I have been struggling with this on and off for a while now. I know where I need to go to enable intel trusted nonsense, disable the CSM, making sure my bios is up to date, but no matter what I try, once I save my settings Windows refuses to boot completely. It eventually attempts to repair and I have to reboot, rinse and repeat. I try for a few days then give up and say Windows 10 is fine, why bother, and forget about it for months. I know I'm missing something but this post at least gives me hope that I'll figure it out eventually!

Hi Alireza. I'm Greg, 10 years awarded Windows MVP, specializing in Installation, Performance, Troubleshooting and Activation, here to help you.

There's a November 2021 BIOS Update here if yours is not updated:

https://www.asus.com/Motherboards-Components/Mo...

Then you can read the Manual here to find out how to enable Secure Boot:

https://www.asus.com/Motherboards-Components/Mo...

If it's still not clear then contact Asus Support to find out how to enable Secure Boot on your BIOS:

https://www.asus.com/support/

You can also ask in Asus forums:

https://blog.feedspot.com/asus_forums/

Is Windows presently installed in UEFI mode, as this can make a big difference in Secure Boot showing up? If you're unsure type System Information in Search, open and look for BIOS mode.

If not installed to UEFI I'd consider reinstalling to UEFI either with WIndows 10 doing this gold standard Clean Install which includes everything that works best in Windows 10: http://answers.microsoft.com/en-us/windows/wiki...

or do a Windows 11 Clean Install:

https://www.groovypost.com/howto/clean-install-...

https://pureinfotech.com/clean-install-windows-11/

Make sure to create the bootable media using Media Creation Tool only, boot the media as a UEFI device, delete all partitions down to Unallocated Space to clear formatting, then select the Unallocated Space and click Next to let the installer create and format the needed partitions - which makes it foolproof.

Feel free to ask back any questions. If you'll report back results for each step it can help determine what else needs to be tried. I will stick with you until it is fixed.

______________________________________________

Standard Disclaimer: There are links to non-Microsoft websites. The pages appear to be providing accurate, safe information. Watch out for ads on the sites that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the sites before you decide to download and install it.

Secure Boot is a security feature in modern computers that ensures only trusted software (like the operating system or firmware) can load during the boot process. It is part of the UEFI standard and helps prevent malware or unauthorized software from running at startup. And it is required by Windows 11!How to Check if Your PC Has Secure Boot Enabled1. Press Win + R, type 'msinfo32', and hit Enter.2. Look for "Secure Boot State" in the right panel.3. If it says "On", Secure Boot is enabled.4. If it says "Off" or "Unsupported", your PC either doesn’t support it or it’s disabled in BIOS/UEFI.Why Secure Boot Matters for Windows 11Prevents rootkits and bootkits from infecting the boot process.Required for Windows 11 (must be enabled to install).Enhances security against low-level malware.TroubleshootingIf Secure Boot is unsupported, your PC may be using Legacy BIOS instead of UEFI.Some Linux distributions may need additional steps to work with Secure Boot. To fix "The PC must support secure boot" error, you need to turn on Secure Boot or apply some trick to skip Windows 11 system check as the PC has a very powerful CPU and a lot of RAM.

I’ve been searching for hours, I finally can play valorant again lol. Thank you!!

Too iterate more on what redxps said:  I have an 'unsupported' Precision 3420 with Win11.  It only did a few updates and that's it.  It won't update to any new versions.  Due to such, I run my own security on it.  To get the full experience of Win11, it's best to have an 8th Gen or newer PC.  You might know - this was decided by Microsoft.