Solved - Windows 11, version 24H2 caused Secure Boot Failure on Asus Z790 Hero MB

[PCSP]

Today I got the update for Windows 11, version 24H2 which despite it taking a long time to install seemed to go ok. It performed a reboot that went ok and I was back in windows. I then got an asus popup message asking to install Armoury Crate (which is already installed), looking on the forums its seems that this is happening to a few people after this windows update.

Assuming it was an update to armoury crate I started the install which then proceeded to get stuck. I closed the updated and performed a reboot at which point I got a bios message saying that secure boot had failed and suggesting some options, one of which was to turn secure boot off from the bios.

I did a force reboot (as the PC went to a black screen) and have changed secure boot in the bios from UEFI Secure Boot to Other OS and I am now able to boot and am back in windows (with the update seemingly installed).

Presumably this specific windows update is having issue with the asus mb for some reason. I cant be the only person with a Z790 Hero with this problem, hopefully someone knows more and has an answer or at least finds my temporary solution helpful if like me the windows update has killed your PC.

My question is what happened, why and how do I go back to being able to use UEFI secure boot?

 

[SpyderTracks]

Is this a pcspecialist system? Can you copy and paste your full specs from the order page?

 

[PCSP]

Yes its a PC Specialist pc

Case
CORSAIR iCUE 5000T RGB MID TOWER GAMING CASE
Processor (CPU)
Intel® Core™ i9 24-Core Processor i9-13900K (3.0GHz) 36MB Cache
Motherboard
ASUS® ROG MAXIMUS Z790 HERO (DDR5, LGA1700, USB 3.2, PCIe 5.0) - ARGB Ready
Memory (RAM)
64GB Corsair DOMINATOR PLATINUM RGB DDR5 5200MHz (2 x 32GB)
Graphics Card
24GB NVIDIA GEFORCE RTX 4090 - HDMI, DP
Graphics Card Support Bracket
PCS GRAPHICS CARD SUPPORT BRACKET
1st M.2 SSD Drive
2TB SAMSUNG 990 PRO M.2, PCIe 4.0 NVMe (up to 7450MB/R, 6900MB/W)
DVD/BLU-RAY Drive
NOT REQUIRED
Power Supply
CORSAIR 1200W HX SERIES™ MODULAR 80 PLUS® PLATINUM, ULTRA QUIET
Power Cable
1 x 1.5 Metre UK Power Cable (Kettle Lead, 1.0mm Core)
Processor Cooling
CORSAIR iCUE H150i ELITE RGB High Performance CPU Cooler
Thermal Paste
STANDARD THERMAL PASTE FOR SUFFICIENT COOLING
Sound Card
ONBOARD 6 CHANNEL (5.1) HIGH DEF AUDIO (AS STANDARD)
Network Card
10/100/1000 GIGABIT LAN PORT
Wireless Network Card
NOT REQUIRED
USB/Thunderbolt Options
MIN. 2 x USB 3.0 & 2 x USB 2.0 PORTS @ BACK PANEL + MIN. 2 FRONT PORTS
Operating System
Windows 11 Home 64 Bit - inc. Single Licence [KUK-00003]

 

[PCSP]

I think I fixed it.

For some reason when the windows update was installed the ASUS armoury crate was uninstalled or corrupted to the point that ASUS tried to install it again when windows booted after the update. This install failed, which seems to be the cause of the secure boot issue.

Using the Armoury uninstall tool to remove what bits of ASUS armoury was installed and then using the latest version of ASUS armoury to reinstall, followed by a couple of ASUS updates within the software (released 17-2-25) has fixed both the ASUS armoury, and in turn the secure boot.

I reenabled windows secure boot within the bios and it seems things are running ok again now.

 

[SpyderTracks]

I think I fixed it.

For some reason when the windows update was installed the ASUS armoury crate was uninstalled or corrupted to the point that ASUS tried to install it again when windows booted after the update. This install failed, which seems to be the cause of the secure boot issue.

Using the Armoury uninstall tool to remove what bits of ASUS armoury was installed and then using the latest version of ASUS armoury to reinstall, followed by a couple of ASUS updates within the software (released 17-2-25) has fixed both the ASUS armoury, and in turn the secure boot.

I reenabled windows secure boot within the bios and it seems things are running ok again now.

So if you've got Armory Crate installed at all, there's something wrong with your configuration, it should never be installed as it's known to cause loads of varying issues.

By default, there's a setting in the BIOS that will automatically install it in windows, you need to disable that.

[Motherboard] How to disable automatic download of Armoury Crate? | Official Support | ASUS Global

But you would never do an in place upgrade of a windows version anyway, a clean install is always recommended. You'll find you'll be losing significant performance after an in place upgrade.

 

[PCSP]

I had a problem initially with Armoury when I first got the PC until I realised what the issue was and since then its been fine and quite useful. The BIOS setting for installation by default is off and has been since day 1, I double checked that before the reboot so its not that which was forcing the reinstallation.
Reinstalling windows for every update would drive me mad, it takes no long enough to get things setup how I like them after an installation, I wouldn't want to do that each time and performance wise, now that the update is working ok, if anything the windows environment feels faster the pre update.
I am just glad its resolved swiftly.