Some MSI motherboards have a known issue where Secure Boot doesn't function properly with its default settings, even when it appears as "Enabled" in both the BIOS and Windows. For a deeper technical explanation, you can refer to this blog post.
To fix this, you'll need to adjust your BIOS settings. The exact steps vary depending on your specific BIOS version, so please refer to the instructions below for both cases. Please proceed with caution, as these changes are made at your own risk.
Updating your settings with a recent BIOS
- Restart your computer and press the DEL key during boot-up to enter the BIOS.
- Navigate to Settings > Security > Secure Boot.
- Set Secure Boot Mode to Custom, then set Secure Boot Preset to Maximum Security.
- Press F10 to save the changes and exit. Confirm by clicking Yes.
For additional troubleshooting, please refer to this video from MSI.
Updating your settings with an older BIOS
- Restart your computer and press the DEL key during boot-up to enter the BIOS.
- Navigate to Settings > Security > Secure Boot.
- Set Secure Boot Mode to Custom.
- Click on Image Execution Policy.
- Set Removable Media and Fixed Media to Deny Execute.
- Press F10 to save the changes and exit. Confirm by clicking Yes.
What if I can't find these settings?
If your BIOS does not have the "Secure Boot Preset" or "Image Execution Policy" options, it means you'll need to update it first.
-
Identify Your Motherboard Model:
- Press the Windows key.
- Type
msinfo32and press Enter. - In the System Information window, note the value for BaseBoard Product.
-
How to Find and Download a BIOS Update
- Go to the official MSI support website.
- Use the motherboard model you just found to search for the correct product page.
- On the product page, you can find the latest BIOS updates and detailed installation instructions.