asus tuf gaming x570 plus secure boot windows 11 command

ASUS TUF Gaming x570 plus wifi - UEFI compatible?

reddit.com › r › ASUS › comments › o9aysu › asus_tuf_gaming_x570_plus_wifi_uefi_compatible

I’m concerned that I won’t be able to do this process cause I have the exact same board and I’m worried about turning it on with Windows 10 to be able to play battlefield six because I don’t wanna mess up any of the configuration that makes my computer run as well as as good as it does Answer from TheDukeAssassin on reddit.com

reddit.com › r/asus › asus x570 tuf gaming plus wifi (secure boot/windows 11 issue)

r/ASUS on Reddit: ASUS X570 TUF Gaming Plus WiFi (Secure Boot/Windows 11 issue)

February 15, 2022 -

I"m having a hard time getting everything checked so I can install Windows 11. The core issue is this part

" To change these settings, you will need to switch the PC boot mode from one enabled as “Legacy” BIOS (also known as “CSM” Mode) to UEFI/BIOS (Unified Extensible Firmware Interface). In some cases, there are options to enable both UEFI and Legacy/CSM. If so, you will need to choose for UEFI to be the first or only option."

When I change it to UEFI only for Boot Device Control, then I do not get any boot options available.

The bios system still reads the hard drives, just says that no bootable devices are found.

I use a Samsung 980 NVMe for the OS, and also have one 850 EVO and 850 Pro Sata.

I have updated the BIOS to the latest as well (same issue remains w/ no bootable devices found), where it says nothing should have to be done for Windows 11.

Thanks for any assistance.

*edit, I found something related to MBR to GPT, seeing if this applies to my situation*

*edit 2: it is solved now, converted to GPT using the command through the cmd*

Top answer

1 of 2

What do you mean by converted to GPT? I’m having a similar issue

2 of 2

SOLVED: I know this post is old and somehow this help me find more information about my issue, but still it doesn't have the complete information about it so, I decide to post a little bit more of explanation. I've been struggling with my PC these days to get the BIOS set up the way Windows 11 wants so that it lets me upgrade. I have the TUF GAMING X570 PLUS WIFI, RYZEN 7, DISK SSD 1TB , DISK HHD 2 TB, Windows 10. This is what I found and what worked in my case: the two validations that I need it to active were: the Security boot (in my case was off) and the firmware TPM 2.0. For thee TPM, was easy, I follow this : "Asus X570 TUF Gaming Plus has TPM 2.0. BIOS> Advanced> AMD fTPM Configuration> Select TPM device: change from "Enable Discrete TPM" to "Enable Firmware TPM". ( https://forums.tomshardware.com/threads/tpm-on-asus-mb.3710916/ ) The problem starts when I try to activate the security boot. I try to set up as follows https://www.asus.com/ca-en/support/faq/1049829/ , but when I boot the pc again, in the system information Security boot appears as "unsupported" :( It seems that, the boot disk wasn't format in the way it should be. My disk was in MRB instead of GPT. So, I try this https://www.windowscentral.com/how-convert-mbr-disk-gpt-move-bios-uefi-windows-10 . I made a copy of the disk in case everything goes wrong. But it didn't work, cause mbr2gpt WORK ONLY IN THE disk marked for the bios as Disc 0. And it seems that the motherboard give priority to the SATA ports and mark it as disc 0, instead of the M2 ports (mark as disc 1). I have my boot in the Disc SSD in the M2 port, So, the program couldn't find the right partition to apply the change. So.... The only way to organize the list is disconnecting the hhd, and restarting with only one disk connected, in this case, the SSD M2. At this point, you could try again the instructions in the point 3 above, or reinstall Windows 10, as I did. But before re-installing windows GO TO THE BIOS and preset the configurations so at the moment windows is installing, it would take the right format for the disk. Go to the bios , Advanced > boot > CSM (compatibility Support Module) > boot device control > UEFI only (optional, you can use UEFI and Legacy OPROM option too). In the same menu you're going to find "Security boot", select the option Windows UEFI mode. After that, go to system information, and see if the BIOS MODE : UEFI, SECURITY BOOT STATE : ON, And in your disk manager, in the disc that you use for boot should be formatted as: partition style: GUID partition table (GPT)

Asus

asus.com › us › support › faq › 1049829

[Motherboard] How to enable or disable Secure Boot ? | Official Support | ASUS USA

Send the page link to your email · Please enter your email

Videos

YouTube

Enable Secure Boot & UEFI | ASUS TUF - YouTube

August 13, 2025

05:39

YouTube

How To Turn On Secure Boot | Step by Step Guide | Asus, Asrock, ...

