Solved! Is my Secure Boot working or not?

[Skyzoomer]

I bought a MSI Z270-A PRO motherboard and installed Windows 10. When I installed Win10, the BIOS boot was set to "Legacy + UEFI".

I had to enable the "Windows 8/10 WHQL support" option to show the "Secure Boot" option. When I enabled "Windows 8/10 WHQL support", that automatically set the boot mode to UEFI only. Now I tried to enable Secure Boot in the BIOS. When I select ENABLE for the Secure Boot, a message pops up saying:

"Platform in Setup Mode!
Secure Boot can be enabled when Platform is in User Mode. Repeat operation after enrolling Platform Key (PK)"

I click the OK button and Secure Boot shows as "Enabled" anyway without me having to enroll the Platform Key. So with Secure Boot now showing as ENABLED, I boot into Win10 Home and run msinfo32. It still shows Secure Boot as being OFF.

From the scenario explained above, is my Secure Boot working or not?

 

[bbhaag]

When you formatted the drive and installed Windows10 did you use GPT or MBR for the partition table?
I believe that in order for secure boot to work properly GPT must be used.

 

[Skyzoomer]

When you formatted the drive and installed Windows10 did you use GPT or MBR for the partition table?
I believe that in order for secure boot to work properly GPT must be used.

I used GPT. Thanks.

 

[Skyzoomer]

you need a fat32 formated usb drive or dvd to install windows from. Uefi only works on fat32 properly, whilie it will allow uefi boot from ntfs formatted pendrive, in case you want to install a backup or custom windows or restore from other drive. You can basically do a secure and non secure installation and enable secure boot later. There should be an option in your bios to enroll keys, somehwere below that windows 10 whql option. Click it and assign factory default keys. Save and reboot.

I used a fat32 usb flash drive to install Windows 10. It asked for a product key so I used the one from my retail Windows 7 and it all worked fine.

I'll check the bios for the enroll key option. Will report back.

Thanks.

 

[Skyzoomer]

I used a fat32 usb flash drive to install Windows 10. It asked for a product key so I used the one from my retail Windows 7 and it all worked fine.

I'll check the bios for the enroll key option. Will report back.

Thanks.

Gorstak,

I checked the bios for the enroll key option and could not find it anywhere.

But I got secure boot working by mucking around in the bios!
Previously, I changed the secure boot option from DISABLED to ENABLED and it would pop up the message:

"Platform in Setup Mode!
Secure Boot can be enabled when Platform is in User Mode. Repeat operation after enrolling Platform Key (PK)"

There is a "Secure Boot Mode ..... [Standard]" option below the secure boot support enable option. I clicked that and changed it to [Custom] to see what it said. I forgot what it said but I changed it back to [Standard]. When I did that, the bios said reloading the factory keys (paraphrasing) all by itself.

Now when I disable and enable secure boot, the "Platform in Setup Mode!" message does not pop up.

I booted into Win10 and now it says that secure boot is ON.
Time to celebrate!!!

Thanks for your help.

 

[bbhaag]

Good job man. Glad to hear you figured it out.

 

[Skyzoomer]

Good job man. Glad to hear you figured it out.

And thank you for your input. Have a great day!