I’m concerned that I won’t be able to do this process cause I have the exact same board and I’m worried about turning it on with Windows 10 to be able to play battlefield six because I don’t wanna mess up any of the configuration that makes my computer run as well as as good as it does Answer from TheDukeAssassin on reddit.com
🌐
Reddit
reddit.com › r/asus › asus x570 tuf gaming plus wifi (secure boot/windows 11 issue)
r/ASUS on Reddit: ASUS X570 TUF Gaming Plus WiFi (Secure Boot/Windows 11 issue)
February 15, 2022 -

I"m having a hard time getting everything checked so I can install Windows 11. The core issue is this part

" To change these settings, you will need to switch the PC boot mode from one enabled as “Legacy” BIOS (also known as “CSM” Mode) to UEFI/BIOS (Unified Extensible Firmware Interface). In some cases, there are options to enable both UEFI and Legacy/CSM. If so, you will need to choose for UEFI to be the first or only option."

When I change it to UEFI only for Boot Device Control, then I do not get any boot options available.

The bios system still reads the hard drives, just says that no bootable devices are found.

I use a Samsung 980 NVMe for the OS, and also have one 850 EVO and 850 Pro Sata.

I have updated the BIOS to the latest as well (same issue remains w/ no bootable devices found), where it says nothing should have to be done for Windows 11.

Thanks for any assistance.

*edit, I found something related to MBR to GPT, seeing if this applies to my situation*

*edit 2: it is solved now, converted to GPT using the command through the cmd*

Top answer
1 of 2
1
What do you mean by converted to GPT? I’m having a similar issue
2 of 2
1
SOLVED: I know this post is old and somehow this help me find more information about my issue, but still it doesn't have the complete information about it so, I decide to post a little bit more of explanation. I've been struggling with my PC these days to get the BIOS set up the way Windows 11 wants so that it lets me upgrade. I have the TUF GAMING X570 PLUS WIFI, RYZEN 7, DISK SSD 1TB , DISK HHD 2 TB, Windows 10. This is what I found and what worked in my case: the two validations that I need it to active were: the Security boot (in my case was off) and the firmware TPM 2.0. For thee TPM, was easy, I follow this : "Asus X570 TUF Gaming Plus has TPM 2.0. BIOS> Advanced> AMD fTPM Configuration> Select TPM device: change from "Enable Discrete TPM" to "Enable Firmware TPM". ( https://forums.tomshardware.com/threads/tpm-on-asus-mb.3710916/ ) The problem starts when I try to activate the security boot. I try to set up as follows https://www.asus.com/ca-en/support/faq/1049829/ , but when I boot the pc again, in the system information Security boot appears as "unsupported" :( It seems that, the boot disk wasn't format in the way it should be. My disk was in MRB instead of GPT. So, I try this https://www.windowscentral.com/how-convert-mbr-disk-gpt-move-bios-uefi-windows-10 . I made a copy of the disk in case everything goes wrong. But it didn't work, cause mbr2gpt WORK ONLY IN THE disk marked for the bios as Disc 0. And it seems that the motherboard give priority to the SATA ports and mark it as disc 0, instead of the M2 ports (mark as disc 1). I have my boot in the Disc SSD in the M2 port, So, the program couldn't find the right partition to apply the change. So.... The only way to organize the list is disconnecting the hhd, and restarting with only one disk connected, in this case, the SSD M2. At this point, you could try again the instructions in the point 3 above, or reinstall Windows 10, as I did. But before re-installing windows GO TO THE BIOS and preset the configurations so at the moment windows is installing, it would take the right format for the disk. Go to the bios , Advanced > boot > CSM (compatibility Support Module) > boot device control > UEFI only (optional, you can use UEFI and Legacy OPROM option too). In the same menu you're going to find "Security boot", select the option Windows UEFI mode. After that, go to system information, and see if the BIOS MODE : UEFI, SECURITY BOOT STATE : ON, And in your disk manager, in the disc that you use for boot should be formatted as: partition style: GUID partition table (GPT)
🌐
Asus
asus.com › us › support › faq › 1049829
[Motherboard] How to enable or disable Secure Boot ? | Official Support | ASUS USA
Send the page link to your email · Please enter your email
Videos
🌐 YouTube
Enable Secure Boot & UEFI | ASUS TUF - YouTube
August 13, 2025
05:39
🌐 YouTube
How To Turn On Secure Boot | Step by Step Guide | Asus, Asrock, ...
August 8, 2025
01:00
🌐 YouTube
Enable Secure Boot in a Snap: ASUS Motherboards with Ease! - YouTube
February 24, 2023
389K
🌐 youtube.com
This PC Cant Run Windows 11 - Asus Motherboard easy FIX!!
View all
View all
People also ask
[Motherboard] How to enable or disable Secure Boot ?

