Solved Do You Use Secure Boot?

Buddywh · Jul 23, 2026

HeavyHemi said:
What about waterboarding? I don't believe that has ever been explicitly outlawed in the land of the free.

No less so than the rest of world I suppose?

Buddywh · Jul 23, 2026

Marie SWE said:
...
Have you heard if Microsoft have made any official statement about why only on w11 and not w10?

Perhaps they felt the official statement that it reached End of Support status in October of '25 was enough. Still... I wonder if ESU enrollees will see something in the future if they haven't yet.

BruceR · Jul 23, 2026

Buddywh said:
No less so than the rest of world I suppose?

Rest means all the others, not 20% of them.

garlin · Jul 23, 2026

Marie SWE said:
what I'm a bit curious on.. why only win11 and not win10 as both has bitlocker....
The person that found the CVE thought it was to obvious so it could be interpreted as a on purpose backdoor
Have you heard if Microsoft have made any official statement about why only on w11 and not w10?

Because the same exploit doesn't exist in W10. The broken code was first introduced in W11 24H2 and Server 2022.

https://www.cve.org/CVERecord?id=CVE-2026-45585

TraderGary · Jul 23, 2026

The exploit as published was Windows 11‑specific, but the underlying security weakness also affected Windows 10 — and Microsoft patched both.

OldMainframeGuy · Jul 23, 2026

I've always used it; it's never gotten in the way. The only time I boot a USB stick is to test my Macrium Recovery drive and I've never had to disable Secure Boot to do that. I guess YMMV.

Rob

Marie SWE · Jul 23, 2026

Buddywh said:
Perhaps they felt the official statement that it reached End of Support status in October of '25 was enough. Still... I wonder if ESU enrollees will see something in the future if they haven't yet.

Yeah.. but why didn't win10 get effected.. It was only win11 you could bypass bitlocker on. I'm kind of curious why the exploit dont work on 10

Marie SWE · Jul 23, 2026

garlin said:
Because the same exploit doesn't exist in W10. The broken code was first introduced in W11 24H2 and Server 2022.

https://www.cve.org/CVERecord?id=CVE-2026-45585

Thanks for the link.. I have to dig into whats make win10 more secure.. as it does get ESU updates. I'm kind of curious.

Marie SWE · Jul 23, 2026

TraderGary said:
The exploit as published was Windows 11‑specific, but the underlying security weakness also affected Windows 10 — and Microsoft patched both.

Really.. i have totally missed that. :think:

Stigg · 2026-08-04T02:30:02-0400

Thanks, all. I've marked this thread "Solved"
It seems many users on this forum like Secure Boot.

spapakons · 2026-08-04T02:35:06-0400

In a new computer I have no objection using the default settings (UEFI mode boot and Secure Boot enabled), as long as they behave and don't cause any problems. But on an unsupported computer the more "advanced" settings you disable the better from compatibility aspect. For example, a new computer would have no issues with the change of certificates from 2011 to 2023 version. An older computer most likely will, so it is better to keep Secure Boot disabled to avoid such annoyances. Also I might not do that often, but I would like the freedom to boot both UEFI mode disks and Legacy BIOS disks, so I have to keep CSM enabled and Secure Boot off. I don't like modern computers that boot to UEFI mode only (CSM not available in settings). I find it too limiting.

remover · 2026-08-04T11:20:48-0400

I guess this means yes? All thru the year it said it was on........

pietcorus2 · 2026-08-04T12:55:21-0400

Legacy bios , no EUFI , all is NTFS, works very fine from Win7 , 10 to latest Win11.......

No secure boot enabled , so no problems also............ :wink:

gunrunnerjohn · 2026-08-04T14:12:20-0400

spapakons said:
In a new computer I have no objection using the default settings (UEFI mode boot and Secure Boot enabled), as long as they behave and don't cause any problems. But on an unsupported computer the more "advanced" settings you disable the better from compatibility aspect. For example, a new computer would have no issues with the change of certificates from 2011 to 2023 version. An older computer most likely will, so it is better to keep Secure Boot disabled to avoid such annoyances. Also I might not do that often, but I would like the freedom to boot both UEFI mode disks and Legacy BIOS disks, so I have to keep CSM enabled and Secure Boot off. I don't like modern computers that boot to UEFI mode only (CSM not available in settings). I find it too limiting.

I installed Win11 on an ancient HP-Envy desktop from around 2015-2016, and the @garlin scripts installed Secure Boot capability like a flash. The 2014 BIOS also didn't have any issue accommodating the current secure boot configuration. I used Rufus to bypass the TPU2, Microsoft account, etc. for the install, that went seamlessly as well.

BruceR · 2026-08-04T14:52:42-0400

pietcorus2 said:
No secure boot enabled , so no problems also............

Most computers with secure boot enabled also never have any problems with it.

garlin · 2026-08-04T15:00:14-0400

I think the polls results are:

- Secure Boot is supported on my PC, it's enabled.

- Secure Boot is unsupported. I don't care then.

spapakons · 2026-08-04T15:17:01-0400

That said, keep in mind that having Secure Boot enabled doesn't make your computer immune to attacks. You have to also keep Windows Defender or third-party Antivirus updated and be careful what you do online.

spapakons · 2026-08-04T15:21:33-0400

garlin said:
I think the polls results are:

- Secure Boot is supported on my PC, it's enabled.
- Secure Boot is unsupported. I don't care then.

If I had a Windows 11 compliant PC I would probably leave Secure Boot enabled but make sure I don't let Bitlocker lock my disk without my permission. Also I would make sure I don't revoke 2011 certificates unless I am 100% ready. Since all my computers are unsupported I keep Secure Boot off and don't have to worry about these things. I suggest you do the same. On for compliant PC, off for unsupported. If unsure keep it off.

TraderGary · 2026-08-04T15:45:03-0400

My System One is 3 months old. Secure Boot is enabled.
My System Two is 6 months old. Secure Boot is enabled.

I'm mobile most of the time. I use BitLocker on both computers and on my two T9 portable SSD backup drives.

Solved Do You Use Secure Boot?

Do You Use Secure Boot?

Yes

No

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Stock Market Wizard

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

I almost never bite.......

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

Attachments

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computer My Computer

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Well-known member

My Computers My Computers

At a glance

At a glance

Stock Market Wizard

My Computers My Computers

At a glance

At a glance

Similar threads

My Computers

My Computers

My Computer

My Computer

My Computers

My Computer

My Computers

My Computers

My Computers

My Computers

My Computers

My Computer

My Computers

My Computers

My Computer

My Computer

My Computers

My Computers

My Computers