How to Enable Secure Boot on Gigabyte Motherboards - AMD and Intel / Convert MBR to GPT Windows 11

hello and welcome back to another punch technology video where we're going to look at how to enable tpm and secure boot on your windows 11 and windows 10 machine not only are we doing it on a windows 10 and a windows 11 machine we're doing it on an older style bios and a newer style gigabyte bios and we're also doing one on intel and one on amd the older style bios we're doing on intel the newer style bios we're doing on amd but you should find that they both generally match either way so should help you find the setting that you're looking for whether or not you're using amd or intel right before we get started with enabling tpm and secure boot we need to check one important thing first and that's to make sure that our hard drive is not formatted in mbr and is formatted in a gpt format the way we're going to check that is by going to our windows tab at the bottom here and going to disk management from here we can select our c drive in the middle we're going to right click on there and go to properties we're then going to click on hardware click on the drive just there click properties again then we're going to click volumes and just down here we need to click populate on this system you can see it set as mbr so this needs to be changed to a gpt format if your system is already formatted as gpt then you can just go straight to this time as you won't need to do this next step for those of you that are on mbr let's follow these steps here to convert our system to a gpt partition what we're going to do is come down to the windows bar down here and click on settings from there we're going to go to update security we're going to click on recovery just here and we're going to press restart now by restarting the pc this way we get 10 to recovery mode on our system and we get to go and use the command prompt once we're in recovery mode we're going to click on troubleshoots advanced options and then we're going to click on command prompt the command that we're going to need to type in first to convert our system to gpt is as follows we're going to type mbr to gpt forward slash validates just like this so that's going to complete the validation successfully now the command that we need to type to actually do the conversion is mbr to gpt forward slash convert so this is going to start the conversion process once this has completed we will continue from there the conversion is completed what we're going to do from here is type exits so this is going to exit out of our command prompt and then we're going to just turn off the pc using this button here so now that the pc is switched off all i'm going to do is switch it back on and check that our partition is now set to gpt the pc is just rebooted what we're going to do is right click on our windows key go to disk management like before right click on our main partition click on properties hardware select the drive click on properties again go to volumes and then click populate as we can see now the drive is partitioned as a gpt drive now that we've converted our drive to a gpt format what we're going to check next is that our tpm and that our secure boot is enabled so let's do that first thing to do is check if secure boot is enabled so what we're going to do is hit the windows key and type system information from here what we're going to do is run as administrator you can do this by right clicking and running as administrator or just clicking on the button right here we're going to click yes from here all we want to do is come down until we find secure boot state which is currently set to off on this computer so that is one thing we're going to have to enable before we go and enable our secure boot we're just going to double check the state of our tpm so i'm just going to minimize this and we're going to check tpm by doing the windows r key to open the run box and we're going to type tpm.msc we're going to press ok and from here we can see that compatible tpm cannot be found so this is another thing that we're going to have to enable so we're going to jump straight into it and we're going to start with the amd bios which is using windows 10 currently so let's jump onto the machine and first thing we're going to do is come down to the start bar just here and click on settings then we're just going to come to updating security we're going to find this recovery button over here click on that and then we're just going to press restart now so what this is going to do is restart our computer into recovery mode from there we can enter the bios so it's now come on to recovery mode we're going to click on troubleshoot advanced options and then click on uefi firmware settings from there we can press restart and now it's going to load up into our bios from which we can enable tpm and our secure boots so remember this is the amd bios so that will show us how to do that from here all we need to do is press f2 to come out of easy mode and into advanced mode from there we want to go to settings miscellaneous and come down to amd cpu ftpm so from here we can select amd cpu ftpm and select enabled the next thing we need to do is find our secure boot so what we're going to do is come over to boot at the top here so when you come into the boot menu if you don't see secure boot as an option it's probably because you still have csm support set to enabled on the computer so what we're going to do is set this to disabled and what this will present to us now is the secure boot menu so we're going to click in this and we're going to change secure boot to enabled just press ok on this message here and then all that's left to do now is press f10 to save and exit so now that the system is rebooting back into windows once it loads we are just going to check to make sure everything has been enabled properly by using a run command which allows us to see all the tpm settings um so as soon as this loads up right here we're going to check that and i'll show you just how to do that right now so now that windows has loaded up we're just going to press windows r on our keyboard this will open our run box and from there we can type in tpm.msc which you can see i've already typed in once already and from there we can see our tpm has been enabled and the most important number is just down here which says version 2.0 has been enabled the final thing that also needs to be checked is to make sure that secure boot has been enabled so we're going to come down to the search bar and type in system information and again run this as administrator once this is opened you can come down to secure boot and you can see that this setting is now also set to on all we're going to do now is switch over to the windows 11 machine which is on the slightly older star bars using intel and we're going to do the exact same process on there so we've just loaded up onto the windows 11 machine just behind me here we're going to enable tpm and secure boots on this machine as well it's a very similar process just the settings at the beginning slightly different and we're going to have a slightly different bios to work through here so to start off on windows 11 we're going to come down to the windows start key and click on settings straight away from the systems tab we're going to go back to that recovery section as we found in windows 10 as well from here we're going to click on restart now and press restart now so this is going to do the exact same thing as it did on the windows 10 machine is going to boot us into recovery mode from where we can go to the uefi firmware settings and enable tpm and secure boots so it's just loaded up into recovery mode we're going to click on troubleshoot go to advanced options and click on uefi firmware settings just there once again exactly the same as windows 10 this is going to take us into the bios and from there we can enable tpm and secure boots we've now entered the bios on this slightly older style motherboard to get to secure boots all we're going to do is click on bios just up here come down to secure boot right at the bottom just there and then we're going to click on secure boot enable and click on enable just here which is going to change this little icon here to enabled we're then going to click on peripherals and then come to intel platform trust technology from there we can double click on this and press enable there as well then what we're going to do is press f10 to save and exits and reboot into windows so once again we're just going to check that this has been enabled properly once we get back into windows we're going to run the run command and look at our tpm settings to check that it has been fully enabled so now that we've loaded back into windows 11 we're going to do the exact same thing as before and use the windows r command and run our tpm.msc to look at the settings from there it will load up and as you can see our version of tpm is enabled and is version 2.0 so we know this is all done correctly that's everything now to get tpm and secure boot enabled on your gigabyte motherboard if this has helped you get through this then make sure to leave a like down below and subscribe to the channel we're going to be uploading a lot more videos very soon that should help you get through your journey on windows 11. without any further ado i'll see you in the next video you

Channel: Rollwith Punch

Views: 440,469

Keywords: tpm, secure boot, how to enable secure boot, MBR to GPT, MBR, GPT, Windows MBR, Windows GPT, how to enable TPM, how to enable secure boot windows 11, how to enable secure boot windows 10, how to enable secure boot on gigabyte motherboard, how to convert mbr to GPT, how to convert mbr to gpt during windows 11 installtion, how to convert mbr to gpt drive, how to convert mbr to gpt while installing, how to enable secure boot from bios, how to enable secure boot from windows, tpm 2.0

Id: lwaIWu_41_0

Length: 11min 3sec (663 seconds)

Published: Tue Apr 05 2022