System Enable or Disable Secure Boot in Windows 11


  • Staff
Secure_Boot_banner.png

This tutorial will show you how to enable or disable Secure Boot on your Windows 11 PC.

Windows 11 minimum system requirements include your system to be UEFI (Unified Extensible Firmware Interface) and Secure Boot capable. While the requirement to upgrade a Windows 10 device to Windows 11 is only that the PC be Secure Boot capable by having UEFI enabled, you may also consider enabling Secure Boot for better security.

Secure Boot is an important security feature designed to prevent malicious software from loading when your PC starts up (boots). When the PC starts, the firmware checks the signature of each piece of boot software, including UEFI firmware drivers (also known as Option ROMs), EFI applications, and the operating system. If the signatures are valid, the PC boots, and the firmware gives control to the operating system.

Most modern PCs are capable of Secure Boot, but in some instances, there may be settings that cause the PC to appear to not be capable of Secure Boot. These settings can be changed in the PC UEFI/BIOS firmware.

If you're running certain PC graphics cards, hardware, or operating systems such as Linux or previous version of Windows you may need to disable Secure Boot.

Secure Boot helps to make sure that your PC boots using only firmware that is trusted by the manufacturer. You can usually disable Secure Boot through the PC’s firmware (BIOS) menus, but the way you disable it varies by PC manufacturer. If you are having trouble disabling Secure Boot after following the steps below, contact your manufacturer for help.

References:
learn.microsoft.com

Secure boot

Provides guidance on what an OEM should do to enable Securely booting a device
learn.microsoft.com

Windows 11 and Secure Boot - Microsoft Support

Learn how to change settings to enable Secure Boot if you are not able to upgrade to Windows 11 because your PC is not currently Secure Boot capable.
support.microsoft.com support.microsoft.com
learn.microsoft.com

Disabling Secure Boot

Disabling Secure Boot
learn.microsoft.com

After disabling Secure Boot and installing other software and hardware, you may need to restore your PC to the factory state to re-activate Secure Boot.

Be careful when changing BIOS settings. The BIOS menu is designed for advanced users, and it's possible to change a setting that could prevent your PC from starting correctly. Be sure to follow the manufacturer's instructions exactly.




Contents





Option One

Enable Secure Boot


1 Boot to UEFI Firmware Settings.

2 Depending on your PC/motherboard manufacturer, open the Security, Boot, or Authentication tab to find the Secure Boot setting. (see screenshot below)

ASUS_secure_boot.png

3 Enable the Secure Boot setting. (see screenshots below)

Depending on your PC/motherboard manufacturer, you may need to Install Default Secure Boot Keys instead to enable Secure Boot.


Secure_Boot_Control.png
Install_default_Secure_Boot_keys.png

4 Open the Exit tab, and click/tap on Save Changes and Exit. (see screenshot below)

Save_Changes_and_Exit.png

5 If prompted, approve changes to UEFI settings.

6 The computer will now reboot.

If the PC isn't able to boot after enabling Secure Boot, then disable Secure Boot in Option Two, and try to boot the PC again.






Option Two

Disable Secure Boot


1 Boot to UEFI Firmware Settings.

2 Depending on your PC/motherboard manufacturer, open the Security, Boot, or Authentication tab to find the Secure Boot setting. (see screenshot below)

ASUS_secure_boot.png

3 Disable the Secure Boot setting. (see screenshots below)

Depending on your PC/motherboard manufacturer, you may need to Clear Secure Boot Keys instead to disable Secure Boot.


Secure_Boot_Control.png
Clear_Secure_Boot_keys.png

4 Open the Exit tab, and click/tap on Save Changes and Exit. (see screenshot below)

Save_Changes_and_Exit.png

5 If prompted, approve changes to UEFI settings.

6 The computer will now reboot.


That's it,
Shawn Brink


Related Tutorials

 

Attachments

  • Secure_Boot.png
    Secure_Boot.png
    7.1 KB · Views: 1
Last edited:
Click to expand...
What is the benefit of doing this?
 