August 8, 2025

01:00

YouTube

Enable Secure Boot in a Snap: ASUS Motherboards with Ease! - YouTube

February 24, 2023

389K

youtube.com

This PC Cant Run Windows 11 - Asus Motherboard easy FIX!!

View all

People also ask

[Motherboard] How to enable or disable Secure Boot ?

Content

Set Secure Boot state

Check Secure Boot state

(For example: ROG MAXIMUS Z790 HERO)

Set Secure Boot state

1. Power on the system and press [Delete] key to enter BIOS [Advanced Mode] as below picture

2. Click [Boot] as below picture

3. Click [Secure Boot] option as below picture

4. OS Type Default is Other OS

Other OS: Secure Boot state is off

Windows UEFI mode: Secure Boot state is on

5. Secure Boot state as below

Secure Boot State：The option is in gray as default and can't manually set. It is synced with Secure Boot Keys

User: with Secure Boot Keys

Setup: no Secure Boot Keys

The Key Management is in gray when Secure Boot Mode is set to Standard

Secure Boot State in BIOS	OS Type	Secure Boot Mode	Key Management	Secure Boot State in operating system
User	Other OS	Customer	Default	Off
User	Other OS	Standard	N/A	Off
Setup	Other OS	Customer	Clear Secure Boot Keys	Off
Setup	Windows UEFI mode	Customer	Clear Secure Boot Keys	Off
User	Windows UEFI mode	Customer	Default	On
User	Windows UEFI mode	Standard	N/A	On

Check Secure Boot state

1. Press [WIN]+[R] key together and then input msinfo32 as below picture

2. Find [Secure Boot State] option. If it shows as Off , it means Secure Boot is disabled.

If it shows as On, it means Secure Boot is Enabled.

asus.com

asus.com › us › support › faq › 1049829

[Motherboard] How to enable or disable Secure Boot ? | Official ...

[Motherboard]How to install Windows 11？

If you want to install Windows 11 on ASUS Motherboard, please follow below steps:

1. Please confirm your Motherboard support Windows 11 or not, please refer to ASUS Motherboards Ready for Windows 11

2. Please enable BIOS TPM item with below two methods to support Windows 11:

Method 1：

Please download and update BIOS to the latest version from ASUS website. This BIOS vesion set TPM default enable to support Windows 11. For example：TUF GAMIING X570-PLUS (WI-FI) as below

Please refer to FAQ: How to update BIOS of the motherboard ?

Method 2：

Set TPM item to enable. Please refer to FAQ: How to setup TPM 2.0 in BIOS?

3. Please prepare a USB storage stick with more than 8 GB to make Windows 11 system installation flash drive (USB). Please refer to：How to create Windows 11 Installation Media?

4. Plug the USB storage stick to USB port. Power on the system and press F8 key until you see the below screen. Select [UEFI:USB stick] and press Enter key

5. Enter the Windows Installation step. After selecting the language, time and input method, click [Next].

6. Check [I accept the license agreement] → click [Next]

7. If you reinstall operating system, please select [Custom: Install Windows Only]

For Windows11 , please select [Upgrade:Install Windows and keep files ,settings, and applications]

Select [Custom: Install Windows Only]

8. After selecting [Disk Drive 0] partition → Click [Next]

9. Wait for the installation file to be copied. After the installation completes, Windows will automatically restart and start the initial settings

10. After Windows 11 installation completes, enter Windows 11 operate system as below

Q&A

Q: Why does the warning "This PC can't run Windows 11" as below picture occur ?

A: The reasons why this issue occurs are listed below：

1. You might not select the UEFI USB Flash Drive duing F8 Boot. Please follow step 4 and select UEFI:USB Flash Drive

2. You might not enable TPM option. Please follow step 2 to enable TPM option in BIOS setup

asus.com

asus.com › us › support › faq › 1046970

[Motherboard]How to install Windows 11？ | Official Support | ...

reddit.com › r/asusrog › enabled secure boot [windows 11 prep]

r/ASUSROG on Reddit: Enabled Secure Boot [Windows 11 Prep]

October 6, 2021 -

Hello, I'm trying to prep my pc for windows 11.I have a an ASUS Tuf Gaming x570-PLUS (WI-FI) mother board.

