Official GIGABYTE Forum

Questions about GIGABYTE products => Motherboards with Intel processors => Topic started by: IgorDamiani on September 21, 2013, 07:04:20 am

Title: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: IgorDamiani on September 21, 2013, 07:04:20 am
Hello guys,

 I'm using the RTM version of Windows 8.1. Until this morning, I've the F18 version of the BIOS for my Gigabyte Z77 D3H mainboard. This morning I've upgraded the BIOS, using @BIOS utility installed under Windows. I reboot the PC, without any problem.

 But now Windows shows me the message "SecureBoot isn't configured correctly", bottom-right to the desktop. I see into the BIOS, but I don't see any explicit option related to SecureBoot. I don't find where I can enable/disable it.

 Any help, please? ???
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: edeath on September 22, 2013, 10:45:51 pm
Hi I had the same issue in Win 8.1 RTM when I updated from F18 to F21 on my Z77-D3H and have repaired it.

You need to go into advanced mode in the bios and go to Bios Features. Where it says Operating System you need to choose Windows 8 and it will then show Secure Boot Options below. Enable secure boot and restart.

If this doesn't repair the issue then go back into the BIOS and change Secure Boot mode from Standard to Custom. In the Custom settings that then appear choose load default keys/settings (The top option - sorry not 100% on exact wording.) You can then set the Secure Boot mode back to standard and reboot.

This should hopefully do the trick. When I was trying to work this out the extra settings wouldn't always come up straight away when you change the OS or Secure boot settings without clicking out of Bios Features and back in.

Gigabyte really need to release a new manual as the current one is of the F15 bios which has far fewer features than the newer bios such is secure boot and Intel Smart Connect etc....

Ed
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: dmdilks on September 23, 2013, 05:14:23 am
I'm not trying to tell any body how to run their computer. Most people think this secure boot thing is the greatest thing that came down the pike.

You better step back and really look at it before you jump for it. This is a big scam from Microsoft to control what you want to load on your computer.

Isn't the bios update F21 to help Improve system stability. Where does it say that it will trigger Microsoft to tell you that "Secure Boot isn't configured correctly"

People better do some research on this before jumping into this new feature.




 
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: dannyboy on September 23, 2013, 12:26:57 pm
Hi I had the same issue in Win 8.1 RTM when I updated from F18 to F21 on my Z77-D3H and have repaired it.

You need to go into advanced mode in the bios and go to Bios Features. Where it says Operating System you need to choose Windows 8 and it will then show Secure Boot Options below. Enable secure boot and restart.

If this doesn't repair the issue then go back into the BIOS and change Secure Boot mode from Standard to Custom. In the Custom settings that then appear choose load default keys/settings (The top option - sorry not 100% on exact wording.) You can then set the Secure Boot mode back to standard and reboot.

This should hopefully do the trick. When I was trying to work this out the extra settings wouldn't always come up straight away when you change the OS or Secure boot settings without clicking out of Bios Features and back in.

Gigabyte really need to release a new manual as the current one is of the F15 bios which has far fewer features than the newer bios such is secure boot and Intel Smart Connect etc....

Ed

I have the same issue, after updating my Z77-D3H to F21, and upgrading to Windows 8.1 RTM.

Disabling secure boot in BIOS makes no difference - as long as Windows detects a GPT partition then it seems happy to display the secure boot watermark.

I then tried enabling secure boot (custom) and loading the default keys, but my system wouldn't even POST then. After pulling the CMOS battery I could at least get into the BIOS again and set everything back up. I didn't set secure boot mode back to standard though, so will try that later.

dmdilks - I take your point about not jumping into new features without researching them first, but personally (and I suspect many other people would say the same) I just want to get rid of the stupid watermark. I don't really care how I achieve it, or whether I can actually use secure boot or not.
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: dmdilks on September 23, 2013, 02:30:25 pm
I'm going to ask if any one of you were having a problem. Before you updated your bios. Or did you see that the board had a update and you did it.

