H610M-HVS/M.2 R2.0 Secure Boot not active
Printed From: ASRock.com
Category: Technical Support
Forum Name: Intel Motherboards
Forum Description: Question about ASRock Intel Motherboards
URL: https://forum.asrock.com/forum_posts.asp?TID=113537
Printed Date: 03 Aug 2026 at 3:04am
Software Version: Web Wiz Forums 12.04 - http://www.webwizforums.com
Topic: H610M-HVS/M.2 R2.0 Secure Boot not active
Posted By: DeltaD
Subject: H610M-HVS/M.2 R2.0 Secure Boot not active
Date Posted: 18 Jun 2026 at 11:24pm
|
I'm a new member here with a relatively new PC that has an ASROck MB - System Model H610M-HVS/M.2 R2.0 . Having only just discovered a lot of info about Secure Boot keys & dates etc I figured I should check out the situation with my PC. So while SB says Enabled, underneath it says "Not active". Google also said I should disable CSM but it was also already disabled without any option to enable, stating that I needed an external graphics card weirdly! I'm not a gamer or into dodgy sites etc but I gather it would still be prudent to have SB properly functioning. Currently it isn't showing up in Windows Security & I've just had to turn off Updates because of a corrupted one preventing me from getting into Windows. Is this a motherboard issue or do I need to be doing something else to fix it? Thanks :) |
Replies:
Posted By: Xaltar
Date Posted: 18 Jun 2026 at 11:37pm
|
OK, so this is a far more complicated issue than it should be. Personally, I feel it should have been handled better by Microsoft. Let's go over a list of things to check: 1. Have you updated your BIOS to the latest version available? https://www.asrock.com/mb/Intel/H610M-HVSM.2%20R2.0/index.asp#BIOS You should be on version 11.01 that includes the new keys 2. Is your OS installed on a GPT partition? In Windows, right-click Start -> Disk Management Right-click your main disk -> Properties -> Volumes Check Partition Style: It must be GPT, not MBR 3. If you have verified the above you can try resetting your keys: Enter BIOS/UEFI (usually F2 or Delete) Navigate to the Secure Boot configuration section Change the Secure Boot mode from Standard to Custom Select the option to Restore Factory Keys or Install Default Secure Boot Keys Change the mode back to Standard I don't use SB on most of my systems outside of the ones I use for work/banking etc. That said, being as secure as possible is never a bad idea. Based on your description I suspect you have not updated your BIOS yet. Good luck  ------------- 
|
Posted By: DeltaD
Date Posted: 19 Jun 2026 at 12:39am
|
Hi Xaltar Thanks SO much for that info. Can I assume updating the BIOS is relatively risk free? I do use the PC for banking so presumably better to tackle the issue than risk something worse further down the line perhaps. The OS is on a GPT partition ok. Is the CSM of any importance as I gathered it s/b enabled after the keys are updated but I can't do that with mine, unless maybe it will sort itself after the update. |
Posted By: Xaltar
Date Posted: 19 Jun 2026 at 2:55am
|
CSM should be disabled. Enabling it will prevent secure boot from working. As for BIOS updates, make sure you restore factory defaults and restart the system before updating. Make sure the system is not powered off during the flash procedure. The system will prompt you to restart when done. Your board does not appear to have a BIOS flashback function so caution is always advised when updating. The odds of something going wrong are extremely low but any interruption (power, hitting reset etc) can cause it to fail and render the motherboard useless. It can be recovered if it fails but will require either taking it to a qualified service center or buying and learning to use a ROM flasher device. I am not trying to scare you, just give you some pointers on what to avoid and what precautions to take to ensure a smooth update. I will break it down in steps so it's easy to follow: 1. Download the BIOS file from your product page 2. Extract the .zip file to a FAT32 formatted flash drive, ideally with nothing else on it to save you having to wait while the BIOS searches it's contents 3. Enter the BIOS and "Load UEFI Defaults" then save and exit 4. I usually boot back into windows and shut down from there at this point 5. Boot back into the BIOS, insert your flash drive into one of the black USB ports on the back panel of your motherboard. 6. Navigate to instant flash and follow the prompts. Once complete the system will reboot. If all went well (which it should) you will be updated and ready to try enabling your Secure Boot. There is no reason it should give you any issues, failed flashes are very rare but I didn't want to leave you with the impression that it is impossible for it to cause a major issue. Good luck -------------
|
Posted By: DeltaD
Date Posted: 19 Jun 2026 at 3:11am
|
Aww you're a gem Xaltar - better than the AI lol!! Just happy to have an understandable walkthrough. I'll have to leave it until Mon as I don't want to risk anything interupting my PC access over the next 2-3 days, plus I've warned my tech guy I might be dropping it back to him at some point next wk anyway. Much appreciated! :) Thanks |
Posted By: Xaltar
Date Posted: 20 Jun 2026 at 12:49am
|
AI gets a lot wrong unfortunately. It is only as accurate is the information is scours from the web and it also makes connections that aren't there. It can be a useful tool but only in the hands of someone that can filter out the BS. Usually it's good enough to put you on the right path but you need to do the research yourself from that point on. A perfect example, when I search your board model and ask if it has BIOS flashback AI says yes it does. It does not. The AI assumes that X or Y similar model does so therefore so does B model. TLDR, never take AI at face value, always dive the links it referrences and see if they apply to your situation properly and how. Good luck on Monday, let me know how it goes. -------------
|