| Limited Support Article |
|
This guide only applies to the following NZXT motherboard models:
TPM 2.0 and Secure Boot are enabled by default for Z690 and newer motherboards, however this guide can be used as a reference. For older Z370 & Z390 motherboards, please see the guide below: Enabling TPM 2.0 and Secure Boot on the NZXT N7 Z370 and Z390 Motherboards |
TPM 2.0 and Secure Boot are settings that you may need to enable for a number of reasons, such as updating to Windows 11, setting up file encryption such as BitLocker, or for anti-cheat drivers used by many online games (i.e. Valorant, Call of Duty, etc.).
| Updating your BIOS |
|
Before getting started, it is highly recommended to make sure that you are on the latest BIOS revision available for your motherboard. For more information on updating your motherboard BIOS, please see the guide below: |
Getting Started
To enable TPM or Secure Boot related settings, you'll need to open the UEFI (aka BIOS) settings by pressing F2 or Delete at the NZXT splash screen.
For Intel Motherboards: Once the UEFI settings are open, make sure that you are in Advance Mode which will show the Main, Overclocking, Advanced, etc. tabs across the top of the screen.
For Intel - Enabling Intel Platform Trust Technology (PTT)
With the UEFI settings loaded in Advanced Mode, select the Boot tab and set the Intel Platform Trust Technology (PTT) setting to Enabled.
For AMD - Enabling AMD Firmware TPM (fTPM)
With the UEFI settings loaded, select the Advanced tab and select CPU Configuration. In the CPU Configuration menu, set the AMD fTPM Switch setting to Enabled.
Enabling Secure Boot
| Compatibility Support Module (CSM) and Secure Boot |
|
Before continuing, please note that Compatibility Support Module (CSM) is incompatible with Secure Boot. Before continuing, please make sure that any CSM/Legacy OS settings are disabled. For more information on CSM and Legacy OS settings, please see the article below: How do I enable Legacy OS support for my NZXT Motherboard? If you adjust your CSM settings, please save your settings and reboot the PC before enabling Secure Boot. |
After enabling TPM your system will be ready to enable Secure Boot. Open the Security tab and select the Secure Boot option. In the Secure Boot settings menu, change the Secure Boot setting to Enabled. If the setting changes without any error or pop-up, navigate to the Exit tab and choose Save Changes and Exit.
In some situations, you may get an error that states Secure Boot can be enabled when System in User Mode. Repeat operation after enabling Platform Key (PK). If you receive this error, click OK and select the Key Management option in the Secure Boot Menu. For this error, the Platform Key (PK) will show a value of No Keys.
Select the Install default Secure Boot keys option, then click Yes to proceed. If done correctly, the Platform Key (PK) value will update to show a Factory key.
Return to the Secure Boot menu by clicking the Left Arrow next to Security/Secure Boot/Key Management, then set Secure Boot to Enabled. Open the Exit tab and choose Save Changes and Exit to restart your PC and return to Windows.
Comments
0 comments
Article is closed for comments.