Solved Enabling Secure Boot


gunrunnerjohn

Well-known member
Power User
Local time
3:03 PM
Posts
885
Location
SE-PA
OS
Windows 11 Pro 24H2, Build 26100.4351, Experience Pack 1000.26100.107.0
I had an interesting issue, I noticed that Secure Boot wasn't enabled, even though I enabled it in the BIOS. I tinkered around in Windows but it steadfastly refused to be enabled. After considerable searching, I finally found an obscure reference to additional steps needed in the BIOS. I had to Restore Factory Keys to reset it to User Mode and allow it to function. I saw that function when I first setup the computer, but I was loath to reset it as I wasn't sure what that might do.

Just figured I'd mention this in case someone else is scratching their head. This hardware is the first time I've had a computer that had Secure Boot, so I hadn't seen this before. Don't know if this is common knowledge or not. :-)
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 24H2, Build 26100.4351, Experience Pack 1000.26100.107.0
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14500
    Motherboard
    Gigabyte B760M G P WIFI
    Memory
    64GB DDR4
    Graphics Card(s)
    GeForce RTX 4060
    Sound Card
    Chipset Realtek
    Monitor(s) Displays
    LG 45" Ultragear, Acer 24" 1080p
    Screen Resolution
    5120x1440, 1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 3D NAND NVMe M.2 SSD (O/S)
    Silicon Power 2TB US75 Nvme PCIe Gen4 M.2 2280 SSD (backup)
    Crucial BX500 2TB 3D NAND (2nd backup)
    External off-line backup Drives: 2 NVMe 4TB drives in external enclosures
    PSU
    Thermaltake Toughpower GF3 750W
    Case
    LIAN LI LANCOOL 216 E-ATX PC Case
    Cooling
    Lots of fans!
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Security
  • Operating System
    Windows 11 Pro 24H2, Build 26100.4351 Experience Pack 1000.26100.107.0
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14400
    Motherboard
    Gigabyte B760M DS3H AX
    Memory
    32GB DDR5
    Graphics card(s)
    Intel 700 Embedded GPU
    Sound Card
    Realtek Embedded
    Monitor(s) Displays
    27" HP 1080p
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 eD NAND PCIe SSD
    Samsung EVO 990 2TB NVMe Gen4 SSD
    Samsung 2TB SATA SSD
    PSU
    Thermaltake Smart BM3 650W
    Case
    Okinos Micro ATX Case
    Cooling
    Fans
    Mouse
    Logitech G305
    Keyboard
    Microsoft Comfort Curve 2000
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Security
Have you since tried disabling Secure Boot and trying to boot into Windows?
I had a similar situation and after doing the "Restore Factory Keys" and getting it back to "User Mode", Windows 11 still does not REQUIRE Secure Boot. I can disable or enable Secure Boot and it has no impact - Windows 11 24H2 boots either way.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    AMD Ryzen 9 7950X3D
    Motherboard
    NZXT N7 B650E (AM5)
    Memory
    G.Skill Trident Z5 NEO RGB 64GB (2 x 32GB) DDR5 6000 CL30-40-40-96 (F5-6000J3040G32GX2-TZ5NR)
    Graphics Card(s)
    AMD Radeon RX 6950 XT (reference)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x LG 29UM69G-B 29" Ultrawide Gaming Monitor
    Screen Resolution
    2560x1080
    Hard Drives
    2TB Samsung 990 PRO M.2
    PSU
    NZXT C1000W Gold
    Case
    NZXT H9 Elite
    Cooling
    NZXT Kraken Z73 RGB
    Keyboard
    Logitech MX Mechanical
    Mouse
    Logitech MX Master 3S
    Internet Speed
    1 Gbps synchronous
    Browser
    Firefox (w/ Total Cookie Protection and Multi-Account Containers)
    Other Info
    Logitech BRIO 4K Pro webcam
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkPad X1 Extreme Gen 5
    CPU
    Intel Core i7-12700H
    Motherboard
    21DECTO1WW
    Memory
    32GB DDR5 4800
    Graphics card(s)
    NVIDIA® GeForce RTX™ 3050 Ti 4GB GDDR6
    Hard Drives
    256GB Micron MTFDKBA256TFK SSD M.2
Several years ago I was messing around with a newer system and Win11 and I ended up restoring factory keys. I ended up doing this on several systems but it's been so long now I don't remember many details. As mentioned Win11 does not require Secure Boot to be active just that the motherboard supports Secure Boot. Unless bypassed of course.
 