I downloaded 'PC Health Check' tool from windows.

I updated my BIOS to v4021. However I'm still getting an error that my 'PC must support Secure Boot'

I double checked in the in BIOS and it looked enabled with the Windows UEFI mode turned on.I've restarted my pc multiple times and still nothing.

Some PC Info:
Motherboard: ASUS Tuf Gaming x570-PLUS (WI-FI) BIOS v4021

Storage: SAMSUNG E 1TB 860 EVO 2.5 SATA3 SSD

CPU: AMD RYZEN 7 3800X WRAITHP

Memory: CRUCIAL 32GB 8X4 D4 3200 CL16 B

Images:

bios

pc health check error

Top answer

1 of 2

Did you figure this out? Having same problem…. Then Pc stopped booting on 4021

2 of 2

So i have updated the bois, then i have converted the disc from mbr2gpt opening command line with administrative privilages, then: gpt2mbr /convert /allowfullos After that going inside boot Compatibility: choose uefi only to all. Hope that this helps

reddit.com › r/asus › asus tuf gaming x570 plus wifi - uefi compatible?

r/ASUS on Reddit: ASUS TUF Gaming x570 plus wifi - UEFI compatible?

June 28, 2021 -

In looking into upgrading to windows 11, I learned that I would need to enable secure boot on my pc, which would require switching from legacy boot to UEFI boot. This apparently is not as easy as it would seem and every indication (setupact.log, system information) is telling me I'm using BIOS instead of UEFI. I'm trying to figure out if my motherboard is UEFI compatible, and if it is, how do I switch over? Thanks!

Top answer

1 of 3

2 of 3

https://www.windowscentral.com/how-convert-mbr-disk-gpt-move-bios-uefi-windows-10 of course your board is UEFI compatible, and actually UEFI mode is the default of like all boards made since 2010 so it's pretty odd that you managed to install it in BIOS (legacy) mode in the first place. after converting your disk to GPT (yes, you have to do this, turning off CSM wont allow you to boot with a MSDOS partition table), go into your bios with the DEL key on power on and head to the Boot Options section, turn off CSM, set Secure Boot to either Other or Windows, and then exit and save and you're done maybe back up like everything important to another drive/usb stick before you start, who knows what nightmares a partition table conversion could give you, can't say I've ever tried it myself next time you decide to install Windows make sure CSM is off in the bios so you don't accidentally boot into legacy system install mode...oh wait, that's probably gone with Windows 11 :) I should probably mention that if you plan on doing a completely fresh install and not saving anything at all, you can completely skip the whole converting to GPT part as the fresh install option in Windows' installer will just wipe the disk's partition table clean anyway. If for some insane reason the installer won't proceed due to the MSDOS table on the drive, you can press Shift+F10 to open up a command window in the installer, type "diskpart", press enter, type "list disk", find the drive you want to install to (probably disk 0), "select disk 0", then "clean". THIS WILL DESTROY ALL DATA ON THE DRIVE. (sort of, it will be hard to recover without the partition tables) After running that the partition table will be gone and you can reboot the installer.

ASUS

asus.com › support › faq › 1055973

[Motherboard]Fix FPS Game Launch Errors: Enable Secure Boot and Update TPM 2.0 (fTPM) on Windows PCs | Official Support | ASUS Global

Ryzen 1000 and Ryzen Threadripper 1000 series processors are not included in the list of compatible processors for Windows 11.

ASUS

asus.com › support › faq › 1050047

How to Enable/Disable Secure Boot | Official Support | ASUS Global

3 weeks ago - Send the page link to your email · Please enter your email

Asus

asus.com › us › support › faq › 1046970

[Motherboard]How to install Windows 11？ | Official Support | ASUS USA

[Motherboard] How to set the boot device priorities on the motherboard ... 1. Please confirm your Motherboard support Windows 11 or not, please refer to ASUS Motherboards Ready for Windows 11 · 2. Please enable BIOS TPM item with below two methods to support Windows 11: ... Please download and update BIOS to the latest version from ASUS website. This BIOS vesion set TPM default · enable to support Windows 11. For example：TUF GAMIING X570-PLUS (WI-FI) as below

Find elsewhere

Google Bing Mojeek

Asus

rog-forum.asus.com › t5 › amd-500-400-series › how-to-setup-secureboot-on-assus-tuf-gaming-x570-plus › td-p › 1103524

How to setup SecureBoot on Assus TUF Gaming X570 Plus Motherboard

June 21, 2025 - All my kernel modules and software has already been signed with my custom keys that I generated. So when I setup the keys to enable the SecurBoot, the window for Secure boot in BIOS states that the boot is secured, except the PK key is still ...

