I've tried nearly every common fix for my Secure Boot problem, but I keep getting the error: "Unauthorized changes on firmware, operating system or UEFI drivers." I've reset the Secure Boot keys, disabled CSM, enabled TPM 2.0, switched Windows to UEFI mode, and confirmed that my system drive uses GPT. Nothing has worked so far, and I'm not sure what setting I'm missing. The motherboard uses an ASUS BIOS. Could an outdated BIOS or missing Secure Boot keys be causing this?
2 Answers
First check whether your motherboard BIOS is up to date. An older firmware version can sometimes cause Secure Boot compatibility problems. The exact BIOS version is usually shown on the BIOS home screen or in the System Information section. You can compare it with the latest version on the motherboard manufacturer’s support page before updating.
On ASUS boards, resetting or clearing the Secure Boot keys can create a common problem: the firmware enters Setup Mode because the platform keys are missing. Secure Boot will not work correctly in that state, even if CSM is disabled, TPM 2.0 is enabled, and Windows is installed in UEFI/GPT mode. Enter the BIOS and look under Boot or Security, then open Secure Boot and check Secure Boot State. If it says Setup, open Key Management and choose Install Default Secure Boot Keys. After confirming, the state should change to User. Save the changes and reboot.
I’ll check the Secure Boot state again. I’ve heard about missing keys before, but I haven’t noticed an option to install the default keys in my BIOS.
I’m not sure which BIOS version I have yet. I haven’t found where ASUS shows the version or how the update process works.