Solved Can't enable Secure Boot on my BIOS.

isamme

New Member
Messages
13
Hi there guys - any help will be much appreciated :)

I had a bit of a problem with Malware which led me to reinstall windows 8. I had also at the time been trying to install Linux to dual boot beside it. However, upon reinstalling I got the annoying watermark saying "Secureboot isn't configured correctly."
Having decided I would rather remove the watermark and having gone back into the BIOS (with a reinstall) and trying to enable secure boot I get a message - "CSM is Loaded! Disable the CSM via Setup and repeat operation after Restart".
However there is, as far a I can see no option to disable the CSM in my bios - I've tried disabling anything related to Legacy and reinstalling both Ubuntu and Windows 8 as well as wiping the drive and jumping the CMOS as well as updating the BIOS.

Am very much at a loss and feel I've tried every permutation in the BIOS. Could possibly be an incompatibility with graphics card, but wouldn't know where to start on that end if it is.

Many thanks for your time!
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    PC/Desktop
    CPU
    Intel i5 4670K
    Motherboard
    MSI Z87-G43 Motherboard
    Memory
    8GB Corsair Vengence
    Graphics Card(s)
    Sapphire Radeon HD 7950
    Browser
    Chrome/Firefox
    Antivirus
    Windows Defender
CSM will not always be shown as a CSM on/off option; however, the Compatibility Support Module directly relates to Legacy support. So, I would start by resetting my BIOS to defaults and then reviewing the following options:

Secure Boot
Sets the Windows secure boot to prevent the unauthorized accessing. Press
<Enter> to enter the sub-menu. This sub-menu will appear when “Windows 8
Feature” is enabled.

Secure Boot Control [Disabled]
Enables or disables secure boot.
[Enabled] Enables the secure boot function and allow you to set the secure
boot settings.
[Disabled] Disables this function.

Secure Boot Mode [Standard]
Selects the secure boot mode. This item is to select how the secure boot keys
be loaded. This item appears when "Secure Boot" is enabled.
[Standard] The system will automatically load the secure keys from BIOS.
[Custom] Allows user to configure the secure boot settings and manually
load the secure keys.

Image Execution Policy
Sets the policy when the system image execution policy on Security Violation.
Press <Enter> to enter the sub-menu. This sub-menu will appear when “Secure
Boot Mode” sets to [Custom].

Key Management
Manages the secure boot keys. Press <Enter> to enter the sub-menu. This sub-
menu will appear when “Secure Boot Mode” sets to [Custom].

LAN Option ROM [Disabled]
Enables or disables the legacy network Boot Option ROM for detailed settings.
This item will appear when "Onboard LAN Controller" is enabled.
[Enabled] Enables the onboard LAN Boot ROM.
[Disabled] Disables the onboard LAN Boot ROM.

Legacy USB Support [Enabled]
Sets Legacy USB function support.
[Auto] The system will automatically detect if any USB device is connected
and enables or disables the legacy USB support.
[Enabled] Enable the USB support for legacy operating systems that do not
support USB.
[Disabled] The USB devices are available only for UEFI applications.

Boot Mode Select [LEGACY+UEFI]
Sets the system boot mode from legacy or UEFI architecture depending on OS
installation requirement.
[UEFI] Enables UEFI BIOS boot mode support only.
[LEGACY+UEFI] Enables both Legacy BIOS boot mode and UEFI BIOS boot
mode.

All the above information is available in your owner's manual which can be downloaded here:

MSI USA ? Download Center

Good luck.
 

My Computer

System One

  • OS
    Windows 8.1
    Computer type
    PC/Desktop
    CPU
    Intel G2020
    Motherboard
    ASRock B75M-DGS R2.0
    Memory
    8GBs @ 1333 MHz
    Hard Drives
    Samsung 840 EVO
    PSU
    400w
    Internet Speed
    57/11
Thanks for the quick reply. You were correct that I'm using an MSI motherboard - I probably should have specified. I've been through all those permutations choosing the most conservative in each case and still no joy.

