После отключения csm не запускается windows 10

I just installed intel optane on m.2 slot it is showing in the boot menu and even in the windows but not working so I updated my bios to latest version but still not working. I read this somewhere I need to disable CMS and enable UEFI but the change in setting not letting windows boot. Tried to change boot option to optane but it also prevents my system from booting into windows.
System specs-
intel core i7 8700K
ASUS Z370F Gaming
2*2 TB sata HDD
1*500gb SSD
Intel optane MEMPEK1W016GA 16GB
windows 10 pro 64bit with latest updates

You can convert your partitions from MBR to GPT without reinstalling Windows completely: no need to reformat your drives.

If Windows does not let you do that for some reasons in its very basic «Disk Manager» (limitations in the possible configurations recognized, or stupid restrictions in its UI that does not support any «advanced mode», not even with some warnings), you can do that with free tools like «Minitool Partition Wizard» (which is a lot simpler to use that the builting Disk Management in Windows, and that even blocks you for performing some changes that are still supported by the kernel and filesystem drivers, or that does not offer options only available with complex options using command line tools like Diskpart or Powershell commands).

Note that the free version of «Minitool Partition Wizard» is usable for almost all options, except a few ones mostly used on servers (like dynamic disks, or changing the cluster size, or changing some attributes, or advanced options for RAID arrays and SAN disks), or for some recovery options, for which you need to buy the «Pro» version (though it’s not expensive); but it is not intrusive, and won’t constantly popup you with ads; and unlike other commercial third party disk management tools, it also has no time limitations, or limitations on volume sizes or number of partitions.

You can also do these changes using some bootable Linux Live CD or USB (note that when you change the boot order, or if you enable CSM, the current TPM automatic boot will be disabled, and the next time you boot Windows in secure mode, it will enter into TPM recovery mode requiring the existing TPM or password/pin recovery or external USB: this is normal behavior which also occurs if ever you have unplugged and replugged in the TPM module. (Microsoft explain the conditions under which such revalidation will occur: don’t loose your TPM recovery backups! If you are not connected to a Windows domain, Microsoft also proposes to recover your Bitlocker encryption keys from your online Microsoft account using 2-factor authentication, but this requires you to register your administrator account on the PC with a Microsoft live account and not jsut using local account; in enterprise domains, you can recover your Bitlocker encryption keys also by using Active Directory but you need to contact your domain admin to reauthorize your PC and allow it to boot again in secure mode).

One difficulty wit hthe new stricter requirements is that they not only want you to boot in secure mode, and with UEFI, but CSM mode must be disabled in BIOS: this has the effect of disabling many devices in BIOS, including some external storages (including some hardware RAID adapters), or display adapters, whose option ROM offers no EFI driver for secure boot: these devices must not be needed to boot your systeml but can be used with Windows drivers after booting Windows successfully: you need recent drivers for these devices that don’t need any BIOS EFI support. This can be a problem with some devices that use third party dus drivers: make sure you also update the bus drivers for your motherboard and that you have flashed the latest BIOS versions with proper EFI boot support that do not enable any «legacy devices».

This includes notably SATA controlers, USB controlers, and sometimes you’ll need to select the correct display driver as your primary display for boot (check which display board is usable: the motherboard’s discrete GPU or the third party display board and note that many legacy third party display boards don’t even have EFI support in their BIOS and will only display at boot time in legacy SVGA mode, without acceleration support!). You may also need to disable audio devices in BIOS (they will only be enabled after boot using drivers for Windows): you normally don’t need to enable and enumerate all devices at boot time, just a basic display, one keyboard, and the disks required for booting the system, their SATA and USB controlers (the various «*HCI»), and a network adapter (Ethernet or Wifi) for your primary internet connection (or LAN connection if you’re in a domain). Moderns BIOSes for EFI actually do not disable devices, they just preconfigure the BIOS without initializing these devices (that will be intialized later by the OS using its own drivers after boot), you configure just the minimum that allows the OS to be loaded and then the modern OS will no longer use the BIOS and will use its own drivers instead.

It is not going to work.
To change boot mode from legacy/CSM to UEFI, you’ll have to convert your OS drive from MBR to GPT.
You can use mbr2gpt utility to do this.

Converts a disk from MBR to GPT partitioning without modifying or deleting data on the disk.

MBR2GPT.exe /validate|convert [/disk:<diskNumber>] [/logs:<logDirectory>] [/map:<source>=<destination>] [/allowFullOS]

Where:

/validate
— Validates that the selected disk can be converted
without performing the actual conversion.

/convert
— Validates that the selected disk can be converted
and performs the actual conversion.

/disk:<diskNumber>
— Specifies the disk number of the disk to be processed.
If not specified, the system disk is processed.

/logs:<logDirectory>
— Specifies the directory for logging. By default logs
are created in the %windir% directory.

