What should I do with these BIOS settings: Software Guard Extensions (Intel SGX), Compatability Support Module, Secure Boot

zeal923

Commendable
Jan 21, 2017
18
0
1,510
Hello! I recently built a PC, and this is my part list: https://pcpartpicker.com/list/3PyGnn

I was going through my ASUS UEFI BIOS, and I set my BIOS to optimized defaults. However, when I clicked the SAVE SETTINGS & EXIT option in the BIOS afterwards, it alerted me that Software Guard Extensions would change from DISABLED to SOFTWARE CONTROLLED. It also told me that my Secure Boot OS Type would change from Windows UEFI Mode to Other OS. I have Windows 10 installed on my PC, and want to use UEFI mode. Should I set the Software Guard Extensions to DISABLED and choose the OS Type as Windows UEFI Mode?

Also, I read that if you want to boot just UEFI mode, turn Compatibility Support Module to DISABLED for faster boot times. Should I set it to DISABLED, as I only want to use UEFI mode?

PS: I found this article about CSM mode and Secure Boot, but I can't seem to make sense of it. Can someone please explain the options to me? https://rog.asus.com/tag/disable-csm/
 
Solution
Software Guard Extensions (Intel SGX) - https://software.intel.com/en-us/blogs/2013/09/26/protecting-application-secrets-with-intel-sgx - I am not sure what this is as its new. this might help: https://en.wikipedia.org/wiki/Software_Guard_Extensions or this: http://www.anandtech.com/show/9687/software-guard-extensions-on-specific-skylake-cpus-only

No, you want UEFI as OS type - it matches Win 10
CSM mode allows the UEFI to boot old versions of windows prior to win 8. You can disable it if you want to.
Secure boot just stops PC booting from versions of windows prior to 8 or Linux or any other OS.

To install win 10 you may need to turn off secure boot or maybe Fast boot if it exists, as they may have PC ignore the install USB

Colif

Win 11 Master
Moderator
Software Guard Extensions (Intel SGX) - https://software.intel.com/en-us/blogs/2013/09/26/protecting-application-secrets-with-intel-sgx - I am not sure what this is as its new. this might help: https://en.wikipedia.org/wiki/Software_Guard_Extensions or this: http://www.anandtech.com/show/9687/software-guard-extensions-on-specific-skylake-cpus-only

No, you want UEFI as OS type - it matches Win 10
CSM mode allows the UEFI to boot old versions of windows prior to win 8. You can disable it if you want to.
Secure boot just stops PC booting from versions of windows prior to 8 or Linux or any other OS.

To install win 10 you may need to turn off secure boot or maybe Fast boot if it exists, as they may have PC ignore the install USB
 
Solution

TRENDING THREADS