Does clean install actually require Secure Boot?

pparks1

Active member
Member
VIP
Local time
5:01 PM
Posts
129
I'm using the official MCT ISO file from Microsoft for the release of Windows 11.

I'm clean installing to my Beelink mini PC and just playing with some settings. This host has an 8th generation Core i5, has TPM 2 support and runs UEFI with secure boot capabilities.

Config 1 ( I expected this to fail)
  1. Turned off Platform Trusted Technology
  2. Turned off Secure Boot
  3. Upon trying to clean install WIndows 10, I was told that I didn't meet the system requirements and the install stopped.
Config 2 ( I expected this to fail)
  1. Turned off Platform Trusted Technology
  2. Turned on Secure Boot
  3. Upon trying to clean install WIndows 10, I was told that I didn't meet the system requirements and the install stopped.
Config 3
  1. Turned on Platform Trusted Technology
  2. Turned off Secure Boot
  3. Windows 11 installed just fine, no warnings about not meeting system requirements.

So, my question is
  1. Am I able to install without secure boot because I am doing a clean install, and it's simply installing in a non-supported fashion (that MS says they won't support and MAY NOT get security updates?
I'm going to test it by putting my image for Windows 10 pro that came with the machine back on it and try an upgrade.
 

My Computer

System One

  • Operating System
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink SEI8
    CPU
    Intel Core i5-8279u
    Motherboard
    AZW SEI
    Memory
    32GB DDR4 2666Mhz
    Graphics Card(s)
    Intel Iris Plus 655
    Sound Card
    Intel SST
    Monitor(s) Displays
    Asus ProArt PA278QV
    Screen Resolution
    2560x1440
    Hard Drives
    512GB NVMe
    PSU
    NA
    Case
    NA
    Cooling
    NA
    Keyboard
    NA
    Mouse
    NA
    Internet Speed
    500/50
    Browser
    Edge
    Antivirus
    Defender
    Other Info
    Mini PC used for testing Windows 11.

pparks1

Active member
Member
VIP
Thread Starter
Local time
5:01 PM
Posts
129
Put back my windows 10 pro image back on the machine.

Upgrade 1 test (I expected this to fail)
  1. Turned off Platform Trusted Technology
  2. Secure Boot is not enabled
  3. Upgrade from within Windows failed and it said it was because I needed TPM
Upgrade 2 test
  1. Turned on Platform Trusted Technology
  2. Secure Boot is turned off
  3. The upgrade went fine, didn't prompt me with any warnings whatsoever.

I'll be honest, I didn't expect upgrade 2 to go forward with secure boot disabled in the BIOS. It doesn't seem like it really requires it to be enabled.
 

My Computer

System One

  • Operating System
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink SEI8
    CPU
    Intel Core i5-8279u
    Motherboard
    AZW SEI
    Memory
    32GB DDR4 2666Mhz
    Graphics Card(s)
    Intel Iris Plus 655
    Sound Card
    Intel SST
    Monitor(s) Displays
    Asus ProArt PA278QV
    Screen Resolution
    2560x1440
    Hard Drives
    512GB NVMe
    PSU
    NA
    Case
    NA
    Cooling
    NA
    Keyboard
    NA
    Mouse
    NA
    Internet Speed
    500/50
    Browser
    Edge
    Antivirus
    Defender
    Other Info
    Mini PC used for testing Windows 11.

LeLibran

Active member
Member
Local time
10:01 PM
Posts
91
All the compatibility guidance I've says the 'device' must support Secure Boot, but I haven't seen anything which requires it to be enabled. This may be down to the fact that it could create compatibility problems with software that can't install/run if Secure Boot is enabled.
 

My Computers

System One System Two

  • Operating System
    MacOS (plus VirtualBox VMs: Windows 7/10 Pro/11 Pro, Linux - Debian & Variants)
    Computer type
    Laptop
    Manufacturer/Model
    Apple MacBook Pro 2019 (Intel)
    CPU
    i9
    Memory
    16GB
    Hard Drives
    1TB SSD
    Browser
    Safari/MS Edge/Vivaldi
    Antivirus
    -
  • Operating System
    Windows 11 Pro (plus VirtualBox VMs: Windows 10 & Linux - Debian & Variants)
    Computer type
    Laptop
    Manufacturer/Model
    Microsoft Surface Book 2
    CPU
    i7
    Memory
    16GB
    Hard Drives
    1TB SSD
    Browser
    MS Edge/Vivaldi
    Antivirus
    Defender

pparks1

Active member
Member
VIP
Thread Starter
Local time
5:01 PM
Posts
129
Yeah, that must be the case. I'm looking at my box after a successful upgrade and msinfo32 shows
Secure Boot State : Off
 

My Computer

System One

  • Operating System
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink SEI8
    CPU
    Intel Core i5-8279u
    Motherboard
    AZW SEI
    Memory
    32GB DDR4 2666Mhz
    Graphics Card(s)
    Intel Iris Plus 655
    Sound Card
    Intel SST
    Monitor(s) Displays
    Asus ProArt PA278QV
    Screen Resolution
    2560x1440
    Hard Drives
    512GB NVMe
    PSU
    NA
    Case
    NA
    Cooling
    NA
    Keyboard
    NA
    Mouse
    NA
    Internet Speed
    500/50
    Browser
    Edge
    Antivirus
    Defender
    Other Info
    Mini PC used for testing Windows 11.

