared away. 👍

[@sourabhchoubey3303]

Very easy explanation specifically for asrock MB

[@davidj7666]

THIS WAS SO HELPFULL, thank you

[@mariahcurry6857]

Thank you so much, other videos almost had me restore my pc!

[@sethlaww]

I'm using pc health as a reference, tpm is gtg however, after enabling secure boot in my bios, im still getting prompted that secure boot needs enabled / pc doesn't meet requirements. Which it does..

[@LeRoiAdibou]

hey ! I have the same issue, did you managed to fix the issue ?

[@realaidenthomas]

You're the best been trying to figure the tpm for a while bro

[@OffiGameWave]

and still it says i don't have secure boot enabled even though it is :/

[@Darkrikou62]

Me too

[@slyseparator7410]

Same here wtf

[@Darkrikou62]

The problem IS with the HDD type of storage, it must be formated with the New type of data.

[@KishNfps]

Go to secure boot then change it to from custom and standard and then turn on secure boot and also this option which is shown in the above video 🙂

[@wodobinbaggins1760]

I've enabled secure boot in the bios but its still saying I don't meet the requirements... any help would be appreciated. Thanks!

[@tristanmack5779]

Same! Did you ever find the remedy??

[@eltoslightfoot6471]

Thank you so much for this. Worked perfectly.

[@operatorverona]

Thank you! It was giving me so much trouble to learn how to make the system let me enable secure boot

[@stephenflack4]

Great help - TPM now enabled thanks to your guide

[@anthonynacinovic5612]

I done the tmo, but when I enable secure boot like you have but the PC health check says it not enabled

[@PBI01-NL]

Same for me

[@PBI01-NL]

I got the problem, it has to do with the partition table. Is MBR... needs to be GPT

[@wakdor]

I was in the same situation like you after trying all the steps, PC Health still showed that secure boot is not enabled. But finally managed to get my PC ready for Windows 11. There are 2 steps you need to follow : 1.) * Press Win + R, type “msinfo32” in the blank field, and click on the “Ok” button * From the System Summary check & make sure that your BIOS MODE value = Legacy 2.) Next you need to convert MBR to GPT This is the step that will make Secure Boot on your ASRock Motherboard become active and hence solve your problem You need to follow the instruction from this video : kzbin.info/www/bejne/fqbYeJJ7itSeqdE

[@PBI01-NL]

@@wakdor very good guide! Thank you for the effort☺

[@wakdor]

@Emmanuel Aristov I'm not sure what it really means in Spanish. Anyway to be Windows 11 ready if your Bios Mode is "Legacy" then it needs to be converted to UEFI by following the video in step 2

[@speu77]

Hello, I followed this and have no luck. Every time I enable Secure Boot Windows does not load. Goes right back to UEFI settings. Running Asrock X399 Professional Gaming. Any help is appreciated.

[@coltallen8875]

Same issue

[@speu77]

@@coltallen8875 update… after much troubleshooting I discovered several things. First make sure the hdd/ssd is in GPT and not MBR. Once converted to GPT and changes made in bios, all good and it works.

[@Purzify]

@@speu77 explain more?

[@mouhammedkhaddar2771]

thank you so much, I have been looking for it all day, you saved me a lot of time sir.

[@JelCraft]

TPM worked! After enabling secure boot it still says my system doesn't support secure boot when I try to update windows...

[@StevenLim_]

Mhmmm that's odd. Maybe try updating all your other windows update first. I had a bunch of pending updates before the Windows 11 update.

[@IoannisKotsaridis]

Search in windows for "System Information" open it and check if secure boot is really enabled.

[@JelCraft]

I had no pending win 10 updates. Everything up-to-date (some manual drivers as well) When I go to system information, it actually says my system does not support secure boot, even though I followed the exact steps in the tutorial.

[@jimbokrummy]

Was same me for me. Chances are your boot mode is still legacy. You need to convert to UEFI and then turn off CSM in the bios.

[@LJohnson1220]

​@@JelCraft Same for me

[@erikp9014]

You’re the goat. Thanks man. Super easy.

[@outragedgamer1410]

You also gotta turn off CSM

[@mdlsn2536]

I enable secure boot, but win11 still says u need secure boot im so confused

[@andresflores4914]

i have the same problem :/

[@JackoBanon1]

I got this error after activating this stuff and later upgrading my CPU: fTPM/PSP NV corrupted or fTPM/PSP NV structure changed error after upgrading my CPU. I had this problem on my Taichi x370 mainboard from 2017! I started with a Ryzen 1700X and upgraded it to a 3800XT later. Then I switched to Windows 11 and had to activate all the stuff shown in your video. When I upgraded another time to the 5800X3D this error occured however. What helped was just pressing the Y button and new keys got installed.

[@aliyanabilazahra4678]

I was anable secure boot on BIOS,but when i check on PC health why still disable the secure boot.Whats wrong is that?

[@EvellinDichev]

Follow

[@aliyanabilazahra4678]

@@EvellinDichev follow what?

