This is gonna be a little technical, so unless you want to geek out, you may not want to read it. This is ASUS BIOS on B360 chipset.
There's many settings in BIOS regarding UEFI/secure boot and so forth. It's not just one setting you turn on or off.
Right now I'd like to be able to try some non-UEFI pups or even have a fighting chance at taking a look at some 32-bit Pups on my 64-bit machine.
I supposedly have a CSM (compatibility support module) but what I think the problem is, is that the CSM only works in conjunction with "Windows UEFI". I have the setting for "Windows UEFI" switched to "Other OS". If I change it to Windows UEFI then it doesn't like my Puppy Grub or rEFInd, despite having a puppy.cer on the Puppy grub.
Other changes I made in an attempt to give non-UEFI / older pups a chance to run on my machine.
Advanced>USB Configuration>Legacy USB Support>Enabled
Advanced>USB Configuration>XHCI Handoff>Enabled
Advanced>System Agent>Above 4G Decoding>Disabled
Boot>CSM>Launch CSM>Enabled
Boot>CSM>Boot Device>UEFI & Legacy BIOS
Boot>CSM>Storage Device>Legacy only
One thing I could try is rolling back the firmware, since I upgraded it to 3202 I can't change the TPM from firmware to discrete. The firmare one is Intel built-in, the discrete is a set of pins on the motherboard with nothing connected. I used to be able to switch it to discrete and truly disable secure boot entirely. Now, secure boot is technically enabled, but doesn't really do anything because I have it set to "Other OS" instead of "Windows UEFI. Well, that's what I think anyway....
Anybody have any ideas before I try rolling back the firmware version?
There's another setting under Advanced somwhere, something like "trusted computing" I have that disabled and I don't think enabling it will help me, but I could try it.