If you were not having a problem before this go back to the older bios. Wait till they fix this so it is easier to configure.   
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: IgorDamiani on September 23, 2013, 04:10:28 pm
yes, I've got the same situation described by dannyboy. If I try to activate SecureBoot and loading default keys, the system stops working. The BIOS maybe enters in an invalid configuration, because the Gigabyte POST screen doesn't appear and obviously Windows doesn't boot. So I turn off the system, disconnected the power supply, and I use CLEAR CMOS pin on the mainboard to restore a default BIOS configuration.

You're right, dmdilks, but my goal was to simply update my BIOS to get improved performance. But maybe F21 version of the BIOS forces you to use SecureBoot.
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: dannyboy on September 23, 2013, 04:24:38 pm
dmdilks- I upgraded from F18 because I was upgrading from Windows 7 to 8.1, and was under the impression (rightly or wrongly) that F18 wasn't 100% compatible with Windows 8 booting in UEFI. It wasn't just a case of doing the BIOS update simply because it was there.
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: IgorDamiani on September 23, 2013, 04:48:50 pm
dmdilks, I dont' want to be polemic, but if I follow your reasoning, I should continue to use Windows XP, or 7, using old drivers for my devices, and so on! :-)))

If you see the release notes for the F21 version of the BIOS, you see "1.Improve system stability", nothing about SecureBoot.

http://www.gigabyte.com/products/product-page.aspx?pid=4327#bios

So I decide to update the BIOS, because newer version is better than the older one. If I had read something about SecureBoot, certainly I would have gone more cautious.

Sorry for my English, I'm Italian! :-))
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: dmdilks on September 23, 2013, 06:55:26 pm
Just the other day I install 8.1 rtm on my spare Ga-x79-ud3. I didn't have to update the bios to get it to work. You don't need UEFI for it to work.

I have installed windows 8 on many computers old, new, and what ever. I have not had to update the bios on any of them to get it to work.

Windows 8 & 8.1 system requirements are the same.

Processor  1GHz or faster
RAM  1GB (32bit) or 2GB (64bit)
Hard disk space  16GB (32bit) or 20GB (64bit)
Graphics card  Microsoft DirectX 9 graphics device or higher
 
(This has been there from the start of windows 8.)
Secure boot requires firmware that supports UEFI v2.3.1 Errata B and has the Microsoft Windows Certification Authority in the UEFI signature database

All I'm saying is that you don't have to jump through hoops to get it to work. The MB companies and Microsoft are bending us over to try to control want we can and can't put on our computers. With this secure boot thing.

There is a lot of people out there that are piss off about this one. Microsoft has shot one foot off with 8. This is going to shoot the other one off.

@IgorDamiani

Sometimes newer isn't better. I have a saying I go by: If isn't broke don't fix it
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: Horacio on September 24, 2013, 04:09:43 am
This problems arises because your Graphics Card is not UEFI compatible or it doesn't have a proper bios with UEFI support installed.
I have this problem as of now.
Secureboot Enabled + HD4870 = System won't boot or show anything on screen.
Secureboot Disabled + HD4870 = System boot with watermark.

Secureboot Enabled + Intel HD Graphics  (form i7 3770) = System boot perfectly without watermark.

So, you need to flash an UEFI bios for your card or get a new gpu that suppoert it, right now I just learned this so I will google for a while to find out if I can have a uefi bios on my gpu or wait until the next gen amd cards to upgrade.

ALSO, OTHER MOTHERBOARDS VENDORS SHOW A WARNING AT BIOS IF YOUR GPU IS UEFI CAPABLE OR DON'T, BEFORE MAKING ANY CHANGE, GIGABYTE INSTEAD JUST LET YOU CHANGE THIS AND SHOW BLANK SCREEN IF THE PROBLEM ARISE WITHOUT ANY WARNING.
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: IgorDamiani on September 24, 2013, 11:13:40 am
Very interesting news, Horacio.