My Computers

System One System Two

  • OS
    Win 11 Pro 22631.3527
    Computer type
    PC/Desktop
    Manufacturer/Model
    Digital Storm Velox
    CPU
    Intel Core i9-10940X
    Motherboard
    MSI X299 PRO (Intel X299 Chipset) (Up to 4x PCI-E Devices)
    Memory
    128 GB DDR4 3200 MHz Corsair Vengance LPX
    Graphics Card(s)
    EVGA GeForce RTX 2080 Ti Black
    Sound Card
    Integrated Motherboard Audio-Realtek
    Monitor(s) Displays
    CORSAIR XENEON 32QHD165
    Screen Resolution
    2560 x 1440
    Hard Drives
    2 Samsung 980 Pro NVME 2TB
    1x Storage (6TB Western Digital
    PSU
    Corsair / EVGA / Thermaltake (Modular) (80 Plus Gold)
    Case
    VELOX
    Cooling
    H20: Stage 2: Digital Storm Vortex Liquid CPU Cooler (Dual Fan) (Fully Sealed + No Maintenance)
    Keyboard
    Corsair K63 Wireless
    Mouse
    Corsair NIGHTSWORD RGB
    Internet Speed
    1000Gb's Down-20 Up
    Browser
    Firefox 125.0.3
    Antivirus
    Windows Defender
    Other Info
    Cyber power CP1350AVRLCD -UPS
    NVIDIA 552.22 Driver
  • Operating System
    Arch Linux
    Computer type
    PC/Desktop
    Manufacturer/Model
    Intel NUC13ANHi3
    CPU
    Intel Core i3 1315u
    Motherboard
    NUC13AN
    Memory
    64GB GSKILL DDR4 3200
    Graphics card(s)
    Intel On Board
    Sound Card
    Intel on Board
    Monitor(s) Displays
    Dell 2419HGCF
    Screen Resolution
    1920 X 1080
    Hard Drives
    1TB Crucial M2NVME
    PSU
    External 90 Watt
    Case
    NUC Tall
    Cooling
    Fan
    Mouse
    Razer
    Keyboard
    Logitech
    Internet Speed
    1GB
    Browser
    Slimjet 43.0.1.0
    Other Info
    quiet & fast
Josey Wales said:
What is the benefit of doing this?
Click to expand...
Usually, you'd want to leave Secure Boot enabled for better security unless it's causing an issue.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro for Workstations
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    Intel i7-8700K 5 GHz
    Motherboard
    ASUS ROG Maximus XI Formula Z390
    Memory
    64 GB (4x16GB) G.SKILL TridentZ RGB DDR4 3600 MHz (F4-3600C18D-32GTZR)
    Graphics Card(s)
    ASUS ROG-STRIX-GTX1080TI-O11G-GAMING (11GB GDDR5X)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x Samsung Odyssey G75 27"
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Samsung 990 PRO M.2,
    4TB Samsung 990 PRO M.2,
    8TB WD MyCloudEX2Ultra NAS
    PSU
    Seasonic Prime Titanium 850W
    Case
    Thermaltake Core P3 wall mounted
    Cooling
    Corsair Hydro H115i
    Keyboard
    Logitech wireless K800
    Mouse
    Logitech MX Master 3
    Internet Speed
    1 Gbps Download and 35 Mbps Upload
    Browser
    Google Chrome
    Antivirus
    Microsoft Defender and Malwarebytes Premium
    Other Info
    Logitech Z625 speaker system,
    Logitech BRIO 4K Pro webcam,
    HP Color LaserJet Pro MFP M477fdn,
    APC SMART-UPS RT 1000 XL - SURT1000XLI,
    Galaxy S23 Plus phone
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    HP Spectre x360 2in1 14-eu0098nr (2024)
    CPU
    Intel Core Ultra 7 155H 4.8 GHz
    Memory
    16 GB LPDDR5x-7467 MHz
    Graphics card(s)
    Integrated Intel Arc
    Sound Card
    Poly Studio
    Monitor(s) Displays
    14" 2.8K OLED multitouch
    Screen Resolution
    2880 x 1800
    Hard Drives
    2 TB PCIe NVMe M.2 SSD
    Internet Speed
    Intel Wi-Fi 7 BE200 (2x2) and Bluetooth 5.4
    Browser
    Chrome and Edge
    Antivirus
    Windows Defender and Malwarebytes Premium
You must log in or register to reply here.

Similar Windows 11 Tutorials

  • Article
System Check if Secure Boot is Enabled, Disabled, or Unsupported in Windows 11
Replies
0
Views
2K
Brink
Brink
  • Article
Privacy and Security Verify Local Security Authority (LSA) Protection in Windows 11
Replies
0
Views
1K
Brink
Brink
  • Article
Accounts Enable or Disable Microsoft Accounts in Windows 11
Replies
0
Views
2K
Brink
Brink
  • Article
Phone Enable or Disable Mobile Devices in Windows 11
Replies
5
Views
4K
Brink
Brink
  • Article
Browsers and Mail Enable or Disable Bypass Enhanced Security Mode in Microsoft Edge
Replies
0
Views
3K
Brink
Brink
  • Article
Apps Enable or Disable UserChoice Protection Driver (UCPD) in Windows 11 and 10
Replies
5
Views
3K
NormanF
N
  • Article
Browsers and Mail Open Browser Essentials in Microsoft Edge
Replies
0
Views
1K
Brink
Brink

Latest Support Threads

Latest Tutorials

Back
Top Bottom