My Computer

System One

  • OS
    Win 7/10/11
    Computer type
    PC/Desktop
    Other Info
    I'm a computer enthusiast so have quite a few systems that I run. More like an advanced hobby.
Have you since tried disabling Secure Boot and trying to boot into Windows?
I had a similar situation and after doing the "Restore Factory Keys" and getting it back to "User Mode", Windows 11 still does not REQUIRE Secure Boot. I can disable or enable Secure Boot and it has no impact - Windows 11 24H2 boots either way.
Windows 11 only requires, at least for now, that the device is Secure Boot capable. It does not have to be enabled.

 

My Computer

System One

  • OS
    Windows 11 Pro 24H2 [rev. 4351]
    Computer type
    PC/Desktop
    Manufacturer/Model
    Intel NUC12WSHi7
    CPU
    12th Gen Intel Core i7-1260P, 2100 MHz
    Motherboard
    NUC12WSBi7
    Memory
    64 GB
    Graphics Card(s)
    Intel Iris Xe
    Sound Card
    built-in Realtek HD audio
    Monitor(s) Displays
    Dell U3219Q
    Screen Resolution
    3840x2160 @ 60Hz
    Hard Drives
    Samsung SSD 990 PRO 1TB
    Keyboard
    CODE 104-Key Mechanical with Cherry MX Clears
    Antivirus
    Microsoft Defender
Thanks @pseymour and @BamaInArk for your responses.
I just made a separate post in this same forum regarding my issue.
I have read that the requirement is "Secure Boot capable," but I have a laptop that previously would not boot if Secure Boot was disabled.
Maybe it was something else from the OEM that was causing that.
My reinstall was not of the OEM image.
I imagine I'm about to get a bunch of "Windows 11 only requires Secure Boot capable" to my other post.
Thanks!
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    AMD Ryzen 9 7950X3D
    Motherboard
    NZXT N7 B650E (AM5)
    Memory
    G.Skill Trident Z5 NEO RGB 64GB (2 x 32GB) DDR5 6000 CL30-40-40-96 (F5-6000J3040G32GX2-TZ5NR)
    Graphics Card(s)
    AMD Radeon RX 6950 XT (reference)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x LG 29UM69G-B 29" Ultrawide Gaming Monitor
    Screen Resolution
    2560x1080
    Hard Drives
    2TB Samsung 990 PRO M.2
    PSU
    NZXT C1000W Gold
    Case
    NZXT H9 Elite
    Cooling
    NZXT Kraken Z73 RGB
    Keyboard
    Logitech MX Mechanical
    Mouse
    Logitech MX Master 3S
    Internet Speed
    1 Gbps synchronous
    Browser
    Firefox (w/ Total Cookie Protection and Multi-Account Containers)
    Other Info
    Logitech BRIO 4K Pro webcam
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkPad X1 Extreme Gen 5
    CPU
    Intel Core i7-12700H
    Motherboard
    21DECTO1WW
    Memory
    32GB DDR5 4800
    Graphics card(s)
    NVIDIA® GeForce RTX™ 3050 Ti 4GB GDDR6
    Hard Drives
    256GB Micron MTFDKBA256TFK SSD M.2
Windows 11 only requires, at least for now, that the device is Secure Boot capable. It does not have to be enabled.