I've a ATI Radeon HD6870. So, the firmware of this graphics card doesn't support UEFI? Uhm Uhm, very strange.
So, I need that all my devices are UEFI compatible?
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: chadashcroft22 on October 02, 2013, 08:29:14 pm
Ok guys I had this issue happened on my board when I enabled secure boot without know my gpu isn't compatible with it.  Now when I go to clear the cmos with the jumper pins my keyboard and mouse come back on but my monitor doesn't display anything.  I have tried dvi and hdmi cable and even intergrated as well.  You guys have any ideas or insight?
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: dannyboy on October 03, 2013, 11:53:45 am
Ok guys I had this issue happened on my board when I enabled secure boot without know my gpu isn't compatible with it.  Now when I go to clear the cmos with the jumper pins my keyboard and mouse come back on but my monitor doesn't display anything.  I have tried dvi and hdmi cable and even intergrated as well.  You guys have any ideas or insight?

While trying to get rid of the secure boot watermark, I installed the default secure keys, only to then get the same problem as you - blank screen, no POST, nothing. The only way I could get my PC to boot again was as follows:

1) Disconnect PC from AC power, and remove the CMOS battery AND PCI-E graphics card.
2) Reinsert CMOS battery after a couple of minutes, but not graphics card.
3) Connect monitor cable to the integrated DVI (or VGA) port, then power up the PC.
4) It will boot into BIOS and ask whether to load defaults or enter BIOS. Choose the latter.
5) In BIOS, disable secure boot and save settings. Don't change any other BIOS settings yet though, otherwise it will go back to blank screen again.
6) After BIOS has saved and rebooted, you can power off PC and reinsert your graphics card.
7) Power PC on again and enter BIOS to set up remaining configuration options as required.

I know it seems a long-winded procedure, but this is what works for me. I've done it several times now while playing around with the secure boot stuff.
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: dmdilks on October 03, 2013, 09:28:34 pm
Why is any body playing around with this? Can any body can tell me why you need this?

The only people that are telling you need this is Microsoft and WHY? Go ask the Linux people if they like.

By what I'm reading is that if you want to dual boot you are going to run into problems.

If you want to install some software on you computer you might have a problem. Like I said another post.

I have been around computers from the early 80's and I wouldn't touch this one with a 10 ft pole.

There is like 22 pages on this on the web search that people are having problems with this.

It might not be a bad thing, but is not really a good thing either. Plus I have certified my MB so Microsoft 8.1 will run on it

This has to be the biggest joke so far with Microsoft. Let see here I have a computer that is running fine with Win 7.

I want to install Windows 8.1 and now the computer that was running fine. Now I have to jump through hoops to get it to run now.

This is a bunch of crap that my video doesn't meet Microsoft certifications. That is one of the problems why my SecureBoot isn't configured correctly.

I'm just sitting here falling my chair laughing at Microsoft and what they are trying to pull here.   
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: dannyboy on October 03, 2013, 09:55:34 pm
Why is any body playing around with this? Can any body can tell me why you need this?

Like I've already said, I upgraded to Win 8.1 and now have the stupid 'secure boot' watermark. Personally I couldn't give a rat's ass if I actually use secure boot or not, I just want to get rid of the damn watermark. And before you say it, yes I know I don't have to boot Windows in UEFI mode - but, in my case, booting in UEFI vs. legacy mode is the difference between boot taking 15 seconds and 45 seconds. So I'd prefer to boot my SSD in UEFI mode.
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: dmdilks on October 03, 2013, 10:55:28 pm
I'm running windows 8.1 on a MB that the bios isn't up to date and it is running fine. Plus with the F11 bios &  UEFI too.

It is the Ga-x79-UD3 and with a 5770 video card. One other thing to is it running a SSD too.

Bios F16 is the newest bios for that board. Because the bios is out there doesn't mean you have to update too it.

Plus if you can't go back to a older bios you will have to email or call support for the older bios.
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: boab2791 on October 19, 2013, 05:33:23 pm
I updated my BIOS to F21 and Secure Boot was enabled by default.