Thanks for the detailed reply though :)

MSI Z87-G43
Intel i5 4670K
Radeon Saphire 7950 3GB
Samsung 840 EVO 250GB
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    PC/Desktop
    CPU
    Intel i5 4670K
    Motherboard
    MSI Z87-G43 Motherboard
    Memory
    8GB Corsair Vengence
    Graphics Card(s)
    Sapphire Radeon HD 7950
    Browser
    Chrome/Firefox
    Antivirus
    Windows Defender
Have you enabled this feature?

Windows 8 Feature [Disabled]
Enables the supports for Windows 8 or disables for other operating systems.
Before enabling this item, make sure all installed devices & utilities (hardware &
software) should meet the Windows 8 requirements.
[Enabled] The system will switch to UEFI mode to meet the Windows 8 requirement.
[Disabled] Disables this function.

Once done, that should set you to UEFI defaults, then you can review the previously mentioned features.
 

My Computer

System One

  • OS
    Windows 8.1
    Computer type
    PC/Desktop
    CPU
    Intel G2020
    Motherboard
    ASRock B75M-DGS R2.0
    Memory
    8GBs @ 1333 MHz
    Hard Drives
    Samsung 840 EVO
    PSU
    400w
    Internet Speed
    57/11
Yeah, I have.

It's when I try to enable Secure Boot Controll that I get the "CSM is Loaded! Disable the CSM via Setup and repeat operation after Restart" message.
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    PC/Desktop
    CPU
    Intel i5 4670K
    Motherboard
    MSI Z87-G43 Motherboard
    Memory
    8GB Corsair Vengence
    Graphics Card(s)
    Sapphire Radeon HD 7950
    Browser
    Chrome/Firefox
    Antivirus
    Windows Defender
Yeah, I have.

It's when I try to enable Secure Boot Controll that I get the "CSM is Loaded! Disable the CSM via Setup and repeat operation after Restart" message.

When I look back at your original post I am now more confused than ever because I have no idea where you are right now.

I see you started with Win 8 - did that ever work w/secure boot enabled?
Then you tried to throw in Linux for a dual boot - is that where you are right now?

If so, and I were in your shoes, I would can the idea of dual-booting Win 8 and Linux with secure boot because your BIOS has a toggle option for Win 8 enabled or disabled that either allows your secure boot to work with win 8 or another OS so I'm guessing you can't have it both ways. Anyway, I'm very confused at this point so I can be of no benefit to you. Good luck to you.
 

My Computer

System One

  • OS
    Windows 8.1
    Computer type
    PC/Desktop
    CPU
    Intel G2020
    Motherboard
    ASRock B75M-DGS R2.0
    Memory
    8GBs @ 1333 MHz
    Hard Drives
    Samsung 840 EVO
    PSU
    400w
    Internet Speed
    57/11
Is Windows 8 installed in UEFI mode?
 

My Computer

System One

  • OS
    ME, XP,Vista,Win7,Win8,Win8.1
    Computer type
    PC/Desktop
    Other Info
    Notebooks x 3

    Desktops x 5

    Towers x 4
Sorry.

Yes I was reinstalling Windows 8 which worked fine before. I tried to install Ubuntu, and so disabled the Secure Boot.
Trying to get rid of the watermark, I removed linux and tried to install just windows 8 on its own. However after I was unable to re-enable secure boot, even after wiping the drive.

