Bios Setup

This part may scare some people, but don't worry, there's nothing complicated about it. Just follow the guide and everything will be easy.

1. Good Way To Setup

  • Drives must be formatted in GPT partitions

  • Boot mode has to be in UEFI

  • Turn ON and enable Intel Virtualization and all related options like VT-d and VT-x

  • Turn OFF secure boot / delete all bootable keys

  • Turn TPM option OFF (Optional) what it does is that It disables security chip on your motherboard, that contains uniquely identifiable data that can be used to HWID ban your machine. Disabling is recommended for that purpose.

2. Enter in bios

3. How to disable on

MSI

Secure boot OFF

Security -> Secure Boot -> Secure Boot [Disable] Delete all bootable keys to

Virtualization ON

(Virtualization can be named a bit different like "SVM Mode", "VT-x", "VT-d" it depend of motherboard model)

Overclocking -> CPU Features -> Intel VT-D Tech [Enable] it could be named VT-x to

TPM OFF

Settings -> Security -> Trusted Computing -> Security device support [Disable]

IN CASE YOU CAN'T DISABLE TPM:

Open powershell as admin, and execute the following commands :

Get-BitLockerVolume

IF PROTECTION STATUS IS ON:

Disable-BitLocker -MountPoint "C:"

IF OFF, OR YOU DISABLED BITLOCKER, DO:

Disable-TpmAutoProvisioning

Clear-Tpm < clears hash

Gigabyte / Aorus

Secure Boot OFF /Delete all bootable keys

Watch this simple tutorial video to DISABLE Secure boot!

Virtualization ON

(Virtualization can be named a bit different like "SVM Mode", "VT-x", "VT-d" it depend of motherboard model)

Old UI

On the old UI, you can manage the virtualization setting from the locations listed below:

  • Chipset > Intel Virtualization Technology (VT-x)

  • M.I.T. > Advanced Frequency Settings > Advanced CPU Settings > SVM Mode

  • M.I.T. > Advanced CPU Core Settings > SVM Mode

New UI

With the new UI, you can find the virtualization option in the following locations:

  • Tweaker > Advanced CPU Settings > SVM Mode

  • Tweaker > Advanced CPU Settings > Intel Virtualization Technology (VT-x)

TPM OFF

Watch this simple tutorial video.

INTEL 00:00 -> 1:20

IN CASE YOU CAN'T DISABLE TPM:

Open powershell as admin, and execute the following commands :

Get-BitLockerVolume

IF PROTECTION STATUS IS ON:

Disable-BitLocker -MountPoint "C:"

IF OFF, OR YOU DISABLED BITLOCKER, DO:

Disable-TpmAutoProvisioning

Clear-Tpm < clears hash

Asus

Secure boot OFF / Delete all bootable keys

After entering the BIOS utility, press the [F7] key on your keyboard, or you can click on the [Advanced Mode] option on the screen

Enter the [Boot] screen, and then select [Secure Boot]

After entering Secure Boot, select [OS Type], then adjust the setting you wish. Note: Setting to 「Windows UEFI mode」 will activate Secure Boot; setting to 「Other OS」 will deactivate Secure Boot. Note: The Secure Boot state displayed on the screen cannot be changed manually but will change depending on whether there is a 「Secure Boot Key」 present. If a Secure Boot Key is present, the state will be 「User」; if there is no Secure Boot Key, the state will be 「Setup」

Virtualization ON

(Virtualization can be named a bit different like "SVM Mode", "VT-x", "VT-d" it depend of motherboard model)

1.Press 'F7' to enter into Advanced Mode, as below

2.Click [Advanced] - [CPU Configuration]

3.You can see [Intel (VMX) Virtualization Technology], the default setting is Enabled

TPM OFF

Watch this simple tutorial video.

INTEL 00:00 -> 1:20

IN CASE YOU CAN'T DISABLE TPM:

Open powershell as admin, and execute the following commands :

Get-BitLockerVolume

IF PROTECTION STATUS IS ON:

Disable-BitLocker -MountPoint "C:"

IF OFF, OR YOU DISABLED BITLOCKER, DO:

Disable-TpmAutoProvisioning

Clear-Tpm < clears hash

Asrock

Secure Boot OFF / Delete all secure boot key

Security -> Secure Boot -> and select Disable

Virtualization ON

(Virtualization can be named a bit different like "SVM Mode", "VT-x", "VT-d" it depend of motherboard model)

(BIOS -> Advanced -> CPU Configuration -> Set "Intel Virtualization Technology" to "Enabled")

TPM OFF

Watch this simple tutorial video.

INTEL 00:00 -> 1:20

IN CASE YOU CAN'T DISABLE TPM:

Open powershell as admin, and execute the following commands :

Get-BitLockerVolume

IF PROTECTION STATUS IS ON:

Disable-BitLocker -MountPoint "C:"

IF OFF, OR YOU DISABLED BITLOCKER, DO:

Disable-TpmAutoProvisioning

Clear-Tpm < clears hash

Any other Motherboards

Find a Youtube tutorial how to disable TPM, Secure Boot & Enable Virtualization

IN CASE YOU CAN'T DISABLE TPM:

Open powershell as admin, and execute the following commands :

Get-BitLockerVolume

IF PROTECTION STATUS IS ON:

Disable-BitLocker -MountPoint "C:"

IF OFF, OR YOU DISABLED BITLOCKER, DO:

Disable-TpmAutoProvisionin

How to check if everything's is good ? Virtualization ON

Secure boot OFF

Last updated