[@EvellinDichev]

For and answer…

[@laksmanraveendrakumar9910]

I thought it was called where’s Waldo not where’s Steven. WHERE ARE YOU MY KING

[@tzavala1977able]

Thanks man, direct and easy.

[@JVHShack]

The one thing that wasn't shown was how to go about disabling the "CSM" in the boot menu. I had to look that up separately. No real complaints, just noting that the CSM needs to be disabled for the other options to work as shown here.

[@edgarfloresignacio]

I had that CSM problem when doing this and after I disable CSM my M.2 SSD Drives disappears from the list of bootable devices. Can you send me the link on how you manage to fix the issue it might be the fix I am looking for my good sir :)

[@edgarfloresignacio]

I have the X570 Taichi MB and I already updated to the latest BIOS but still says I have to enable secure boot when I try to update to windows 11

[@Alezord]

Same problem here. Help :(

[@juniorpunior]

⁠@@edgarfloresignacioyo my shit doesn’t work either fuck that board tbh but it says there’s something already loaded when i go to turn on secure boot

[@jaedenlindsey2883]

It just takes me right back to the asrock menu I don’t have a windows monitor though

[@noahlevy6073]

Thx so much. I thought I was going to have to go back to window 10.

[@backoffdude6011]

I enabled secure boot as in the video, but PC Health Check still doesn't recognize it as enabled. I've seen another tutorial which says to disable CPM in BIOS, but upon doing so, the PC doesn't boot into Windows. Is PC Health Check broken or do I need to find another fix?

[@JDXOGG]

Well this worked for me. But when I go to settings and updates. It still says. This pc doesn’t meet minimum requirements.

[@haleybreith9094]

Would like to say. Anyone with an ASRock motherboard here for vanguard and league of legends: I was able to access secure boot in the bios/uefi menu after turning on legacy mode. This was in cpu config. Then in boot, secure boot was automatically enabled on standard. Vanguard check passed for league of legends after I saved and stated my pc.

[@Kennyaltair88]

Дякую тобі, золотий ти чоловіче! Дві години вже мучався, не міг зрозуміти що я роблю не так 😅

[@kay9teeth]

i have the secure boot setting the same as in the video bit it still says “not active” underneath

[@LeRoiAdibou]

hey ! Did you manage to make it work ?

[@Sur2eaL]

Thank you! Worked perfectly for me.

[@ForAnAngel]

I computer doesn't work if I turn on secure boot. It just always goes straight back into the bios when I restart it.

[@domc1]

Would this work the same for an Asrock a320m-hdv R4.0 Motherboard? That's what I am currently running.

[@Jose-vb7py]

The best explication very thanks

[@KilianLP]

Straight forward ! Thanks bro

[@Mysticscubing]

Thank you so much it worked 😁👍👍

[@BajanShinobi]

Can’t find ftpm, but my secure boot is enabled already. No idea why Valorant keeps saying it isn’t

[@asmodieous4449]

It just brings me stright back to my bios

[@Chrisbajs]

Same

[@Beast2011ps]

My Asrock B450 pro4 will not let me set the secure boot unless I disable CSM. When I do that it keeps booting up in the bios only, windows will not open until I enable CSM. Any ideas, I upgraded the bios, I installed a Ryzen 4600G CPU.

[@Valcali2024]

You rock thank you for posting this saved me some money

[@Hnry32]

Thank you so much it worked for me steven

[@zmriiix_3492]

This helped me a lot! Thanks!

[@cattleyaaz]

finally a tutorial that actually works thankyouu

[@Rckrkid287]

Very helpful. Thank you sir.

[@ckrisckris]

Not working to me. Every USB port is on, MB can read w10 pendrive, but not w11 - checked in other comp and the pendrive is ok.

[@alaa85hu]

I did the same, and the secure boot is enabled, but when i try to install win 11 it won't work, and gives the same msg

[@MackEZ_]

Thanks, easiest tutorial I've done all day lol

[@plasmaspirit9470]

My shows its enabled but not active do you know how to activate it for ASRock Motherboards?

[@MrPhantom453]

Thanks for this helpful vid!!

[@grzegorzbrzeczyszczykiewic9906]

"Disable the CSM in setup.Repeat operation after reboot to ensure UEFI Video (GOP) driver is operational " help please

[@WatchNev]

When I went to hit enable on secure boot it tells me to disable the CSM in setup. To fix this go to boot, disable CSM, restart, enable Secure boot, restart, enable CSM... but it wont ever let me leave past the BIOS screen to ever boot without setting it all back to the way it was with secure boot disabled

[@LeRoiAdibou]

hey ! were you able to make it work ?

[@WatchNev]

@@LeRoiAdibou yeah I had to update the format type on the drive.

[@LeRoiAdibou]

so, does it mean I have to format my drive ?@@WatchNev

[@LeRoiAdibou]

and to what did you format it ? Mine is currently using NTFS @@WatchNev

[@ChrissonatorOFL]

I had to disable fTPM, because of that one bug, despite it being updated to the latest proper BIOS.