Content

Set Secure Boot state

Check Secure Boot state

 

 

(For example: ROG MAXIMUS Z790 HERO)

Set Secure Boot state

 

1. Power on the system and press [Delete] key to enter BIOS [Advanced Mode] as below picture

 

2. Click [Boot] as below picture

 

3. Click [Secure Boot] option as below picture

 

4. OS Type Default is Other OS

Other OS: Secure Boot state is off

Windows UEFI mode: Secure Boot state is on

 

5. Secure Boot state as below

Secure Boot State：The option is in gray as default and can't manually set. It is synced with Secure Boot Keys

 

User: with Secure Boot Keys

Setup: no Secure Boot Keys

The Key Management is in gray when Secure Boot Mode is set to Standard

Secure Boot State in BIOSOS TypeSecure Boot ModeKey ManagementSecure Boot State in operating system
UserOther OSCustomerDefaultOff
UserOther OSStandardN/AOff
SetupOther OSCustomerClear Secure Boot KeysOff
SetupWindows UEFI modeCustomerClear Secure Boot KeysOff
UserWindows UEFI modeCustomerDefaultOn
UserWindows UEFI modeStandardN/AOn

 

 

Check Secure Boot state

1. Press [WIN]+[R] key together and then input msinfo32 as below picture

 

2. Find [Secure Boot State] option. If it shows as Off , it means Secure Boot is disabled.

 

If it shows as On, it means Secure Boot is Enabled.

🌐
asus.com
asus.com › us › support › faq › 1049829
[Motherboard] How to enable or disable Secure Boot ? | Official ...
[Motherboard]How to install Windows 11？

If you want to install Windows 11 on ASUS Motherboard, please follow below steps:

1. Please confirm your Motherboard support Windows 11 or not, please refer to ASUS Motherboards Ready for Windows 11

2. Please enable BIOS TPM item with below two methods to support Windows 11:

 

Method 1：

Please download and update BIOS to the latest version from ASUS website. This BIOS vesion set TPM default enable to support Windows 11. For example：TUF GAMIING X570-PLUS (WI-FI) as below

Please refer to FAQ: How to update BIOS of the motherboard ?

Method 2：

Set TPM item to enable. Please refer to FAQ: How to setup TPM 2.0 in BIOS?

3. Please prepare a USB storage stick with more than 8 GB to make Windows 11 system installation flash drive (USB). Please refer to：How to create Windows 11 Installation Media?

4. Plug the USB storage stick to USB port. Power on the system and press F8 key until you see the below screen. Select [UEFI:USB stick] and press Enter key

5. Enter the Windows Installation step. After selecting the language, time and input method, click [Next].

6. Check [I accept the license agreement] → click [Next]

7. If you reinstall operating system, please select [Custom: Install Windows Only]

  For Windows11 , please select [Upgrade:Install Windows and keep files ,settings, and applications]

   Select [Custom: Install Windows Only]

8. After selecting [Disk Drive 0] partition → Click [Next]

9. Wait for the installation file to be copied. After the installation completes, Windows will automatically restart and start the initial settings

10. After Windows 11 installation completes, enter Windows 11 operate system as below

 

Q&A

Q: Why does the warning "This PC can't run Windows 11" as below picture occur ?

A: The reasons why this issue occurs are listed below：

1. You might not select the UEFI USB Flash Drive duing F8 Boot. Please follow step 4 and select UEFI:USB Flash Drive

2. You might not enable TPM option. Please follow step 2 to enable TPM option in BIOS setup

🌐
asus.com
asus.com › us › support › faq › 1046970
[Motherboard]How to install Windows 11？ | Official Support | ...
🌐
Reddit
reddit.com › r/asus › asus tuf gaming x570 plus wifi - uefi compatible?
r/ASUS on Reddit: ASUS TUF Gaming x570 plus wifi - UEFI compatible?
June 28, 2021 -

In looking into upgrading to windows 11, I learned that I would need to enable secure boot on my pc, which would require switching from legacy boot to UEFI boot. This apparently is not as easy as it would seem and every indication (setupact.log, system information) is telling me I'm using BIOS instead of UEFI. I'm trying to figure out if my motherboard is UEFI compatible, and if it is, how do I switch over? Thanks!

