This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
I just got my all-in-one desktop pc back from a repair shop since its hard drive was broken and needs to be replaced. When I got it back it shows that Secure Boot is disable so I'm trying to enable it together with TPM through tutorials, but I can't seem to find "secure boot" on my UEFI settings. Furthermore, there are limited information on American Megatrends on the internet, and some has different UI to what is shown on my screen. It was fine before I sent it for repairs. Is there a way to fix this? My system information shows:
OS NameMicrosoft Windows 11 Pro
Version 10.0.22000 Build 22000
Other OS Description Not Available
OS Manufacturer Microsoft Corporation
System Manufacturer Default string
System Model Default string
System Typex64-based PC
System SKU Default string
Processor Intel(R) Core(TM) i5-9500 CPU @ 3.00GHz, 3000 Mhz, 6 Core(s), 6 Logical Processor(s)
BIOS Version/Date American Megatrends Inc. 5.12, 8/22/2019
SMBIOS Version 3.1
Embedded Controller Version 255.255
BIOS Mode UEFI
BaseBoard Manufacturer Intel Technology And Development Co.,LTD
BaseBoard Product TH310C-M3
BaseBoard Version V1.0
Platform Role Desktop
Secure Boot State Off
PCR7 Configuration Binding Not Possible
Windows Directory C:\Windows
System DirectoryC:\Windows\system32
Boot Device \Device\HarddiskVolume1
Locale United States
Hardware Abstraction Layer Version = "10.0.22000.1696"
Installed Physical Memory (RAM) 8.00 GB
Total Physical Memory 7.45 GB
Available Physical Memory 1.66 GB
Total Virtual Memory 11.0 GB
Available Virtual Memory 1.86 GB
Page File Space 3.55 GB
Page File C:\pagefile.sys
Kernel DMA ProtectionOff
Virtualization-based security Not enabled
Device Encryption Support Reasons for failed automatic device encryption: TPM is not usable, PCR7 binding is not supported, Hardware Security Test Interface failed and device is not Modern Standby, TPM is not usable
Hyper-V - VM Monitor Mode Extensions Yes
Hyper-V - Second Level Address Translation Extensions Yes
Hyper-V - Virtualization Enabled in Firmware Yes
Hyper-V - Data Execution Protection Yes
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
Answer accepted by question author
Hi, I am Dave, I will help you with this.
Boot your PC into BIOS, you should find the Secure Boot setting on the Security tab in BIOS, sometimes, you need to disable CSM support to see the Secure Boot setting, if you cannot find that, please provide a photo of each of the tabs you have available in your BIOS
Answer accepted by question author
Thank you for the images, I do not see the Secure Boot option anywhere in your BIOS, if you re-enable CSM Support, does the Secure Boot option appear on that tab?
Answer accepted by question author
Thank you for those images, please provide a photo of the other tabs (Main, Advanced, Chipset and Save & Exit) in your BIOS
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 45%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED2%3C/text%3E%3C/svg%3E)
There is still no indication of the make and model of your PC in that listing, the only thing I can see is you have a TH310C-M3 motherboard, if you can find the support page for that motherboard, check if there is any BIOS update available that may need to be installed.
Hello Dave, thank you for your advice. I have disabled my CSM support, however I cannot find the Secure Boot Setting in the Boot tab. Also the security tab has a different setting options that is somehow cannot be selected.
