https://github.com/downthecrop/DeckSecureBoot


IF YOU DON'T WANT TO READ THE GITHUB TUTORIAL THAN I GOT YOU 🗣.(It will seem like alot from reading but It's really a 5 minute process)

(THERE ARE 2 KNOWN BUGS THAT YOU MAY OR MAY NOT HAVE. SO DO THIS IF YOU DON'T MIND THE WARNING. THOSE BUGS BEING THE AUDIO DEVICE ON YOUR STEAM DECK SPEAKERS DISABLING AND YOU WILL BE UNABLE TO BE ENABLE OR REINSTALL THEM NO MATTER WHAT YOU DO. AND GAMES WITH EASY ANTI CHEAT NOT WORKING)
( TO FIX THE AUDIO BUG YOU HAVE TO DO THE WINDOWS FIX OPTION IN THE SETTINGS MENU TO INSTALL A REPAIR OF WINDOWS 11/10. KEEP IN MIND YOU CAN NO LONGER TURN OFF YOU STEAM DECK UNLESS YOU WANT TO LOSE YOUR AUDIO DRIVE AGAIN. SO NO LONGER POWERING OFF YOUR STEAM DECK, YOU CAN ONLY PRESS THE POWER BUTTON TO PUT IT IN SLEEP/HIBERNATION MODE. REMEMBER THIS MAY OR MAY NOT HAPPEN TO YOU SO GOOD LUCK.


- First and for most, make sure you already have tpm 2.0 enabled in the steam decks bios. You can check by powering off your steam deck (not hibernation or sleep mode) than holding both the power and volume up buttons at the same time. Once you hear the steam power up chime proceed to keep holding the volume up button and only let go of the power button. Once you see steam logo appear, you can let go of all buttons. Now navigate to the uefi option to enter bios. I forgot what else to do next to check but I'm remembering off the top of my head and I'm to lazy for a refresher, but 9 times out of 10, It should have been enabled by default already. (Don't worry. I won't be this lazy and leave out details with the secure boot tutorial.)

Make sure you disabled bitlocker recovery first as it will most likely appear after the process. (If you know how to see your bitlocker code which is pretty easy to find out than you dont need to disable it i guess.)

Now it starts:

- You need a usb thumbdrive to do it though. Basically format the thumbdrive than download the file to your downloads folder.

- Download the balena etcher or rufus app next.

- Launch the balena or rufus app than choose the downloaded file.

- The drive selection should light up and be available to interact with after.

- It will open your windows file explorer again, so just scroll down the left side till you find your usb thumbdrive folder. Choose it. Than start the process.

- After it completes the process, turn your steam deck off by using the windows power options menu or by holding the power button down for about 3 seconds.

- Next hold down the power and volume down buttons at the same time till you hear the usual steam deck chime sound.

- Let go of only the power button and proceed to keep holding down the volume down button until you see the steam deck logo appear than you can let go.

- Now your in the boot menu (u should be atleast)

- Use your DPAD/Arrows to select the
thumbdrive with the secure boot system in it. It should be named what your thumbdrive is named or be called something along the line of secure boot yaddah yaddah.

- Enter it.

- Now you can see the whole secure boot system and other options that you might need depending on how you have your steam deck setup.

- Now the most obvious option to prioritize first is the enable secure boot option. Turn that on.

- Now choose the above (Check Boot Status) option to see for sure that your secure boot is now enabled.

- If you have steam OS running in dual boot with your windows OS than you NEEEED to enable this next option or steam OS will no longer be able to work even if It's your primary OS. (IF YOU HAVE JUST WINDOWS, THAN SKIP THE NEXT 4-5 DETAILS)

- Choose install steam os jump loader.

- If it says jump.efi already exists in yaddah yaddah yaddah, do you want to overwrite it? than choose yes

- After that completes, choose the install Deck SB iso to disk option.

- If it says the iso already exists than overwrite it like you did with the earlier step. This will allow you to change your secure boot status from the normal steam deck bios without the usb thumbdrive in the future. (Aka you did steam/valves job for them)

- Now reboot.

- If bitlocker recovery blocks you from entering windows than go scroll all the way back up to just before the tutorial started and you'll see what to do.

Boom your done.