Updated my Windows 8 install to 8.1 and got the same water mark u guys are talking about.

Board GA Z77 D3H Rev 1.0
Graphics Sapphire Radeon 6950

After installing the secure keys using the custom option and rebooting my system would not post and would just go into endless reboot cycles.

After reading this post on a working computer I managed to reset BIOS by pulling the graphics card, reseting cmos and plugging my monitor into the inbuilt dvi port to cancel secure boot by clearing the keys and disabling secure boot.

Windows 8.1 still insists though that secure boot is not configured correctly, its a little annoying!

Hopefully someone will figure out how we can

A. Get Secure Boot working or
B. When it is disabled get rid of the water mark message.
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: akr1602 on October 20, 2013, 09:26:56 am
I somehow managed to recover my bios trying to remove this ridiculous watermark in windows 8.1. Secure boot was always disabled and hence I tried to install default keys and that bricked my bios. Even removal of CMOS battery for > 10mins didn't solve the problem. Somehow I managed to boot back to backup bios by keeping the power button pressed while turning on and off the PSU switch.

After booting back to older bios, windows booted fine with this stupid watermark. In the older bios there is an option to disable CSM (this option is present in newer bios too, but always gets disabled). I disabled CSM in older bios and tried booting. Windows booted fine and there was no watermark! BUT there is no bios prompt nor windows boot logo! There is no way to get to bios now. Windows boot fine after 15 secs but can't get to bios! Also, from windows, there is NO option to boot in UEFI setting. This one was missing from the advanced options!

Then, in windows the charms bar was not working. Looking at all settings, I found out that I have TWO displays!! WTF! I have only a single monitior. This extra display has a resolution of  600 X 800. No wonder charms was not working. Under device manager this monitor showed up as a "Generic non Plug-n-Play" monitor. I tried to uninstall this monitor but it always came back after booting. Reinstalled the graphics driver multiple times and still no luck.

Then I read up about UEFI settings. An it looks like issue with graphics card as mentioned in this thread. Seems UEFI need VGA capability or some thing like that. My graphics card is a radeon hd7770 with HDMI. And I had disabled the Integrated graphics in BIOS since I have separate card. So now I have no access to my bios and 2 monitors.

Then decided to flash new version bios from windows. This went smooth and back to old settings. And I am able to get access to bios now. Have set CSM to enabled. No more secure boot. Phew! This stupid watermark remains...
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: dmdilks on October 20, 2013, 04:03:27 pm
The life with MICROSOFT how stupid can they be doing this stupid secure boot. This will really shoot the other foot off.

What are they going to do now make windows 8.2 to fix this problem. This has to Jr Vista OS.
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: Yoda99 on October 20, 2013, 10:43:12 pm
Just in case you have a motherboard without any integrated VGA chipset and you ended up here with a blank screen you should boot into your backup bios that will reset your main bios to the defaults without you needing a screen.  This is how i did that: http://forum.giga-byte.co.uk/index.php/topic,13351.0.html
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: sparks199 on October 21, 2013, 10:16:15 am
This work for me ..

Please go to BIOS Setup\BIOS Feature\Secure Boot Mode set to Custom.
Then you will see “key management” option.

Press enter into key management to set “default key provisioning” to enabled.
Save and exit.

Go into Win8.1 and it will not show “win8.1 secure boot isn’t configured correctly


Put a hold on the above for a min ....   


