We use cookies to offer you a more personalized and smoother experience. By visiting this website, you agree to our use of cookies. If you prefer not to accept cookies or require more information, please visit our Privacy Policy.
Question: Some new games like Battlefield 6 or Call of Duty: Black Ops 7 require Secure Boot and TPM 2.0 to provide kernel level anti cheat protection. How do I enable these options on ASRock AM4 motherboards?(10/3/2025) Answer: On recent platforms such as AMD 800 and AMD 600 series, Secure Boot and TPM 2.0 are enabled by default. With these platforms, there is no need to change BIOS settings.
However, if you are still using an AM4 motherboard, Secure Boot and TPM 2.0 might not be enabled. Also, the TPM firmware might have to be updated.
Before enabling Secure Boot, you must check your disk partition style and BIOS settings to ensure they meet the requirements for Secure Boot.
Secure Boot System Requirements
1. Partition Style: GPT (GUID Partition Table). If the disk is MBR (Master Boot Record), please convert it to GPT.
2. BIOS Mode: UEFI only. Legacy or CSM mode doesn't support secure boot.
How to check if the current partition type supports Secure Boot
1. Right-click the Windows button on the desktop and select "Disk Management”.
2. Right-click the disk where Windows is installed and select the ""Properties"".
3. Click the "Volumes” tab and check if the partition style is "GPT”.
GPT partition style can support Secure Boot. You can skip below steps 4-7.
4. If the partition style is "MBR”, please make a backup of important data on the system and refer to steps 5-7 to convert the partition style to GPT.
If you have multiple OS installations or if some system partition is on a different drive than where the OS is, the conversion might not have the desired result. Please backup your DATA and reinstall the OS.
5. Type "CMD" in the Windows search bar, right-click on "Command Prompt” and choose to run as administrator.
6. Type the command "mbr2gpt /convert /allowFullOS” to convert the partition style and press [Enter].
7. Restart the system, and the BIOS Mode/Partition style will be converted to UEFI/GPT.
Switching to UEFI Mode and Enabling Secure Boot in BIOS
1. Please press the "F2” key during POST to enter BIOS setup.
Go to Boot\CSM (Compatibility Support Module) and set "CSM” to "Disabled”.
Press the "F10” key to save configuration changes.
2. Go to Security\Secure Boot and set "Secure Boot Mode” to "Custom”.
3. Please press "Install default Secure Boot keys” and select "Yes” to install Secure Boot keys. If at this point this option is greyed out, Secure Boot key have been loaded already.
4. Set "Secure Boot” to "Enabled”. Then press the "F10” key to save configuration changes.
5. After the system restarts, go to Security\Secure Boot, and make sure that Secure Boot is showing "Active”.
Update BIOS and AMD fTPM
To ensure compatibility between games and Secure Boot/TPM 2.0, ASRock has released new BIOS versions for AM4 motherboards, to update to AMD fTPM 3.x.2.x version.
Type "TPM.msc" in the Windows search bar to find the current fTPM version.
If your current fTPM version is 3.x.0.x, we recommend updating to the latest BIOS version to get the fTPM update. This BIOS version should help you to enable anti-cheat on for example Battlefield 6 or Call of Duty:Black Ops 7.
fTPM 3.*.2.* (TPMB) Information
AMD has informed us that only CPUs with below former codename support fTPM 3.*.2.* (TPMB).
If your CPU is not in the supported CPU lineup for TPMB compatibility, based on AMD's official specifications, your CPU does not meet the security requirements necessary for your game.