Secure boot with Dual boot question

Topic

New Reply

In preparation to eventually move from Win 10 to 11 when deemed ready for prime time, by Woodie staff.

Hardware in question is a self assembled box with Asus X570 w/wi-fi mobo w/ 32 gig ram, radon video cd, and 4, 500 gig SSHDs. Dual booting win 10 on 500 g WD Blue, and Ubuntu 22.04 LTS on an M2 SSHD.

The question is, will I still be able dual boot after installing the TPM 2.0 SPI add in card on the male pin header on the mobo?

I Had been booting from the Ubuntu drive & subsequent GRUB menu, but after after enabling secure boot in the UEFI bios, it boots from the win 10 hard drive. I can still boot to Ubuntu by hitting F7 key while booting. Ubuntu has yet to pass the WAF {Wife Acceptance Factor}

I have ordered the SPI module from New Egg & coming via pony express so I won’t see it until after xmas.  Thanks in advance.g²

 

 

Reply | Quote

Replies

What is the model of your Asus motherboard?  It’s more than likely that you do not need the TPM 2.0 SPI add in card, but rather you just need to update your motherboard bios to the latest version, and enable TPM in the motherboard bios.

See https://www.asus.com/microsite/motherboard/ASUS-motherboards-Win11-ready/

I would also look in your motherboard bios so see what your boot drive is.  You should be able to change it to boot from your Ubuntu drive if you had been booting from it previously.

Reply | Quote

Thanks Paul T,

That’s encouraging. See my reply to Klang for mobo info

Searching the ASUS ready for win 11  chart on the web site linked in original response. I see no mention of this  X570 moboard. g² Procesor chip is a Ryzen 9 3900

Thanks for the quick response.

g²

 

Reply | Quote

Grub should still load under secure boot and offer you either Windows or Ubuntu.
Check the boot order in EFI/BIOS

cheers, Paul

Reply | Quote

klang wrote:

What is the model of your Asus motherboard?  It’s more than likely that you do not need the TPM 2.0 SPI add in card, but rather you just need to update your motherboard bios to the latest version, and enable TPM in the motherboard bios.

See https://www.asus.com/microsite/motherboard/ASUS-motherboards-Win11-ready/

I would also look in your motherboard bios so see what your boot drive is.  You should be able to change it to boot from your Ubuntu drive if you had been booting from it previously.

Ok I found the AMD  listing for the 570 & it has a link to updated Bios & driver. Will update both.

Reply | Quote

I have the same M/B, I still have 4204. Let us know how it goes!

Just because you don't know where you are going doesn't mean any road will get you there.

Reply | Quote

You do not need the TPM 2.0 SPI add in card.  Once you have updated your motherboard to the latest bios version, and have enabled TPM in the bios, you’re good to go.

 

Reply | Quote

Installed bios TUF GAMING X570-PLUS (WI-FI) BIOS 4408 and after, the unit refused to boot into win 10 even after changing bios to secure boot. Turned off secure boot, no change.Also the grub menu disappeared, replaced with Minimal bash-like command line. Main setup screen sees all hard drives, but win 10 drive is missing from boot menu, only ubuntu remains. reinstalled 4408 bios, no change in symptom, & no I did not back up/image drives.

Does a file need to be added to win 10 boot sector? It does not even try to boot into win 10.

At this point I’m at a loss as to a next step , if these is one.

 

 

 

Reply | Quote

GREGORY GAY wrote:

Main setup screen sees all hard drives, but win 10 drive is missing from boot menu, only ubuntu remains.

What do you mean by the main setup screen? Is this boot menu in the UEFI (“BIOS” to most people)?

It should still work the same after the update, unless some default option with the new firmware is preventing it. It is possible the drive mode was shifted with the firmware upgrade. If the mode is AHCI, try switching it to RAID or Intel RST (same thing, different name).

If that does not work, my go-to for Linux setups is to use the Super Grub 2 rescue “disc” (usually a USB drive now). If you download the .iso, burn that to a USB drive (UEFI mode), then boot it, hopefully use the menus to boot your Linux installation.

After that, you can use the command line to install GRUB again to the desired boot drive, with ‘sudo grub-install /dev/sda’, assuming sda is the drive you want it installed to. If you are not sure, the Gnome disks utility (just called ‘Disks’ in the menu) will help.

Dell XPS 13/9310, i5-1135G7/16GB, KDE Neon 6.2
XPG Xenia 15, i7-9750H/32GB & GTX1660ti, Kubuntu 24.04
Acer Swift Go 14, i5-1335U/16GB, Kubuntu 24.04 (and Win 11)

Reply | Quote

As Ascaris has noted, it is unclear what you are referring to in your last post. When you post, be sure that you clearly state if you are referring to the bios, Grub menu, F7 menu, etc.

For the time being, leave secure boot off.

I’m making a guess here as to what you are referring to:  It is possible that the bios update changed the default boot order. Not a big deal to fix, as you simply change it back. In the bios, what is the default boot order, and what are your possible choices?

 

Reply | Quote

GREGORY GAY wrote:

Does a file need to be added to win 10 boot sector?

No such thing anymore.
The boot files are in a small (200MB) FAT formatted partition. You should have a boot and efi folder and other files. Note: this partition is not visible in Windows, you need to boot to Linux on USB to see it.

cheers, Paul

Reply | Quote