[Problem] How to Add Secure Boot to an AMI UEFI BIOS?

TPM works perfectly, I tried using Faceit AC and it works without issue. Luckily for some dump reason my machine got HWID flagged which when open VALORANT it will throw VAN:RESTRICTION and forces me to enable both HCVI and Secure Boot. Glad that SB can be on now. Anyway looks like the BIOS cannot detect CPU temp, which makes the fan just full speed at all times, but it’s something that the older one does too.
Something more interesting that on old bios I can’t use PCIE 3.0 x16 as regardless of what I can tweak. Now with new BIOS it works with full x16 now

iGPU maybe the BIOS forces video output to be VGA ? and on Windows I have both AMD GPU Driver + no Intel Driver on. But still not a big issue tho

Idk why it doesn’t output image through iGPU (technically it should, even without Intel driver), could be something related to the VBIOS; however, I checked already and the VBIOS version meets the requirement for CFL CPUs. But now that you have an AMD GPU, let’s just leave it at that.

Regarding the Smart Fan function, since both BIOSes have this issue, the problem might be on the hardware side. Chinese manufacturers tend to cheap out on fan control function (esp. for SYS_FAN headers), but this might be the first time I’ve seen them mess it up on the CPU_FAN header.

on BIOS the temperature of CPU is reported as 255 oC. But on Windows using HWinfo it gives the correct temperature reported by CPU

Hmm if that’s the case then it might be something related to the ME Region (I also got 255C temp reading when I messed up the ME Region on other boards). Unfortunately, the solution is beyond the scope of my knowledge. Prolly you can work around this by fixing the fan speed in the “Hardware Monitor” BIOS menu for now.

Anyway another dump question, does sleep function related to BIOS or the board itself, I realise that when I brought this mobo it has no sleep support. I thought that maybe it’s BIOS issue. But even with this new bios it also don’t have sleep support for it

I don’t think it’s a dumb question, since I haven’t got an answer too. I think Sleep function comes from both the hardware and the BIOS (even if there’s an option to enable S3 sleep in the BIOS, it might still not work). Most Chinese cheap motherboards are notorious for the lack of sleep support, so yours might not be an exception.

EDIT 1: I looked at your stock BIOS and the Huananzhi one in AMIBCP and the ACPI Sleep State is missing in both, which is (partly) the reason why sleep mode doesn’t work. Anyway, I found another BIOS from Maxsun (a fairly reputable Chinese brand) with the sleep option present (Secure Boot is there too) so you can give it a try.
MaxsunH311MVHM2.zip (4.6 MB)

Oh, I did not notice you added a comment lol. Will try it now. Can I flash it using FPT ? I’m quite lazy on opening up my PC rn

Update: I flashed maxsun image and still no sleep function. This bios even got flash locked which I can’t flash with FPT. Also I also use RebarUEFI to enable Resizable BAR on it and this BIOS specificly won’t work with it

Yeah just check and both Maxsun and the Huananzhi BIOSes don’t have Resizable BAR built-in. Regarding the FPT issue, can you go check in the BIOS? In Chipset - PCH-IO Configuration - Security Configuration, there’s a Flash Write Protect option and it should be disabled before you can use FPT.

Regarding the Resizable BAR, can you try to flash this 2025 BIOS? Use FPT and only flash the BIOS Region (using the parameter -bios). It has Above 4G Decoding and ReBar option baked in the PCI Subsystem Settings menu so you won’t need to use ReBarUEFI.
H31V3007.zip (4.0 MB)

Can I flash this with Huananzhi BIOS installed or Maxsun or both should work fine ?

I think both should work, but for Maxsun you need to disable the write protect as my above comment first.

It works now. How did you get these bios files anyway ?

Great news! The BIOSes are all available on Chinese manufacturers’ websites. It just took a bit of digging.

lol I just thought BIOSes listed on manufacturer’s websites usually uses executable file form which usually only contains BIOS region

Yeah that’s usually the practice of bigger brands like Dell or HP. Fortunately, the Chinese are not as restrictive (part of the reason why I’m kinda into them :v)

What about WoL, I remembered on stock BIOS I got it working, but it’s not working now (I have enabled Wake-on-LAN in BIOS and Allow wake on magic packet on Windows). When the system turned off I don’t see the light on Ethernet port light up at all

In your stock BIOS, did you have to change any BIOS settings for WoL to work?

Yes, by enabling Wake-on-Lan. But I have resolved this by toggling off WOL, reboot back to BIOS and turning it on. Maybe it’s because CMOS is not cleared by previous one

1 Like