/map:<source>=<destination>
— Specifies the GPT partition type to be used for a
given MBR partition type not recognized by Windows.
Multiple /map switches are allowed.

/allowFullOS
— Allows the tool to be used from the full Windows
environment. By default, this tool can only be used
from the Windows Preinstallation Environment.

My windows is running on Legacy first I have to change it to UEFI than I can change MBR to GPT is there any way to perform this without reinstalling windows?

Not exactly.
You:

• run mbr2gpt command first,
  reboot into BIOS,
  change boot mode from legacy/CSM to UEFI,
  change boot order, so windows boot manager is first,
  boot into windows.

You run mbr2gpt command this way:
(replace X with Disk number of your OS drive. Check Disk number in Disk Management)

• first check, if there are any issues
  mbr2gpt /validate /disk:X /allowFullOS
  then perform conversion
  mbr2gpt /convert /disk:X /allowFullOS

If you can’t determine correct Disk number, then post screenshot from Disk Management.

Stuck with some new problem after rebooting cmd prompt is asking for a password which I never setup tried login pin of account and password of Microsoft account linked with my system but cannot bypass that tried solutions from this thread but no solution.
https://answers.microsoft.com/en-us/windows/forum/windows_10-security/windows-10-asks-for-administrator-password/df02b05b-f081-451f-8ee7-36c73ed2ba1a

You can convert your partitions from MBR to GPT without reinstalling Windows completely: no need to reformat your drives.

If Windows does not let you do that for some reasons in its very basic «Disk Manager» (limitations in the possible configurations recognized, or stupid restrictions in its UI that does not support any «advanced mode», not even with some warnings), you can do that with free tools like «Minitool Partition Wizard» (which is a lot simpler to use that the builting Disk Management in Windows, and that even blocks you for performing some changes that are still supported by the kernel and filesystem drivers, or that does not offer options only available with complex options using command line tools like Diskpart or Powershell commands).

Note that the free version of «Minitool Partition Wizard» is usable for almost all options, except a few ones mostly used on servers (like dynamic disks, or changing the cluster size, or changing some attributes, or advanced options for RAID arrays and SAN disks), or for some recovery options, for which you need to buy the «Pro» version (though it’s not expensive); but it is not intrusive, and won’t constantly popup you with ads; and unlike other commercial third party disk management tools, it also has no time limitations, or limitations on volume sizes or number of partitions.

You can also do these changes using some bootable Linux Live CD or USB (note that when you change the boot order, or if you enable CSM, the current TPM automatic boot will be disabled, and the next time you boot Windows in secure mode, it will enter into TPM recovery mode requiring the existing TPM or password/pin recovery or external USB: this is normal behavior which also occurs if ever you have unplugged and replugged in the TPM module. (Microsoft explain the conditions under which such revalidation will occur: don’t loose your TPM recovery backups! If you are not connected to a Windows domain, Microsoft also proposes to recover your Bitlocker encryption keys from your online Microsoft account using 2-factor authentication, but this requires you to register your administrator account on the PC with a Microsoft live account and not jsut using local account; in enterprise domains, you can recover your Bitlocker encryption keys also by using Active Directory but you need to contact your domain admin to reauthorize your PC and allow it to boot again in secure mode).

One difficulty wit hthe new stricter requirements is that they not only want you to boot in secure mode, and with UEFI, but CSM mode must be disabled in BIOS: this has the effect of disabling many devices in BIOS, including some external storages (including some hardware RAID adapters), or display adapters, whose option ROM offers no EFI driver for secure boot: these devices must not be needed to boot your systeml but can be used with Windows drivers after booting Windows successfully: you need recent drivers for these devices that don’t need any BIOS EFI support. This can be a problem with some devices that use third party dus drivers: make sure you also update the bus drivers for your motherboard and that you have flashed the latest BIOS versions with proper EFI boot support that do not enable any «legacy devices».

This includes notably SATA controlers, USB controlers, and sometimes you’ll need to select the correct display driver as your primary display for boot (check which display board is usable: the motherboard’s discrete GPU or the third party display board and note that many legacy third party display boards don’t even have EFI support in their BIOS and will only display at boot time in legacy SVGA mode, without acceleration support!). You may also need to disable audio devices in BIOS (they will only be enabled after boot using drivers for Windows): you normally don’t need to enable and enumerate all devices at boot time, just a basic display, one keyboard, and the disks required for booting the system, their SATA and USB controlers (the various «*HCI»), and a network adapter (Ethernet or Wifi) for your primary internet connection (or LAN connection if you’re in a domain). Moderns BIOSes for EFI actually do not disable devices, they just preconfigure the BIOS without initializing these devices (that will be intialized later by the OS using its own drivers after boot), you configure just the minimum that allows the OS to be loaded and then the modern OS will no longer use the BIOS and will use its own drivers instead.