Ok just found out that the first boot up was good and well

However the 2rd time I tried to to a boot up ..the motherboard would not post ..  I had to force start the back up bios ... 

so it didn't work well after all
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: hisham on October 21, 2013, 04:12:25 pm
is Gigabyte aware of this issue ? are they working for a solution ? Seriously  >:( last official bios for UD5H on Aug 2012 !!!!!!!
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: Jaeger on October 21, 2013, 06:26:01 pm
NO my friend,they don't even bother to read users problems posted in this forum... They have problems with all their mobos,but they continue to ignore our opinions!
I have also some issues with Z87X-UD4H on F7 bios (old sata II ssd random dissapear from system,drive boot not recognizing anymore i guess due to this incompatibility,etc.),plus buggy and crap bios with slow mouse movement - i mean the hardware itself is a top quality,but what the heck am i supposed to do with a powerfull hardware when is ruined/messed-up by the software??  :-\
I don't need beta bioses,i want something official,so WHEN WE GET A NEW BIOS RELEASE GIGABYTE? Come on folks,we actually paid for your motherboards and get zero support!
Anyway,i already started to regret the day i bought UD4H instead an nicer and way more stable Maximus VI HERO!
 
L.E.  I'm wonder if all motherboards issues described in this area occured after updating with @BIOS?... The rumor is that flashing program thru OS can cause a lot of problems. Next time i use Q-FLASH for sure!
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: wpcoe on October 21, 2013, 08:56:50 pm
In the "misery loves company" vein, I have the same problem with Win 8.1 now:  "SecureBoot isn't configured correctly" watermark with my H77M-D3H motherboard.

After two fails trying to "update" Win8 to Win8.1 using the Windows Store link, a friend directed me to an .iso file for Win8.1 x64 installation, and I did a clean install.  Previouslly I had MBR formatted my boot drive, but this time decided to join the 21st Century and try GPT.  Can't get rid of the bloody watermark.  Win8.1 Event Viewer reports that SecureBoot is not enabled, when UEFI says it is.  <sigh...>

Not sure where to lay the blame:  Microsoft or Gigabyte.  But, pretty confident neither one will issue a fix, much less even care.
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: dmdilks on October 21, 2013, 10:23:49 pm

I don't need beta bioses,i want something official,so WHEN WE GET A NEW BIOS RELEASE GIGABYTE? Come on folks,we actually paid for your motherboards and get zero support!

I know what you talking about. I don't like to use a beta bios either. But I had to one time because the bios was reading the CPU temp wrong. That was over 6 months ago too.

Plus I don't update my bios unless I'm having problem. Because the newer bios is out there doesn't mean you have to do it. Don't fix what isn't broke.


Quote
I'm wonder if all motherboards issues described in this area occured after updating with @BIOS?... The rumor is that flashing program thru OS can cause a lot of problems. Next time i use Q-FLASH for sure! 

I'm old school and I will never use windows to update my bios. Dos or Q-Flash I even clear the cmos before I do it.

Plus after I do it I'll shut the computer down. Pull the battery clear the cmos for about ten minutes too. I have never had a problem with a update for over 15 yrs.
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: runn3R on October 28, 2013, 05:55:59 pm
Hi All

The reason of this problem was correctly pointed out by Horacio in this post (http://forum.giga-byte.co.uk/index.php/topic,13202.msg85162.html#msg85162).

However we may try some workaround through the special bios for the motherboard (even if your VGA card in not compliant with UEFI), let's take Z77-D3H as the example.
Try to use this special bios F22b (http://forum.giga-byte.co.uk/upload/files/BIOS_Z77-D3H_F22b.zip) and let us know the outcome. Thanks
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: akr1602 on October 30, 2013, 09:29:22 am
Ok, it looks like Microsoft has rolled out a patch to remove this secure boot watermark.

"SecureBoot isn't configured correctly" message on the desktop
http://windows.microsoft.com/en-us/windows-8/secure-boot-watermark (http://windows.microsoft.com/en-us/windows-8/secure-boot-watermark)

Update removes the "Windows 8.1 SecureBoot isn't configured correctly" watermark in Windows 8.1 and Windows Server 2012 R2
http://support.microsoft.com/kb/2902864 (http://support.microsoft.com/kb/2902864)
Title: Re: After BIOS update, I get "SecureBoot isn't configured correctly"
Post by: Beekeeper on October 30, 2013, 04:29:59 pm
Ok, it looks like Microsoft has rolled out a patch to remove this secure boot watermark.

Thanks man!!!  ::)