MSI Motherboard UEFI 2023 CA compatibility question

SM-03

SM-03

Member
Joined
Mar 23, 2023
Messages
36
Hi,

I've a question for this MoBo: PRO H610M-E DDR4 (911-7D48-062 || MS-7D48). I've already updated the latest BISO version 7D48vAO dated 2026-06-10 in this MoBo, but still can't boot the latest Win11 ISO with 2023 UEFI CA. Giving this error every time I try to boot from the ISO
1.jpg


Whereas the same ISO is completely fine with my other MSI MoBo, i.e.
-MSI PRO Z790-A WIFI DDR5 (911-7E07-012 || MS-7E07)
-MSI MAG B760 Tomahawk WIFI DDR4 (911-7D96-001 || MS-7D96)

Is this MSI PRO H610M-E DDR4 (911-7D48-062 || MS-7D48) motherboard's limitation, i.e. this mobo can't boot/support the latest 2023 UEFI CA or what?
I tried to find out about MSI's official statement about the latest 2023 UEFI CA compatibility for this MoBO, but can't find anything official, so asking here.
 
Sort by date Sort by votes
When you say "boot from the ISO", what do you mean exactly, what are you trying to achieve? Is this the latest Win11 ISO that MS offer?
 
Upvote 0 Downvote
citay said:
When you say "boot from the ISO", what do you mean exactly, what are you trying to achieve? Is this the latest Win11 ISO that MS offer?
Click to expand...
It's a 26H1 W11 ISO, more specifically the latest 28000.2704 build
And by saying this, "boot from the ISO", I meant to say boot from the bootable pendrive (F11 key in MSI MoBo) to make a clean installation of Windows

But my Qs are this particularly:
-Is this MSI PRO H610M-E DDR4 (911-7D48-062 || MS-7D48) motherboard is supported/compatible with the latest 2023 UEFI CA, or not?
-Does MSI provide any official info/documentation for their motherboard about this new UEFI 2023 certification compatibility? i.e. which one (model) is/will be compatible or not? Required new BIOS update or not, etc.
 
Upvote 0 Downvote
Normally there should be no issue. Have you tried letting the latest Media Creation Tool prepare the USB drive for you, instead of the ISO method? Another thing you can try, have Rufus prepare the ISO for you.

And if it's really about the BIOS, such a recent BIOS version should have the 2023 keys in there. What you can try: In the BIOS, try setting Secure Boot to Custom. Then go to Key Management and select "Enroll all Factory Default Keys". Press F10 to save and reboot. Immediately enter the BIOS again and set Secure Boot to Standard this time.
 
Upvote 0 Downvote
citay said:
Normally there should be no issue. Have you tried letting the latest Media Creation Tool prepare the USB drive for you, instead of the ISO method? Another thing you can try, have Rufus prepare the ISO for you.

And if it's really about the BIOS, such a recent BIOS version should have the 2023 keys in there. What you can try: In the BIOS, try setting Secure Boot to Custom. Then go to Key Management and select "Enroll all Factory Default Keys". Press F10 to save and reboot. Immediately enter the BIOS again and set Secure Boot to Standard this time.
Click to expand...
Done everything, same issue.

Alos told this earlier
Whereas the same ISO is completely fine with my other MSI MoBo, i.e.
-MSI PRO Z790-A WIFI DDR5 (911-7E07-012 || MS-7E07)
-MSI MAG B760 Tomahawk WIFI DDR4 (911-7D96-001 || MS-7D96)
Click to expand...

That's why my Qs remains the same
-Is this MSI PRO H610M-E DDR4 (911-7D48-062 || MS-7D48) motherboard is supported/compatible with the latest 2023 UEFI CA, or not?
-Does MSI provide any official info/documentation for their motherboard about this new UEFI 2023 certification compatibility? i.e. which one (model) is/will be compatible or not? Required new BIOS update or not, etc.
 
Upvote 0 Downvote
There is no info from MSI about this, to my knowledge. Sometimes, for some older boards, they might release a beta update specifically to supply the new Secure Boot keys, for example here. But any more modern board such as yours, especially when the codebase should be similar for a lot of 600-series boards, I'd simply assume that the new keys are present.

Now, if you used Rufus to have it prepare the USB drive, you can turn off the Win11 requirements, and what you can then try is to disable Secure Boot altogether, that should get you Win11 installed no problem. Then you can enable it again for a test, with Win11 already installed. If there's anything not to Windows' liking, it should download the new certificates/keys via Windows Update and apply them, doesn't matter if the board's latest BIOS version has the 2023 keys or not, they can be updated in there by WU.
 
Upvote 0 Downvote
I have a older system that I have to turn off secure boot to boot off Windows 11 USB, then I turn it back on when I am finished doing my stuff. It has the new keys but an old BIOS that won't automagically inject them.
 