I just installed intel optane on m.2 slot it is showing in the boot menu and even in the windows but not working so I updated my bios to latest version but still not working. I read this somewhere I need to disable CMS and enable UEFI but the change in setting not letting windows boot. Tried to change boot option to optane but it also prevents my system from booting into windows.
System specs-
intel core i7 8700K
ASUS Z370F Gaming
2*2 TB sata HDD
1*500gb SSD
Intel optane MEMPEK1W016GA 16GB
windows 10 pro 64bit with latest updates

You can convert your partitions from MBR to GPT without reinstalling Windows completely: no need to reformat your drives.

If Windows does not let you do that for some reasons in its very basic «Disk Manager» (limitations in the possible configurations recognized, or stupid restrictions in its UI that does not support any «advanced mode», not even with some warnings), you can do that with free tools like «Minitool Partition Wizard» (which is a lot simpler to use that the builting Disk Management in Windows, and that even blocks you for performing some changes that are still supported by the kernel and filesystem drivers, or that does not offer options only available with complex options using command line tools like Diskpart or Powershell commands).

Note that the free version of «Minitool Partition Wizard» is usable for almost all options, except a few ones mostly used on servers (like dynamic disks, or changing the cluster size, or changing some attributes, or advanced options for RAID arrays and SAN disks), or for some recovery options, for which you need to buy the «Pro» version (though it’s not expensive); but it is not intrusive, and won’t constantly popup you with ads; and unlike other commercial third party disk management tools, it also has no time limitations, or limitations on volume sizes or number of partitions.

You can also do these changes using some bootable Linux Live CD or USB (note that when you change the boot order, or if you enable CSM, the current TPM automatic boot will be disabled, and the next time you boot Windows in secure mode, it will enter into TPM recovery mode requiring the existing TPM or password/pin recovery or external USB: this is normal behavior which also occurs if ever you have unplugged and replugged in the TPM module. (Microsoft explain the conditions under which such revalidation will occur: don’t loose your TPM recovery backups! If you are not connected to a Windows domain, Microsoft also proposes to recover your Bitlocker encryption keys from your online Microsoft account using 2-factor authentication, but this requires you to register your administrator account on the PC with a Microsoft live account and not jsut using local account; in enterprise domains, you can recover your Bitlocker encryption keys also by using Active Directory but you need to contact your domain admin to reauthorize your PC and allow it to boot again in secure mode).

One difficulty wit hthe new stricter requirements is that they not only want you to boot in secure mode, and with UEFI, but CSM mode must be disabled in BIOS: this has the effect of disabling many devices in BIOS, including some external storages (including some hardware RAID adapters), or display adapters, whose option ROM offers no EFI driver for secure boot: these devices must not be needed to boot your systeml but can be used with Windows drivers after booting Windows successfully: you need recent drivers for these devices that don’t need any BIOS EFI support. This can be a problem with some devices that use third party dus drivers: make sure you also update the bus drivers for your motherboard and that you have flashed the latest BIOS versions with proper EFI boot support that do not enable any «legacy devices».

This includes notably SATA controlers, USB controlers, and sometimes you’ll need to select the correct display driver as your primary display for boot (check which display board is usable: the motherboard’s discrete GPU or the third party display board and note that many legacy third party display boards don’t even have EFI support in their BIOS and will only display at boot time in legacy SVGA mode, without acceleration support!). You may also need to disable audio devices in BIOS (they will only be enabled after boot using drivers for Windows): you normally don’t need to enable and enumerate all devices at boot time, just a basic display, one keyboard, and the disks required for booting the system, their SATA and USB controlers (the various «*HCI»), and a network adapter (Ethernet or Wifi) for your primary internet connection (or LAN connection if you’re in a domain). Moderns BIOSes for EFI actually do not disable devices, they just preconfigure the BIOS without initializing these devices (that will be intialized later by the OS using its own drivers after boot), you configure just the minimum that allows the OS to be loaded and then the modern OS will no longer use the BIOS and will use its own drivers instead.

It is not going to work.
To change boot mode from legacy/CSM to UEFI, you’ll have to convert your OS drive from MBR to GPT.
You can use mbr2gpt utility to do this.

Converts a disk from MBR to GPT partitioning without modifying or deleting data on the disk.

MBR2GPT.exe /validate|convert [/disk:<diskNumber>] [/logs:<logDirectory>] [/map:<source>=<destination>] [/allowFullOS]

Where:

/validate
— Validates that the selected disk can be converted
without performing the actual conversion.

/convert
— Validates that the selected disk can be converted
and performs the actual conversion.

/disk:<diskNumber>
— Specifies the disk number of the disk to be processed.
If not specified, the system disk is processed.

/logs:<logDirectory>
— Specifies the directory for logging. By default logs
are created in the %windir% directory.