Anyway, thanks for your effort.
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    PC/Desktop
    CPU
    Intel i5 4670K
    Motherboard
    MSI Z87-G43 Motherboard
    Memory
    8GB Corsair Vengence
    Graphics Card(s)
    Sapphire Radeon HD 7950
    Browser
    Chrome/Firefox
    Antivirus
    Windows Defender
Yes, although I have also tried [LEGACY+UEFI] as well.
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    PC/Desktop
    CPU
    Intel i5 4670K
    Motherboard
    MSI Z87-G43 Motherboard
    Memory
    8GB Corsair Vengence
    Graphics Card(s)
    Sapphire Radeon HD 7950
    Browser
    Chrome/Firefox
    Antivirus
    Windows Defender
even after wiping the drive

OK, I'm going make a final suggestion with the assumption that you are starting with a blank hard drive:

BIOS:
Windows 8 feature - enable
Secure boot control -enable
Secure boot mode - standard

If any problems related to the above, either clear you CMOS or reflash you BIOS to attempt correction.
If not, continue Windows 8 UEFI installation...

Once done:
Load any necessary drivers
Apply all Win Updates to current

Comment: Consider making a System Image at this point by using the inherent Win 7 Recovery methods or other software. This will save you if you ever encounter a nasty malware infection again.

Continue installing programs and bringing you rig up to date.

No need for Linux now because you are up and running and you have a backup plan.

Just my2cents
 

My Computer

System One

  • OS
    Windows 8.1
    Computer type
    PC/Desktop
    CPU
    Intel G2020
    Motherboard
    ASRock B75M-DGS R2.0
    Memory
    8GBs @ 1333 MHz
    Hard Drives
    Samsung 840 EVO
    PSU
    400w
    Internet Speed
    57/11
I have cleared CMOS and reflashed BIOS.
Still get "CSM is Loaded! Disable the CSM via Setup and repeat operation after Restart" when attempting to enable Secure Boot Control.
Perhaps I need to secure erase the disk -can't imagine that would help though...

Sorry, I'm just posting in case someone else answers. Not trying to pester you ;)
Cheers!
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    PC/Desktop
    CPU
    Intel i5 4670K
    Motherboard
    MSI Z87-G43 Motherboard
    Memory
    8GB Corsair Vengence
    Graphics Card(s)
    Sapphire Radeon HD 7950
    Browser
    Chrome/Firefox
    Antivirus
    Windows Defender
I have cleared CMOS and reflashed BIOS.
Still get "CSM is Loaded! Disable the CSM via Setup and repeat operation after Restart" when attempting to enable Secure Boot Control.
Perhaps I need to secure erase the disk -can't imagine that would help though...

Sorry, I'm just posting in case someone else answers. Not trying to pester you ;)
Cheers!

No, you are not pestering me at all. At this point I'm just glad we're both on the same page and all other support is more than welcome at this point. So, you have done what I have asked and now, before I provide additional suggestions, might I ask "what is driving you to install that secure boot option? Are you under the impression that it will lessen the possibility that you will be infected once you are fully booted into Windows 8 and browsing the internet?"
 

My Computer

System One

  • OS
    Windows 8.1
    Computer type
    PC/Desktop
    CPU
    Intel G2020
    Motherboard
    ASRock B75M-DGS R2.0
    Memory
    8GBs @ 1333 MHz
    Hard Drives
    Samsung 840 EVO
    PSU
    400w
    Internet Speed
    57/11
repeat operation after Restart

Is the Win 8 installer giving you that message? If so, it is either getting a Legacy response from the BIOS (which seems doubtful) or you are trying to do an incorrect install which could be caused by one of two things IMHO:

1. Many UEFI BIOS's have a dual CD/DVD selection available from their one-time boot menu. One is for Legacy and the other is for UEFI boot. Mine looks something like this:

Boot from Optiarc CD/DVD
UEFI: Boot from Optiarc CD/DVD

In your case, you must select UEFI (if dual options are available).

The other issue might be that, if your are attempting a UEFI install from a USB stick, it must be properly prepared:

http://www.eightforums.com/tutorials/15458-uefi-bootable-usb-flash-drive-create-windows.html

Somehow, I'm guessing if Thoeg stepped in right now, he could fix you right up if none of my suggestions work.
 

