Error Enabling Secure Boot on ASUS TUF Gaming B550-PLUS WiFi II

Nawaf 0 Reputation points
2025-08-09T23:41:59.22+00:00

Details

When Secure Boot is enabled on an ASUS TUF Gaming B550-PLUS WiFi II motherboard, Windows 10 and Windows 11 fail to boot due to a winload.efi error. Disabling Secure Boot allows normal booting.

Steps Already Attempted:

  1. Tested multiple OS versions – Clean installed both Windows 10 and Windows 11.
  2. Fresh USB installers – Created official UEFI-compatible bootable USB drives using Microsoft’s Media Creation Tool. Verified the presence of bootx64.efi in EFI\BOOT.
  3. Isolated storage devices – Disconnected all internal drives and attempted booting from USB only. The issue persists.
  4. BIOS settings verification – Disabled CSM, set OS Type to Windows UEFI Mode, ensured Secure Boot Mode is Standard.
  5. Secure Boot keys reset – Cleared all keys and reinstalled default Secure Boot keys from BIOS.
  6. Rebuilt EFI partition – Deleted all partitions, allowing Windows Setup to recreate the EFI System Partition during clean install.
  7. BIOS updates – Tested both older and latest BIOS versions; the issue existed before and after updating.
  8. Cleared CMOS – Performed a full CMOS reset to ensure no residual settings were interfering.
  9. Attempted repair options – Unable to access Command Prompt from the installer when Secure Boot is enabled.
Windows for home | Windows 11 | Install and upgrade
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Ivan Bitencourt 61,870 Reputation points Independent Advisor
    2025-08-10T00:16:09.0366667+00:00

    Hi ,

    Have you tried installing Windows via USB?

    Thanks


  2. Ivan Bitencourt 61,870 Reputation points Independent Advisor
    2025-08-10T02:25:36.28+00:00

    Hi ,

    If you create a USB Flash drive again with Media Creation Tools, access the BIOS and check if the storage default is AHCI. Disable CSM and Secure Boot initially.

    From the boot, install Windows 11. Once the installation is complete, access the BIOS > Secure Boot > change it to active and the mode to standard. Save, access the BIOS and check if the first boot is set to Windows Boot Manager.

    Thanks


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.