Solved Enabling Secure Boot

I had an interesting issue, I noticed that Secure Boot wasn't enabled, even though I enabled it in the BIOS. I tinkered around in Windows but it steadfastly refused to be enabled. After considerable searching, I finally found an obscure reference to additional steps needed in the BIOS. I had to Restore Factory Keys to reset it to User Mode and allow it to function. I saw that function when I first setup the computer, but I was loath to reset it as I wasn't sure what that might do.

Just figured I'd mention this in case someone else is scratching their head. This hardware is the first time I've had a computer that had Secure Boot, so I hadn't seen this before. Don't know if this is common knowledge or not.

Have you since tried disabling Secure Boot and trying to boot into Windows?
I had a similar situation and after doing the "Restore Factory Keys" and getting it back to "User Mode", Windows 11 still does not REQUIRE Secure Boot. I can disable or enable Secure Boot and it has no impact - Windows 11 24H2 boots either way.

Several years ago I was messing around with a newer system and Win11 and I ended up restoring factory keys. I ended up doing this on several systems but it's been so long now I don't remember many details. As mentioned Win11 does not require Secure Boot to be active just that the motherboard supports Secure Boot. Unless bypassed of course.

bumgarb42 said:

Have you since tried disabling Secure Boot and trying to boot into Windows?
I had a similar situation and after doing the "Restore Factory Keys" and getting it back to "User Mode", Windows 11 still does not REQUIRE Secure Boot. I can disable or enable Secure Boot and it has no impact - Windows 11 24H2 boots either way.

Click to expand...

Windows 11 only requires, at least for now, that the device is Secure Boot capable. It does not have to be enabled.

Thanks @pseymour and @BamaInArk for your responses.
I just made a separate post in this same forum regarding my issue.
I have read that the requirement is "Secure Boot capable," but I have a laptop that previously would not boot if Secure Boot was disabled.
Maybe it was something else from the OEM that was causing that.
My reinstall was not of the OEM image.
I imagine I'm about to get a bunch of "Windows 11 only requires Secure Boot capable" to my other post.
Thanks!

pseymour said:

Windows 11 only requires, at least for now, that the device is Secure Boot capable. It does not have to be enabled.

Windows 11 System Requirements - Microsoft Support

Learn about Windows 11 minimum system requirements and how to assess your upgrade eligibility.

support.microsoft.com

Click to expand...

I enabled it on both of my Win11 systems. I figure if they suddenly want it enabled for some update, I didn't want to find out at the 11th hour that there was a problem at that point.

gunrunnerjohn said:

I enabled it on both of my Win11 systems. I figure if they suddenly want it enabled for some update, I didn't want to find out at the 11th hour that there was a problem at that point.

Click to expand...

That's exactly how I've thought about it. I prefer to have it on for Windows so that I don't run into an issue down the road.
But I do turn it off for my Linux Live_USB boots... and at least in the past counted on Windows 11 not booting if I forgot to re-enable Secure Boot. I've experienced it so many times I cannot be insane and have imaged that it was happening. Thanks!