Top answer
1 of 3
1
I’m concerned that I won’t be able to do this process cause I have the exact same board and I’m worried about turning it on with Windows 10 to be able to play battlefield six because I don’t wanna mess up any of the configuration that makes my computer run as well as as good as it does
2 of 3
1
https://www.windowscentral.com/how-convert-mbr-disk-gpt-move-bios-uefi-windows-10 of course your board is UEFI compatible, and actually UEFI mode is the default of like all boards made since 2010 so it's pretty odd that you managed to install it in BIOS (legacy) mode in the first place. after converting your disk to GPT (yes, you have to do this, turning off CSM wont allow you to boot with a MSDOS partition table), go into your bios with the DEL key on power on and head to the Boot Options section, turn off CSM, set Secure Boot to either Other or Windows, and then exit and save and you're done maybe back up like everything important to another drive/usb stick before you start, who knows what nightmares a partition table conversion could give you, can't say I've ever tried it myself next time you decide to install Windows make sure CSM is off in the bios so you don't accidentally boot into legacy system install mode...oh wait, that's probably gone with Windows 11 :) I should probably mention that if you plan on doing a completely fresh install and not saving anything at all, you can completely skip the whole converting to GPT part as the fresh install option in Windows' installer will just wipe the disk's partition table clean anyway. If for some insane reason the installer won't proceed due to the MSDOS table on the drive, you can press Shift+F10 to open up a command window in the installer, type "diskpart", press enter, type "list disk", find the drive you want to install to (probably disk 0), "select disk 0", then "clean". THIS WILL DESTROY ALL DATA ON THE DRIVE. (sort of, it will be hard to recover without the partition tables) After running that the partition table will be gone and you can reboot the installer.
🌐
Reddit
reddit.com › r/asusrog › enabled secure boot [windows 11 prep]
r/ASUSROG on Reddit: Enabled Secure Boot [Windows 11 Prep]
October 6, 2021 -

Hello, I'm trying to prep my pc for windows 11.I have a an ASUS Tuf Gaming x570-PLUS (WI-FI) mother board.

I downloaded 'PC Health Check' tool from windows.

I updated my BIOS to v4021. However I'm still getting an error that my 'PC must support Secure Boot'

I double checked in the in BIOS and it looked enabled with the Windows UEFI mode turned on.I've restarted my pc multiple times and still nothing.

Some PC Info:
Motherboard: ASUS Tuf Gaming x570-PLUS (WI-FI) BIOS v4021

Storage: SAMSUNG E 1TB 860 EVO 2.5 SATA3 SSD

CPU: AMD RYZEN 7 3800X WRAITHP

Memory: CRUCIAL 32GB 8X4 D4 3200 CL16 B

Images:

bios

pc health check error
Top answer
1 of 2
1
Did you figure this out? Having same problem…. Then Pc stopped booting on 4021
2 of 2
1
So i have updated the bois, then i have converted the disc from mbr2gpt opening command line with administrative privilages, then: gpt2mbr /convert /allowfullos After that going inside boot Compatibility: choose uefi only to all. Hope that this helps
🌐
Tom's Hardware Forum
forums.tomshardware.com › home › motherboards
[SOLVED] - Tuf-Gaming X570-PLUS won't POST | Tom's Hardware Forum
September 24, 2021 - Click to expand... Maybe I should have done this Secure Boot is a UEFI mode-only feature. You will be unable to upgrade to Windows 11 without performing a clean install unless you use MBR2GPT and enable Secure Boot.
🌐
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 5850971 › asus-tuf-gaming-x570-enabled-tpm-2-0-and-secure-bo
ASUS Tuf Gaming x570+ - enabled TPM 2.0 and Secure Boot, still can't install Win11 - Microsoft Q&A
Top answer
1 of 2
1

Hi,

Do the following: download PC Check Health, take a screenshot, and post a picture of your PC here:

https://support.microsoft.com/en-us/windows/como-usar-o-aplicativo-verifica%C3%A7%C3%A3o-de-integridade-do-pc-9c8abd9b-03ba-4e67-81ef-36f37caa7844

Thanks

2 of 2
0

Windows 11 requires that the device be UEFI- and Secure Boot–capable, have TPM 2.0, and meet the other minimum hardware requirements (CPU, RAM, storage, graphics, display, and Windows version) before Windows Update or the Installation Assistant will allow the upgrade.

From the described configuration:

  • Firmware TPM 2.0 is enabled and visible in tpm.msc.
  • Secure Boot is enabled in UEFI and reported as active in Windows.

