I recently built my PC and I'm looking to enable Secure Boot. Here are my specs: AMD Ryzen 7 9800X3D processor, 64GB Kingston Fury RAM, ASUS B650E MAX GAMING WIFI motherboard, AMD Radeon RX 9070 XT GPU, and a 2TB Kingston Fury Renegade NVMe SSD. I'm running Windows 11 Pro, and I've learned that enabling Secure Boot can improve security and is actually required for playing Battlefield 6.
However, when I checked my BIOS, I found that the Compatibility Support Module (CSM) is disabled and my Secure Boot state is set to 'User' with 'Other OS' selected for OS Type. It seems there are Secure Boot keys already created, but I'm not sure if this is normal since I don't recall doing this. I'm worried about messing up my system by resetting everything to default.
Could someone advise me if it's safe to restore default settings and follow a guide like the one I found on YouTube? Also, is there a chance I could lock myself out of my system in this process? I want to make sure I don't end up needing to buy new hardware. Sorry if this question sounds naive; I've just heard that mistakes here could be costly.
3 Answers
Yep, you're on the right track. Secure Boot is essential for some new games and ensuring your boot loader stays secure. My advice is to check if BitLocker is active first. If it is, make sure you've saved all recovery keys just in case you need them. From there, enabling Secure Boot should be safe, and having backups will help you avoid any unnecessary headaches if something goes awry.
It's great to see you're considering Secure Boot! This feature really helps to keep your system safe from tampering by ensuring that only trusted software can run during startup. Just remember that if BitLocker is active, back up your recovery keys first. If you play it safe with that step, enabling Secure Boot should be straightforward; just follow your guide after that.
Before you dive into Secure Boot, make sure to turn off BitLocker in Windows if it's enabled. This can help prevent locking yourself out. Once that's done, you can reset the keys in your BIOS and enable Secure Boot without worry. Just be patient with the decryption process—it may take a little while and it's a good idea to set your PC to 'never' sleep during that time.

Related Questions
Lenovo Thinkpad Stuck In Update Loop Install FilterDriverU2_Reload