Super User

superuser.com › questions › 1762004 › asus-x570-plus-wifi-and-samsung-850-evo-ssd-forced-to-use-csm-and-secure-boot

ASUS X570-PLUS (WIFI) and Samsung 850 EVO SSD, forced to use CSM and Secure Boot not working - Super User

Top answer

1 of 1

Solution thanks to Ramhound leading me in the right direction.

I was able to resolve the issue by running mbr2gpt.exe /convert /allowFullOS within the command line with admin access. Windows 11 is now installed!

I followed several other routes at first, this is what worked for me. I then disabled CSM and booted as normal.

Microsoft Learn

learn.microsoft.com › en-us › answers › questions › 5850971 › asus-tuf-gaming-x570-enabled-tpm-2-0-and-secure-bo

ASUS Tuf Gaming x570+ - enabled TPM 2.0 and Secure Boot, still can't install Win11 - Microsoft Q&A

Top answer

1 of 2

Hi,

Do the following: download PC Check Health, take a screenshot, and post a picture of your PC here:

https://support.microsoft.com/en-us/windows/como-usar-o-aplicativo-verifica%C3%A7%C3%A3o-de-integridade-do-pc-9c8abd9b-03ba-4e67-81ef-36f37caa7844

Thanks

2 of 2

Windows 11 requires that the device be UEFI- and Secure Boot–capable, have TPM 2.0, and meet the other minimum hardware requirements (CPU, RAM, storage, graphics, display, and Windows version) before Windows Update or the Installation Assistant will allow the upgrade.

From the described configuration:

Firmware TPM 2.0 is enabled and visible in tpm.msc.
Secure Boot is enabled in UEFI and reported as active in Windows.

In this situation, the remaining checks to focus on are:

Confirm UEFI (no Legacy/CSM) and Secure Boot mode
- In UEFI firmware, ensure the system is not booting in Legacy/CSM mode. The firmware must be set to UEFI mode, with Secure Boot capability enabled. Some systems allow both Legacy and UEFI; in that case, UEFI must be the first or only option.
- If needed, use the Windows path to UEFI settings:
  1. Open Settings > System > Recovery.
  2. Under Advanced startup, select Restart now.
  3. On the blue screen, select Troubleshoot > Advanced options > UEFI Firmware Settings and then Restart.
- In the firmware menus, verify that Secure Boot is enabled and that the system is booting in UEFI mode, not Legacy/CSM.
Verify all Windows 11 minimum requirements
- Storage: At least a 64 GB or larger storage device must be present.
- System firmware: UEFI and Secure Boot capable (already configured, but must be recognized as such by Windows).
- TPM: TPM 2.0 (already confirmed via tpm.msc).
- Graphics: DirectX 12–compatible with WDDM 2.0 driver.
- Display: 720p or higher, >9" diagonal, 8 bits per color channel.
- Windows version: The current OS must be Windows 10, version 2004 or later, to upgrade via Windows Update.
Use firmware menus to confirm boot mode
- If there is still doubt about the boot mode, use the firmware boot menu to see how the OS drive is listed. For example, entries like UEFI: indicate UEFI mode. If only BIOS/Legacy entries appear, the system may still be in Legacy mode, which will block Windows 11.

If any of these checks fail (for example, the system is actually booting in Legacy/CSM mode or the current Windows 10 version is older than 2004), Windows Update and the Installation Assistant will continue to report that the device does not meet requirements even if TPM 2.0 and Secure Boot appear active.