In this situation, the remaining checks to focus on are:

  1. Confirm UEFI (no Legacy/CSM) and Secure Boot mode
    • In UEFI firmware, ensure the system is not booting in Legacy/CSM mode. The firmware must be set to UEFI mode, with Secure Boot capability enabled. Some systems allow both Legacy and UEFI; in that case, UEFI must be the first or only option.
    • If needed, use the Windows path to UEFI settings:
      1. Open Settings > System > Recovery.
      2. Under Advanced startup, select Restart now.
      3. On the blue screen, select Troubleshoot > Advanced options > UEFI Firmware Settings and then Restart.
    • In the firmware menus, verify that Secure Boot is enabled and that the system is booting in UEFI mode, not Legacy/CSM.
  2. Verify all Windows 11 minimum requirements
    • Storage: At least a 64 GB or larger storage device must be present.
    • System firmware: UEFI and Secure Boot capable (already configured, but must be recognized as such by Windows).
    • TPM: TPM 2.0 (already confirmed via tpm.msc).
    • Graphics: DirectX 12–compatible with WDDM 2.0 driver.
    • Display: 720p or higher, >9" diagonal, 8 bits per color channel.
    • Windows version: The current OS must be Windows 10, version 2004 or later, to upgrade via Windows Update.
  3. Use firmware menus to confirm boot mode
    • If there is still doubt about the boot mode, use the firmware boot menu to see how the OS drive is listed. For example, entries like UEFI: indicate UEFI mode. If only BIOS/Legacy entries appear, the system may still be in Legacy mode, which will block Windows 11.

If any of these checks fail (for example, the system is actually booting in Legacy/CSM mode or the current Windows 10 version is older than 2004), Windows Update and the Installation Assistant will continue to report that the device does not meet requirements even if TPM 2.0 and Secure Boot appear active.

References:

  • Windows 11 System Requirements
  • Windows 11 and Secure Boot
  • Boot to UEFI Mode or legacy BIOS mode
🌐
Asus
asus.com › us › support › faq › 1046970
[Motherboard]How to install Windows 11？ | Official Support | ASUS USA
[Motherboard] How to set the boot device priorities on the motherboard ... 1. Please confirm your Motherboard support Windows 11 or not, please refer to ASUS Motherboards Ready for Windows 11 · 2. Please enable BIOS TPM item with below two methods to support Windows 11: ... Please download and update BIOS to the latest version from ASUS website. This BIOS vesion set TPM default · enable to support Windows 11. For example：TUF GAMIING X570-PLUS (WI-FI) as below
Find elsewhere
🌐
Asus
asus.com › us › support › faq › 1055973
[Motherboard]Fix FPS Game Launch Errors: Enable Secure Boot and Update TPM 2.0 (fTPM) on Windows PCs | Official Support | ASUS USA
Ryzen 1000 and Ryzen Threadripper 1000 series processors are not included in the list of compatible processors for Windows 11.
🌐
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 4026426 › secure-boot-enabled-in-bios-but-not-seen-by-window
Secure Boot Enabled in BIOS, but not seen by Windows 11 - Microsoft Q&A
May 10, 2024 - the dual boot comes later. windows is able to set it while you install the second Os: but i can't install w11 on the new disk. because it fails: secure boot is not active, even if i turned it on, UEFI ONLY, in the bios of the asus x570 crosshair viii
🌐
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 5754554 › tuf-gaming-x570-plus-win-11-update-failure
tuf gaming x570 plus win 11 update failure - Microsoft Q&A
February 1, 2026 - To troubleshoot the issue of your ... is enabled, it may not be the correct version. Verify Secure Boot: Double-check that Secure Boot is enabled in the BIOS....
🌐
Asus
rog-forum.asus.com › t5 › amd-500-400-series › x570-plus-uefi-not-booting-legacy-boot-option-required-to-boot › td-p › 1090646
X570 Plus UEFI not booting (legacy boot option required to boot): Win11 compatibility issues
April 15, 2025 - Hi, The Win11 compatibility checker says my X570 system is non-compliant. The issue seems to revolve around secure boot https://support.microsoft.com/en-us/windows/windows-11-and-secure-boot-a8ff1202-c0d9-42f5-940f-843abef64fad The BIOS is currently set to CSM/legacy support & UEFI but the MS suppo...
🌐
Asus
asus.com › us › support › faq › 1050047
How to Enable/Disable Secure Boot | Official Support | ASUS USA
3 weeks ago - Send the page link to your email · Please enter your email
🌐
Super User
superuser.com › questions › 1734315 › how-do-i-turn-secure-boot-off-in-uefi-bios-on-an-asus-tuf-gaming-board
How do I turn secure boot off in UEFI BIOS on an ASUS TUF Gaming board? - Super User
Top answer
1 of 2
7

It turns out that "setup" does in fact equate to "disabled".

