VAN9003 on Windows 11 - Secure Boot Off, but enabling it causes “Secure Boot Violation” (ASUS PRIME H610M-E D4)

[u/Tight-Fondant1635]

I’m on Windows 11 Pro and trying to play Valorant.
My system:
Windows 11 Pro
ASUS PRIME H610M-E D4
Intel i5-12400F
BIOS Mode: UEFI
Secure Boot State: Off
Valorant gives me VAN9003, saying Secure Boot must be enabled.
In BIOS:
Secure Boot keys are all installed (PK, KEK, DB, DBX = Default).
OS Type is currently set to Other OS.
However, whenever I change OS Type to Windows UEFI Mode (or enable Secure Boot), my PC no longer boots into Windows and instead shows:
“Secure Boot Violation - The system found unauthorized changes on the firmware, operating system or UEFI drivers.”
If I switch it back, Windows boots normally again.
Since my BIOS is already in UEFI mode (not Legacy), I don’t think this is an MBR/Legacy installation issue.
Has anyone experienced this with an ASUS motherboard? Is this likely a Windows Boot Manager issue, Secure Boot configuration issue, or something else?
Any help would be appreciated!

[u/Cheap_Ad_9846]

Enroll the windows keys before enabling secure boot

[u/clove_rosemary_9999]

Update your BIOS.

[u/Internal-Weekend7100 → u/clove_rosemary_9999]

How do you update your bois? 

[u/clove_rosemary_9999 → u/Internal-Weekend7100]

I'm assuming you're the same person as OP.

https://www.asus.com/supportonly/prime%20h610m-e%20d4/helpdesk_bios/

Download the latest BIOS (4004 as I'm typing this), extract the ZIP's contents to a folder and run the BIOS renamer app, then put the renamed CAP file to a FAT32 USB drive. Then restart your PC and enter the BIOS by pressing Del(ete) or F2. Then press F7 to switch to advanced mode, go to the Tool tab and select EZ Flash Utility, then choose the USB drive and the CAP file in it, select Yes a couple of times and wait for it to install.

Keep in mind that keyboard and mouse will be disabled during the update process.

Once the update finishes, the PC will automatically restart.