I enabled it on both of my Win11 systems. I figure if they suddenly want it enabled for some update, I didn't want to find out at the 11th hour that there was a problem at that point. ;-)
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 24H2, Build 26100.4351, Experience Pack 1000.26100.107.0
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14500
    Motherboard
    Gigabyte B760M G P WIFI
    Memory
    64GB DDR4
    Graphics Card(s)
    GeForce RTX 4060
    Sound Card
    Chipset Realtek
    Monitor(s) Displays
    LG 45" Ultragear, Acer 24" 1080p
    Screen Resolution
    5120x1440, 1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 3D NAND NVMe M.2 SSD (O/S)
    Silicon Power 2TB US75 Nvme PCIe Gen4 M.2 2280 SSD (backup)
    Crucial BX500 2TB 3D NAND (2nd backup)
    External off-line backup Drives: 2 NVMe 4TB drives in external enclosures
    PSU
    Thermaltake Toughpower GF3 750W
    Case
    LIAN LI LANCOOL 216 E-ATX PC Case
    Cooling
    Lots of fans!
    Keyboard
    Microsoft Comfort Curve 2000
    Mouse
    Logitech G305
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Security
  • Operating System
    Windows 11 Pro 24H2, Build 26100.4351 Experience Pack 1000.26100.107.0
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Brew
    CPU
    Intel Core i5 14400
    Motherboard
    Gigabyte B760M DS3H AX
    Memory
    32GB DDR5
    Graphics card(s)
    Intel 700 Embedded GPU
    Sound Card
    Realtek Embedded
    Monitor(s) Displays
    27" HP 1080p
    Screen Resolution
    1920x1080
    Hard Drives
    Crucial P310 2TB 2280 PCIe Gen4 eD NAND PCIe SSD
    Samsung EVO 990 2TB NVMe Gen4 SSD
    Samsung 2TB SATA SSD
    PSU
    Thermaltake Smart BM3 650W
    Case
    Okinos Micro ATX Case
    Cooling
    Fans
    Mouse
    Logitech G305
    Keyboard
    Microsoft Comfort Curve 2000
    Internet Speed
    Verizon FiOS 1GB
    Browser
    Firefox
    Antivirus
    Malware Bytes & Windows Security
I enabled it on both of my Win11 systems. I figure if they suddenly want it enabled for some update, I didn't want to find out at the 11th hour that there was a problem at that point. ;-)
That's exactly how I've thought about it. I prefer to have it on for Windows so that I don't run into an issue down the road.
But I do turn it off for my Linux Live_USB boots... and at least in the past counted on Windows 11 not booting if I forgot to re-enable Secure Boot. I've experienced it so many times I cannot be insane and have imaged that it was happening. Thanks!
 

My Computers

System One System Two

  • OS
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom self build
    CPU
    AMD Ryzen 9 7950X3D
    Motherboard
    NZXT N7 B650E (AM5)
    Memory
    G.Skill Trident Z5 NEO RGB 64GB (2 x 32GB) DDR5 6000 CL30-40-40-96 (F5-6000J3040G32GX2-TZ5NR)
    Graphics Card(s)
    AMD Radeon RX 6950 XT (reference)
    Sound Card
    Integrated Digital Audio (S/PDIF)
    Monitor(s) Displays
    2 x LG 29UM69G-B 29" Ultrawide Gaming Monitor
    Screen Resolution
    2560x1080
    Hard Drives
    2TB Samsung 990 PRO M.2
    PSU
    NZXT C1000W Gold
    Case
    NZXT H9 Elite
    Cooling
    NZXT Kraken Z73 RGB
    Keyboard
    Logitech MX Mechanical
    Mouse
    Logitech MX Master 3S
    Internet Speed
    1 Gbps synchronous
    Browser
    Firefox (w/ Total Cookie Protection and Multi-Account Containers)
    Other Info
    Logitech BRIO 4K Pro webcam
  • Operating System
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo ThinkPad X1 Extreme Gen 5
    CPU
    Intel Core i7-12700H
    Motherboard
    21DECTO1WW
    Memory
    32GB DDR5 4800
    Graphics card(s)
    NVIDIA® GeForce RTX™ 3050 Ti 4GB GDDR6
    Hard Drives
    256GB Micron MTFDKBA256TFK SSD M.2

Latest Support Threads

Back
Top Bottom