/map:<source>=<destination>
— Specifies the GPT partition type to be used for a
given MBR partition type not recognized by Windows.
Multiple /map switches are allowed.

/allowFullOS
— Allows the tool to be used from the full Windows
environment. By default, this tool can only be used
from the Windows Preinstallation Environment.

My windows is running on Legacy first I have to change it to UEFI than I can change MBR to GPT is there any way to perform this without reinstalling windows?

Not exactly.
You:

• run mbr2gpt command first,
  reboot into BIOS,
  change boot mode from legacy/CSM to UEFI,
  change boot order, so windows boot manager is first,
  boot into windows.

You run mbr2gpt command this way:
(replace X with Disk number of your OS drive. Check Disk number in Disk Management)

• first check, if there are any issues
  mbr2gpt /validate /disk:X /allowFullOS
  then perform conversion
  mbr2gpt /convert /disk:X /allowFullOS

If you can’t determine correct Disk number, then post screenshot from Disk Management.

Stuck with some new problem after rebooting cmd prompt is asking for a password which I never setup tried login pin of account and password of Microsoft account linked with my system but cannot bypass that tried solutions from this thread but no solution.
https://answers.microsoft.com/en-us/windows/forum/windows_10-security/windows-10-asks-for-administrator-password/df02b05b-f081-451f-8ee7-36c73ed2ba1a

You can convert your partitions from MBR to GPT without reinstalling Windows completely: no need to reformat your drives.

If Windows does not let you do that for some reasons in its very basic «Disk Manager» (limitations in the possible configurations recognized, or stupid restrictions in its UI that does not support any «advanced mode», not even with some warnings), you can do that with free tools like «Minitool Partition Wizard» (which is a lot simpler to use that the builting Disk Management in Windows, and that even blocks you for performing some changes that are still supported by the kernel and filesystem drivers, or that does not offer options only available with complex options using command line tools like Diskpart or Powershell commands).

Note that the free version of «Minitool Partition Wizard» is usable for almost all options, except a few ones mostly used on servers (like dynamic disks, or changing the cluster size, or changing some attributes, or advanced options for RAID arrays and SAN disks), or for some recovery options, for which you need to buy the «Pro» version (though it’s not expensive); but it is not intrusive, and won’t constantly popup you with ads; and unlike other commercial third party disk management tools, it also has no time limitations, or limitations on volume sizes or number of partitions.

You can also do these changes using some bootable Linux Live CD or USB (note that when you change the boot order, or if you enable CSM, the current TPM automatic boot will be disabled, and the next time you boot Windows in secure mode, it will enter into TPM recovery mode requiring the existing TPM or password/pin recovery or external USB: this is normal behavior which also occurs if ever you have unplugged and replugged in the TPM module. (Microsoft explain the conditions under which such revalidation will occur: don’t loose your TPM recovery backups! If you are not connected to a Windows domain, Microsoft also proposes to recover your Bitlocker encryption keys from your online Microsoft account using 2-factor authentication, but this requires you to register your administrator account on the PC with a Microsoft live account and not jsut using local account; in enterprise domains, you can recover your Bitlocker encryption keys also by using Active Directory but you need to contact your domain admin to reauthorize your PC and allow it to boot again in secure mode).

One difficulty wit hthe new stricter requirements is that they not only want you to boot in secure mode, and with UEFI, but CSM mode must be disabled in BIOS: this has the effect of disabling many devices in BIOS, including some external storages (including some hardware RAID adapters), or display adapters, whose option ROM offers no EFI driver for secure boot: these devices must not be needed to boot your systeml but can be used with Windows drivers after booting Windows successfully: you need recent drivers for these devices that don’t need any BIOS EFI support. This can be a problem with some devices that use third party dus drivers: make sure you also update the bus drivers for your motherboard and that you have flashed the latest BIOS versions with proper EFI boot support that do not enable any «legacy devices».

This includes notably SATA controlers, USB controlers, and sometimes you’ll need to select the correct display driver as your primary display for boot (check which display board is usable: the motherboard’s discrete GPU or the third party display board and note that many legacy third party display boards don’t even have EFI support in their BIOS and will only display at boot time in legacy SVGA mode, without acceleration support!). You may also need to disable audio devices in BIOS (they will only be enabled after boot using drivers for Windows): you normally don’t need to enable and enumerate all devices at boot time, just a basic display, one keyboard, and the disks required for booting the system, their SATA and USB controlers (the various «*HCI»), and a network adapter (Ethernet or Wifi) for your primary internet connection (or LAN connection if you’re in a domain). Moderns BIOSes for EFI actually do not disable devices, they just preconfigure the BIOS without initializing these devices (that will be intialized later by the OS using its own drivers after boot), you configure just the minimum that allows the OS to be loaded and then the modern OS will no longer use the BIOS and will use its own drivers instead.