My Computer

System One

  • OS
    Windows 8.1
    Computer type
    PC/Desktop
    CPU
    Intel G2020
    Motherboard
    ASRock B75M-DGS R2.0
    Memory
    8GBs @ 1333 MHz
    Hard Drives
    Samsung 840 EVO
    PSU
    400w
    Internet Speed
    57/11
How have you cleaned the drive? If you tried to install Ubuntu in Legacy mode, it might have placed something on the drive that is causing problems. So, if you did not clean it with Diskpart, you might try that.

The latest Ubuntu kernel is Secure Boot compatible, so you can install it in UEFI mode just like Windows 8.
 

My Computer

System One

  • OS
    Windows 8.1 x64
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Home Grown
    CPU
    i7 3770K
    Motherboard
    ASUS P8Z77 -v Pro, Z87-Expert
    Memory
    16 G
    Graphics Card(s)
    EVGA GTX 680 Classified (2)
    Hard Drives
    Kingston SSD 240 GB
It is partially a security thing, but if I'm honest it's also the watermark that bugs me. Call it a little OCD but it's a new computer and I just find it pretty annoying to always have the watermark.

No, it's not the BIOS that pops up the message as soon as I try to change it, and then it leaves it unchanged. Which leaves me stumped as there's not CSM option in the BIOS.

Hmmm. Well for the USB installer I used Windows 7 USB DVD Download Tool - is this appropriate or shall I try again as done in the above link?
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    PC/Desktop
    CPU
    Intel i5 4670K
    Motherboard
    MSI Z87-G43 Motherboard
    Memory
    8GB Corsair Vengence
    Graphics Card(s)
    Sapphire Radeon HD 7950
    Browser
    Chrome/Firefox
    Antivirus
    Windows Defender
Yeah, that's what I was hoping to do after re-enabling secure boot.

No, I only used the Window installer to erase it (and Ubuntu disk-repair once another time).

I will try using Diskpart now -thanks!
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    PC/Desktop
    CPU
    Intel i5 4670K
    Motherboard
    MSI Z87-G43 Motherboard
    Memory
    8GB Corsair Vengence
    Graphics Card(s)
    Sapphire Radeon HD 7950
    Browser
    Chrome/Firefox
    Antivirus
    Windows Defender
Also in addition I sometime get a

"System BIOS detected a non-Windows 8 Logo grpahic card.
There is no GOP (Graphics Output Protocol) support detected in this card.
'Windows 8 feature, settings in BIOS will be changed to 'Disabled'

Press F1 to run setup.
Press F2 to load default values and continue."

Would have mentioned this sooner but it doesn't always pop up.
Going to start using DiskPart now anyway.
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    PC/Desktop
    CPU
    Intel i5 4670K
    Motherboard
    MSI Z87-G43 Motherboard
    Memory
    8GB Corsair Vengence
    Graphics Card(s)
    Sapphire Radeon HD 7950
    Browser
    Chrome/Firefox
    Antivirus
    Windows Defender

My Computer

System One

  • OS
    ME, XP,Vista,Win7,Win8,Win8.1
    Computer type
    PC/Desktop
    Other Info
    Notebooks x 3

    Desktops x 5

    Towers x 4

My Computer

System One

  • OS
    Windows 8.1
    Computer type
    PC/Desktop
    CPU
    Intel G2020
    Motherboard
    ASRock B75M-DGS R2.0
    Memory
    8GBs @ 1333 MHz
    Hard Drives
    Samsung 840 EVO
    PSU
    400w
    Internet Speed
    57/11
Awesome.

Thanks, I will do this now. I have to go somewhere shortly, but I will keep you posted how things work out.

Thanks again to all! :)
 

My Computer

System One

  • OS
    Windows 8
    Computer type
    PC/Desktop
    CPU
    Intel i5 4670K
    Motherboard
    MSI Z87-G43 Motherboard
    Memory
    8GB Corsair Vengence
    Graphics Card(s)
    Sapphire Radeon HD 7950
    Browser
    Chrome/Firefox
    Antivirus
    Windows Defender
Back
Top