The steps above are functional, and one can verify this with:

  • In a unix system, either of
    • mokutil --sb-state
    • or dmesg | grep -E 'secure|nvidia'
  • In windows:
    • https://docs.microsoft.com/en-us/mem/intune/user-help/you-need-to-enable-secure-boot-windows
2 of 2
0

No. Here is the correct answer: Change OS Type to Other OS

See: https://www.asus.com/us/support/faq/1049829/

Note: Some newer Asus Bioses allow you to just toggle Secure Boot On and Off. Note: You can also try enabling CSM "Compatibility Support Module"

🌐
Asus
rog-forum.asus.com › t5 › amd-500-400-series › how-to-setup-secureboot-on-assus-tuf-gaming-x570-plus › td-p › 1103524
How to setup SecureBoot on Assus TUF Gaming X570 Plus Motherboard
June 21, 2025 - How to setup SecureBoot on Assus TUF Gaming X570 P... ... Hello, been using this motherboard for like 5 years, I used to run Windows 10 on that, but I am trying to run linux based distro. All my kernel modules and software has already been signed with my custom keys that I generated. So when I setup the keys to enable the SecurBoot, the window for Secure boot in BIOS states that the boot is secured, except the PK key is still saying "unloaded".
🌐
Reddit
reddit.com › r/asus › is it possible to upgrade to windows 11 on the x570-plus-wifi motherboard?
r/ASUS on Reddit: Is it possible to upgrade to Windows 11 on the X570-PLUS-WIFI motherboard?
November 25, 2024 -

Hi all,

I'm trying to upgrade my PC to Windows 11, but the Windows PC Health Check app says I need to enable Secure Boot and TPM 2.0. I have an ASUS X570-PLUS-WIFI motherboard.

I have two questions:

  1. Does the ASUS X570-PLUS-WIFI support Secure Boot and TPM 2.0?

  2. If so, what BIOS settings do I need to change to enable them?

  3. Are there other settings that I'm missing?

I've checked the ASUS website and the motherboard manual, but I haven't been able to find any clear instructions. Any help would be greatly appreciated!

Thanks in advance!

Top answer
1 of 4
1
Hi there! This is a friendly reminder to change your flair to Support - SOLVED! after your issue has been resolved. It is an immense help for those that may come across your same problem in the future so that they can quickly find the right solution. Thank you! I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
2 of 4
1
Yes for sure, I built my son a PC last DEC and used the X570 PLUS WiFi + 5900X and he is running Windows 11 no problem.
🌐
AskWoody
askwoody.com › home › forums › askwoody support › pc hardware › pc hardware-general questions › secure boot with dual boot question
Topic: Secure boot with Dual boot question @ AskWoody
Installed bios TUF GAMING X570-PLUS (WI-FI) BIOS 4408 and after, the unit refused to boot into win 10 even after changing bios to secure boot. Turned off secure boot, no change.Also the grub menu disappeared, replaced with Minimal bash-like command line. Main setup screen sees all hard drives, but win 10 drive is missing from boot menu, only ubuntu remains.
🌐
Asus
asus.com › us › support › faq › 1046215
[Motherboard] Which ASUS model supports Windows 11 and how to setup TPM 2.0 in BIOS? | Official Support | ASUS USA
If your existing Windows 10 PC is running the most current version of Windows 10 and meets the above minimum hardware specifications, it can be upgraded to Windows 11. Aside from system requirements, please do pay attention to the TPM settings on your motherboard. TPM is an international standard for a secure cryptoprocessor that has been around for years.
🌐
Super User
superuser.com › questions › 1762004 › asus-x570-plus-wifi-and-samsung-850-evo-ssd-forced-to-use-csm-and-secure-boot
ASUS X570-PLUS (WIFI) and Samsung 850 EVO SSD, forced to use CSM and Secure Boot not working - Super User
Top answer
1 of 1
2

Solution thanks to Ramhound leading me in the right direction.

I was able to resolve the issue by running mbr2gpt.exe /convert /allowFullOS within the command line with admin access. Windows 11 is now installed!

I followed several other routes at first, this is what worked for me. I then disabled CSM and booted as normal.

🌐
YouTube
youtube.com › davefinito
🛠️ How to Enable Secure Boot in 5 Minutes! | ASUS Motherboards (Intel) - YouTube
05:55
How to Enable Secure Boot in 5 Minutes! // If you received a new PC and for some reason have secure boot disabled, this will help you! Running Windows 10 wit...
Published   February 1, 2024
Views   119K
Related queries
secure boot state unsupported
asus tuf secure boot not active
tuf gaming secure boot (windows 11)
asus secure boot not active
asus tuf gaming x570 plus secure boot windows 11 not working
no secure boot option in bios asus
how to enable secure boot asus windows 11
how to enable secure boot windows 11