Solved enabling Secure boot

[jds63]

I am unable to enable secure boot unless i disable CSM.

What it tells me in BIOS under Secure boot option if enabled by disabling CSM

Secure boot can be enabled if 1. System running in User Mode with enrolled Platform key (Pk) 2. CSM function is disabled.

Having no idea what # 1. means. This is not an error message just notes off to side on BIOS after selecting an item there.


Question would be to what affect will this cause me to shut off CSM. Some of my understanding of CSM are to run i think legacy PCI devices do not run with UEFI drivers. If i am correct.

My system is installed as UEFI with GPT partition style, UEFI Dual BIOS, you can take a look at my system specs here to see if would cause me any issues to disable CSM. Have not tried it yet, but only way to enable Secure Boot is to disable CSM, only way the option shows under Secure boot in the BIOS.

 

[jds63]

Talking to Gigabyte was not too much help, but what was said is, by disabling CSM it might effect some hardware items. Thing is they have no way of knowing nor do they have any kind of listed items can or can not affect. My only resolve would be to try it, only way i can use Secure boot is to disable CSM.

 

[jds63]

So far i have not tried to disable CSM to be able to enable secure boot on my system. Wondering if benefits of Secure boot are worth the try or not. Since me nor anybody else has a clue to this, not sure how long to leave this post going,ty.

 

[Phone Man]

The Compatibility Support Module (CSM) is a component of the UEFI firmware that provides legacy BIOS compatibility by emulating a BIOS environment, allowing legacy operating systems and some option ROMs that do not support UEFI to still be used

Jim

 

[jds63]

The Compatibility Support Module (CSM) is a component of the UEFI firmware that provides legacy BIOS compatibility by emulating a BIOS environment, allowing legacy operating systems and some option ROMs that do not support UEFI to still be used

Jim

Thanks, to my understanding so far, operating system should not be a problem. UEFI BIOS and setup as UEFI install of Windows 8.1 Pro with GPT Partition style. Video card is new, can see from specs here, be one concern. Network part is another, not sure of, concerned for other hardware which is not old, but the newest, i do not know if any issues will occur, everything in my specs shown here for those who need to check. PC is new

 

[KYHI]

There is no reason or problem why you can not disable Legacy/csm support and enable secureboot..

Your system is booted via UEFI..

IF you decide to boot other media - you may have to disable secureboot

 

[jds63]

There is no reason or problem why you can not disable Legacy/csm support and enable secureboot..

Your system is booted via UEFI..

IF you decide to boot other media - you may have to disable secureboot

Boot other media, meaning ? Also mean by looking at my specs, was determined this way ? As said my concern would be some devices would not function, of course not trying i would never know which. ty.

 

[KYHI]

device do not care - OS does not care..

Booting to USB / DVD / CD may require Secureboot disabled

SecureBoot prevents any unsigned software - to boot before OS

 

[jds63]

device do not care - OS does not care..

Booting to USB / DVD / CD may require Secureboot disabled

SecureBoot prevents any unsigned software - to boot before OS

Thank you, kind of risky if need to boot to recovery drive or windows disc for repair, hoping can get into BIOS at a point, only think of BSOD issues there.

What about more causes of CMS being disabled ? Do most have to disable this to enable secure boot ?