Upvote 0 Downvote
have u happened to have the windows 25h2 to try?? basically this chipset could support Windows 11 installation without any problem.
 
Upvote 0 Downvote
To all the earlier participants who've replied here

Firstly- like I said, this issue and my query is nothing to do with RuFus/Ventoy & with Win ISO 24H2/25H2/26H1.
Those who've been saying that 26H1 is a niche build for SD (ARM) SoC only, 26H1 x64/arm64 retail build was first published offically by MSFT back in Nov/Dec 2025, and since then many users including me using this 26H1 branch build with all my main systems w/out any single issue, in fact its running better than 25XX builds in my and many others opinion, It's just that for general/most users, MSFT hasn't pushed it via its WSUS/Windows update channel. Even FWIW, official MVS (formerly known as MSDN) ISO is available and published by MSFT.

For more context on this 26H1 user exp & all: follow for MSFT-specific forums like MDL, etc.

As I already said, the same ISO flawlessly boots in the other two MSI MoBos, so there goes my original enquiry about the MoBo compatibility with UEFI 2023 CA, thereofre I posted this here, thinking there must be a documented/offixal way to check whether a MoBo is quality for the latest 2023 UEFI CA or not.

I was expecting experienced forum members here could point me out from where & how to check on that, but as I can see now from all these replies, MSI didn't give us any official & legitimate way to check whether a MoBo is compatible with the latest 2023 UEFI CA, neither they publish any clear documentation for this same.
 
Last edited:
Upvote 0 Downvote
SM-03 said:
check whether a MoBo is compatible with the latest 2023 UEFI CA, neither they publish any clear documentation for this same.
Click to expand...
1787729856366.png

You can check it in the BIOS.
1787732051479.png

MSI had tried 26H1 on the same board the result is pass.
 
Last edited:
Upvote 0 Downvote
Pangolin said:
View attachment 212467
You can check it in the BIOS.
View attachment 212468
MSI had tried 26H1 on the same board the result is pass.
Click to expand...
Again, the discussion is about UEFI CA 2023, not about W11 26H1.
Read my earlier posts.

EDIT (27th August 2026)
------------------------------
Ok, so as I can see you edited your earlier comment/reply here, so I'm editing mine accordingly.
Now that you shared the first screenshot from the BIOS, that makes sense here. I'll surely check on that


plutomate​

Earlier, you wrote this
If you check under BIOS > security > secure boot > key management, do you see Microsoft Corp KEK CA 2023 key?
Click to expand...
For confirmation,
I believe you're referring to this same BIOS/Security/KEK settings that @Pangolin mentioned/referred here, right?
 
Last edited:
Upvote 0 Downvote
SM-03 said:
I believe you're referring to this same BIOS/Security/KEK settings that @Pangolin mentioned/referred here, right?
Click to expand...
Yeah, but iirc, for some early board, the KEK key section doesn't actually reveal the full string of CA 2023 so it would be hard to tell.
judging from post from Pangolin, I believe that's the same board as yours ... that means your board should support CA 2023
 
Upvote 0 Downvote
plutomate said:
Yeah, but iirc, for some early board, the KEK key section doesn't actually reveal the full string of CA 2023 so it would be hard to tell.
judging from post from Pangolin, I believe that's the same board as yours ... that means your board should support CA 2023
Click to expand...
Pangolin said:
View attachment 212467
You can check it in the BIOS.
View attachment 212468
MSI had tried 26H1 on the same board the result is pass.
Click to expand...

Today, (finally) checked the PRO H610M-E DDR4 (911-7D48-062 || MS-7D48) board (to clarify, this is my friend's MoBo, not mine),
and yes, the CA 2023 key is there in the BIOS/Security/key section.
MSI PRO H610M-E DDR4 UEFI 2023 CA key SS.jpg

Then, (from 7D48vAO) I updated to the latest BIOS v7D48vAP for this MoBo,
and also on the bootable (pen) drive, updated the Ventoy version from earlier v1.1.16 to the latest v1.1.17.

The problem now seems to be solved. The same ISO that gave me that screen I shared in my first post here is no longer, and ISO is booted/procedded as usual.
So for now, it seems this issue is solved, either by the latest BIOS v7D48vAP or by the latest ventoy v1.1.17 (or maybe both).

If any forum mod or admin is reading this, please pass this feedback to the MSI team:
MSI should properly document & publish this info on the respective motherboard support page on
-What are the Mobo models that are currently supported by this latest UEFI CA 2023, or not.
-How to check whether the latest UEFI CA 2023 is actually compatible & installed on any motherboard (like we discussed here)

So that users don't have to blindly look for answers on the internet, here & there.

Thanks to everyone, especially @plutomate & @Pangolin, for the valuable input & participation.
 
Upvote 0 Downvote
You must log in or register to reply.
Back
Top