BunnyJ

Python Programmer
Power User
VIP
Local time
5:01 PM
Posts
2,662
Location
Oak Ridge, TN(The Secret City)
All the compatibility guidance I've says the 'device' must support Secure Boot, but I haven't seen anything which requires it to be enabled. This may be down to the fact that it could create compatibility problems with software that can't install/run if Secure Boot is enabled.
Yes,, compliant as in present but it doesn't have to be active.
 

My Computer

System One

  • Operating System
    Windows 11 Home 22000.258
    Computer type
    PC/Desktop
    Manufacturer/Model
    Banna Junior 6K - E Series
    CPU
    AMD Ryze 3 3200G
    Motherboard
    ASUS Prime B350M-E
    Memory
    Crucial Ballistix Sport LT 2666 MHz DDR4 - 16GB
    Graphics Card(s)
    GeForce GTX TITAN X 12GB
    Sound Card
    On motherboard
    Monitor(s) Displays
    Viotek 32" Curved, ViewSonic 27"
    Screen Resolution
    1080P
    Hard Drives
    Primary Samsung 256 SSD
    PSU
    EVGA BQ 700w 80+ Bronze
    Case
    NZXT 510
    Cooling
    Stock AMD cooler
    Keyboard
    Corsair
    Mouse
    Amazon Generic with Cord
    Internet Speed
    Download: 240.78 mbps Upload: 12.02 mbps Ping: 15ms
    Browser
    Firefox and Edge
    Antivirus
    Defender

tinmar49

Active member
Local time
10:01 PM
Posts
114
Location
UK
I have just carried out a clean install of W11 from an ISO supplied via the Microsoft website. I have secure boot enabled, with a password for the boot disk selected and the tpm is also running. After several tries, I succeeded in getting it to load.
 

My Computer

System One

  • Operating System
    W11 pro beta
    Computer type
    PC/Desktop
    CPU
    Athlon 3000G
    Motherboard
    Asrock A320M-HDV r4.0
    Memory
    8Gb Crucial DDR4 2400
    Graphics Card(s)
    onboard cpu
    Sound Card
    onboard
    Monitor(s) Displays
    AOC 27
    Screen Resolution
    2560-1440
    Hard Drives
    WD black SN750 M2 500Gb
    PSU
    400W Novatech semi modular 80+bronze.
    Case
    Fractal Design
    Keyboard
    Front 2 x 120mmmm, rear 100mm, stock psu cooler.
    Internet Speed
    215/21
    Browser
    Firefox and edge
    Antivirus
    Windows Security and free Malwarebytes

geneo

You've got to pick up every stitch
Power User
VIP
Local time
5:01 PM
Posts
703
Kinda make you wonder why the requirement is there in the first place. Secure boot shouldn't affect any post-boot non-OS software. They must have some thoughts about it in the future.
 

My Computers

System One System Two

  • Operating System
    Windows 11 Pro x64
    Computer type
    PC/Desktop
    Manufacturer/Model
    DIY
    CPU
    10900KF, 5.1 GHz delid
    Motherboard
    Asus Maximus Hero XII Wifi
    Memory
    64GB G.skill TridentZ RGB 3200CL14 B-die @ 3600 CL16
    Graphics Card(s)
    Asus ROG Strix 2070 Super A8G
    Sound Card
    Onboard Audio, Vanatoo Transparent One; Klipsch R-12SWi Sub
    Monitor(s) Displays
    Eizo CG2730, ViewSonic VP2768
    Screen Resolution
    2560 x 1440p x 2
    Hard Drives
    Samsung 960 Pro 512 GB (OS), Samsung 980 1TB, Raid 0: 1TB 850 EVO + 1TB 860 EVO. Sabrent USB-C DS-SC5B docking station: 6TB WDC Black, 6TB Ironwolf Pro; 2TB WDC Black
    PSU
    750W Seasonic Prime Ultra Titanium
    Case
    Fractal Design Meshify 2
    Cooling
    EK-AIO 360 D-RGB w/Phanteks 120 T30 fans, 2x Noctua NF-A14 Chromax case
    Keyboard
    Glorious GMMK TKL - Brown mechanical
    Mouse
    Logitech G305 wireless gaming
    Internet Speed
    120 Mb/s down, 12 Mb/s up
    Browser
    Firefox
    Antivirus
    Defender, Macrium Reflect 8 ;-)
    Other Info
    Logitech C920e Webcam
  • Operating System
    Mac OS Big Sur
    Computer type
    Laptop
    Manufacturer/Model
    Apple 13" Macbook Pro 2020 (m1)
    CPU
    M1
    Monitor(s) Displays
    2560x1600

tinmar49

Active member
Local time
10:01 PM
Posts
114
Location
UK
The security measures have caused me no end of trouble in changing drives and getting a clean install done. Apart from that, I think I'm getting to like W11.
 

My Computer

System One

  • Operating System
    W11 pro beta
    Computer type
    PC/Desktop
    CPU
    Athlon 3000G
    Motherboard
    Asrock A320M-HDV r4.0
    Memory
    8Gb Crucial DDR4 2400
    Graphics Card(s)
    onboard cpu
    Sound Card
    onboard
    Monitor(s) Displays
    AOC 27
    Screen Resolution
    2560-1440
    Hard Drives
    WD black SN750 M2 500Gb
    PSU
    400W Novatech semi modular 80+bronze.
    Case
    Fractal Design
    Keyboard
    Front 2 x 120mmmm, rear 100mm, stock psu cooler.
    Internet Speed
    215/21
    Browser
    Firefox and edge
    Antivirus
    Windows Security and free Malwarebytes
Top Bottom