References:

Windows 11 System Requirements
Windows 11 and Secure Boot
Boot to UEFI Mode or legacy BIOS mode

Asus

asus.com › us › support › faq › 1046215

[Motherboard] Which ASUS model supports Windows 11 and how to setup TPM 2.0 in BIOS? | Official Support | ASUS USA

AMD motherboards (This paragraph takes ROG X570-E GAMING for example)

Tech News Today

technewstoday.com › home › windows › how to enable or disable secure boot for asus motherboard

How to Enable or Disable Secure Boot for ASUS Motherboard - Tech News Today

September 21, 2022 - Right-click on your disk (with the OS or where you want to install Windows 11) and select Properties.

Tom's Hardware Forum

forums.tomshardware.com › home › motherboards

[SOLVED] - Tuf-Gaming X570-PLUS won't POST | Tom's Hardware Forum

September 24, 2021 - Click to expand... Maybe I should have done this Secure Boot is a UEFI mode-only feature. You will be unable to upgrade to Windows 11 without performing a clean install unless you use MBR2GPT and enable Secure Boot.

Linus Tech Tips

linustechtips.com › software › operating systems › windows

What all do I need to do to set up secure boot? - Windows - Linus Tech Tips

May 10, 2023 - I just finished my first build. I have an ASUS Tuf Gaming X570-Pro Wifi ii. I'm going to install Windows 11. What are all of the steps that I am supposed to take, inside the BIOS, to make sure that Secure Boot is set up properly for Windows 11? Under "Secure Boot," here are my options: OS type (t...

ASUS

dlcdnets.asus.com › pub › ASUS › mb › SocketAM4 › PRIME_X570-P › E15829_PRIME_PRO_TUF_GAMING_X570_Series_BIOS_EM_WEB.pdf pdf

PRIME/PRO/ TUF GAMING X570 Series BIOS Manual Motherboard

User-managed items such as language and boot order. ... Configuration items such as Memory SPD Information, system time and date. ... Click Exit (ESC) or press <Esc> key to close Setup Tree Map screen. ... Go to My Favorites menu to view the saved BIOS items. ... The Security menu items allow you to change the system security settings.

YouTube

youtube.com › davefinito

🛠️ How to Enable Secure Boot in 5 Minutes! | ASUS Motherboards (Intel) - YouTube

05:55

How to Enable Secure Boot in 5 Minutes! // If you received a new PC and for some reason have secure boot disabled, this will help you! Running Windows 10 wit...

Published February 1, 2024

Views 119K

Glarity

askai.glarity.app › search › How-to-enable-Secure-Boot-on-Asus-TUF-X570

How to enable Secure Boot on Asus TUF X570? - Ask and Answer - Glarity

Answer: To enable Secure Boot on your Asus TUF X570 motherboard, follow these steps: 1. **Enter BIOS**: Power on your system and immediately press the **Del** or **F2**

Microsoft Learn

learn.microsoft.com › en-us › answers › questions › 4026426 › secure-boot-enabled-in-bios-but-not-seen-by-window

Secure Boot Enabled in BIOS, but not seen by Windows 11 - Microsoft Q&A

May 10, 2024 - the dual boot comes later. windows is able to set it while you install the second Os: but i can't install w11 on the new disk. because it fails: secure boot is not active, even if i turned it on, UEFI ONLY, in the bios of the asus x570 crosshair viii

AskWoody

askwoody.com › home › forums › askwoody support › pc hardware › pc hardware-general questions › secure boot with dual boot question

Topic: Secure boot with Dual boot question @ AskWoody

Installed bios TUF GAMING X570-PLUS (WI-FI) BIOS 4408 and after, the unit refused to boot into win 10 even after changing bios to secure boot. Turned off secure boot, no change.Also the grub menu disappeared, replaced with Minimal bash-like command line. Main setup screen sees all hard drives, but win 10 drive is missing from boot menu, only ubuntu remains.

reddit.com › r/asustuf › asus tuf trying to enable secure boot for windows 11

r/Asustuf on Reddit: Asus Tuf Trying to enable Secure boot for windows 11

October 28, 2024 -

Hello all, My specs are an asus tuf b550 plus wifi II and a ryzen 7 5800x 8 core. I am having a very difficult time trying to switch legacy to uefi just to enable secure boot in order to update to windows 11. Any help is appreciated as I am totally new to pc. Also any more information i will try to provide as quick as possible. Thank you

Top answer

1 of 1

How many requirements do you meet in order to upgrade to Win11? In any case, upgrading is not really necessary (unless you wouldn't get any more updates for drivers and other software). Check your mobo BIOS version, and look up detailed guides for it.