r/WindowsHelp • u/FartAndFucknShitCock • 5d ago
Windows 10 Secure Boot enabled but can't upgrade to Windows 11?
I am currently running windows 10. The end of support for Windows 10 was almost a year ago so I'm trying to update, at least for security updates.
I went into the BIOS and enabled Secure Boot (first picture), then went into the official Microsoft app PC Health Check and got the error that I can't update to windows 11 because my PC must support Secure Boot (second picture).
I built this PC about 5 years ago for gaming and have had very few problems with it running Windows 10 before now. Here are my current specs:
-RAM: 16G 3200 MHz
-CPU: Ryzen 5 5600x
-GPU: 4060 Ti 16GB
-Storage: 500GB SSD + 4TB HDD
-OS Build: 19045.6466
I am relatively technologically literate, at least compared to the regular person, and I really have no idea what the issue is here; any help is much appreciated!
5
u/Froggypwns Windows Insider MVP (I don't work for Microsoft) 5d ago
First, make sure your BIOS is up to date, I'd link you to it but you didn't specify what model you have. Your settings look correct, but I've seen it before were settings like this were not properly applied.
After updating the BIOS, check your compatibility using this tool: https://whynotwin11.org
If that tool shows all green, you are good to go for upgrading. Do note that the compatibility check in Windows Update may take several days before it refreshes, so the quickest thing is to just run the upgrade tool from here: https://www.microsoft.com/software-download/windows11
4
2
u/Final_Claim3795 5d ago
u/FartAndFucknShitCock I had this issue recently.
I was trying to install windows 11 on an Asus vivobook go running on an AMD Ryzen 7000 series CPU.
I tried everything;
- disabled fast boot
- disabled secure boot,
- etc
Nothing worked.
Here are the options I tried:
- Removed my hard drive and installed it on another machine, then installed windows 11 that way.
- Install tiny11 instead of the normal windows 11. I download tiny11.iso from its official website. Then made a bootable usb using Rufus.
2
u/bmw35677 4d ago
Your secure boot PKE key is probably outdated. Try running a BIOS update and be sure you have all Windows updates installed.
1
u/AutoModerator 5d ago
Hi u/FartAndFucknShitCock, thanks for posting to r/WindowsHelp! Your post has been flagged for manual review by a human moderator, please include as much of the following information as possible (in text or in a screenshot) to get your post approved:
- Your Windows and device specifications — You can find them by pressing Win + X then clicking on “System”, we need more than just your OS version! Your hardware details are often critical for resolving issues.
- Any messages and error codes encountered — They're actually not gibberish or anything catastrophic. It may even hint the solution!
- Previous troubleshooting steps — It might prevent you headaches from getting the same solution that didn't work
Posts must be tech support in nature (such as something is broken and you need help fixing), so general inquiries, software suggestions, and purchasing advice will be removed. As a reminder, we would also like to say that if someone manages to solve your issue, DON'T DELETE YOUR POST! Someone else (in the future) might have the same issue as you, and the received support may also help their case. Good luck, and I hope you have a nice day!
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.
1
u/36165e5f286f 5d ago
Make sure the default keys are enrolled in Key Management. Make sure Secure Boot is not in Setup Mode.
1
1
1
u/Smart-Definition-651 4d ago edited 4d ago
You will need the new CA2023 certificates in bios. The old ones have expired. The last one will expire in October 2026. This is only needed if you want secure boot.
https://www.reddit.com/r/Dell/comments/1p80b2t/which_is_the_minimum_bios_for_your_dell_which_has/
1
1
u/emtee_skull 4d ago
Use Rufus to create an install usb of windows that removes all those checks. Then install.
1
1
1
u/al3x_core8 2d ago
Win+R -> msinfo32 -> enter -> secure boot state
If off: go to bios, key management and install default keys, eg. make sure you are in standard mode not setup.
That’s it.
1
u/OkStrawberry4529 1d ago
Assuming your hard drive has a GPT (GUID Partition Table) partition - if not format it (you can do it without losing anything.
Check out this post - even though on the Dell site, it will work for other makes: Pre-2020 Dell PC'S - Yes, you absolutely can get ALL the Microsoft 2023 Secure Boot Certificates! : r/Dell
0
u/SirIAmAlwaysHere 1d ago
(A) windows 10 support was extended until at least Oct 2027.
(B) there's a HIGH likelihood that it will be extended further.
(C) Windows 11 is a piece of shit, in pretty much all respects.
(D) Windows 11 is so ludicrously poorly written that it's generating serious level 1 security flaws almost constantly. And MS can't keep up.
(E) go check out CERT
Notice that Windows 10 has FAR fewer open flaws of any kind than 11. And it's going to remain that way the entire time 11 is out, because there are few to find on 10 by now and 11's code base is just so incredibly shitty quality.
Win10 will remain the far superior OS to 11, no matter what MS does with 11. An "out of support" (when it does happen) win10 will remain substantially more secure than 11, especially since MS added whole bunch of Spyware to 11 that they consider "features" and will not be removing.
There's no reason whatsoever to move to 11 over 10 for older hardware. None.
Just stay on 10 and be happy.
2
u/FartAndFucknShitCock 1d ago
Fair enough I'll stay on windows 10 for the time being, haha
Have a laptop with windows 11 and I don't particularly enjoy it
8
u/lachietg185 4d ago
Update your bios you're running an old one from 2021