secure boot on or off?

PA WOODCHUCK · Jul 20, 2025

History, Alienware R11 which dell replaced motherboard & process for random issue. Been working OK since then.

Issue can't turn-on drive encryption/bitlocker. In BIOS I noticed secure boot is OFF. Could this be my issue and if I turn on will I need to reinstall Win-11 or make any other changes?

thanks

antspants · Jul 20, 2025

You're unable to enable BitLocker encryption if in the BIOS, Secure Boot is OFF. As far as I know.

PA WOODCHUCK said:
will I need to reinstall Win-11

Can’t see why that would be necessary?

Edit: But apparently:

Secure Boot is not strictly required for BitLocker, but it helps if you're using TPM-only protection (i.e., BitLocker unlocks automatically on boot).
Turning on Secure Boot will not require a reinstall, as long as your system is using UEFI boot mode and the OS was installed accordingly.

antspants · Jul 20, 2025

From Brink:

Turn On or Off Device Encryption in Windows 11

This tutorial will show you how to turn on or off device encryption on a Windows 11 PC. Device encryption is a Windows feature that enables BitLocker encryption automatically for the Operating System drive and fixed drives. It’s particularly beneficial for everyday users who want to ensure...

www.elevenforum.com

PA WOODCHUCK · Jul 23, 2025

UPDATE again working through "antspants" suggestions
secure boot on in BIOS
TPM version 2.0

The attached photo is from my other notebook win11-pro and 2 dells running win11-home. That said this dell w/win11 home doesn't have the drive encryption present in menu.

antspants · Jul 23, 2025

Hi

Windows 11 Home version doesn’t have “Bitlocker” but does have “Drive (or Device) Encryption”

Check Device Encryption Support in Windows 11

This tutorial will show you how to check if your PC supports using Device Encryption in Windows 11. Device encryption is a Windows feature that enables BitLocker encryption automatically for the Operating System drive and fixed drives. It’s particularly beneficial for everyday users who want to...

www.elevenforum.com

Turn On or Off Device Encryption in Windows 11

This tutorial will show you how to turn on or off device encryption on a Windows 11 PC. Device encryption is a Windows feature that enables BitLocker encryption automatically for the Operating System drive and fixed drives. It’s particularly beneficial for everyday users who want to ensure...

www.elevenforum.com

antspants · Jul 23, 2025

PA WOODCHUCK said:
That said this dell w/win11 home doesn't have the drive encryption present in menu.

Sorry, I meant to add, if your device supports encryption, it would be turned on via Windows Settings (Win key + i) not control panel.
It’s in the second tutorial I posted.

PA WOODCHUCK · Jul 23, 2025

If I read this correct it doesn't meet spec?? My question now is since I have secure boot and TPM2.0... what's missing?

RazorKat83 · Jul 24, 2025

I have Secure Boot OFF

RazorKat83 · Jul 24, 2025

PA WOODCHUCK said:
If I read this correct it doesn't meet spec?? My question now is since I have secure boot and TPM2.0... what's missing?

View attachment 140285

You can still install Windows 11 by using Rufus

BruceR · Jul 24, 2025

PA WOODCHUCK said:
If I read this correct it doesn't meet spec??

Elevation required to view.

PA WOODCHUCK · Jul 24, 2025

JAM83 said:
You can still install Windows 11 by using Rufus

NO need to, WIN-11 Home been installed for several years when PC purchased NEW!

antspants · Jul 24, 2025

So you ran this? Or is that image the result of running it (I’ve never run the tutorial so I wouldn’t know)

Check Device Encryption Support in Windows 11

This tutorial will show you how to check if your PC supports using Device Encryption in Windows 11. Device encryption is a Windows feature that enables BitLocker encryption automatically for the Operating System drive and fixed drives. It’s particularly beneficial for everyday users who want to...

www.elevenforum.com

BruceR · Jul 24, 2025

msinfo32 was not run as administrator.

PA WOODCHUCK · Jul 24, 2025

BruceR said:
msinfo32 was not run as administrator.

ME again...

antspants · Jul 24, 2025

Results I got from your image

PCR7 Binding Not Supported
This means your device can’t securely bind encryption keys to the TPM using PCR7. That often disqualifies devices from automatic encryption under Windows Home.
Un-allowed DMA Capable Bus/Device(s) Detected
There's at least one Direct Memory Access device in your system (commonly external GPUs, Thunderbolt devices, or even some internal components) that doesn't support DMA protection. That’s a security red flag for encryption.
Kernel DMA Protection: Off
Ideally, this would be enabled to protect against unauthorized memory access, especially on systems with vulnerable DMA paths.

hsehestedt · Jul 24, 2025

antspants said:
You're unable to enable BitLocker encryption if in the BIOS, Secure Boot is OFF. As far as I know.

Unfortunately, that is not the case. You don't even need secure boot capability, much less have it enabled, to turn on BitLocker.

antspants · Jul 24, 2025

For that particular laptop with HOME, If an option, Stack Social have Windows 11 Pro keys currently for US$15

Not sure if it will be of use to you, the laptop itself is a factor. More information from members that know more than I do is probably needed

Windows 11 Pro: BitLocker, Hyper-V & Azure AD—Lifetime License, One-Time Purchase

<p>Microsoft-Verified Partner! Upgrade Your Windows OS and Enjoy Enhanced UI, Better Multitasking, and Improved Security</p>

www.stacksocial.com

antspants · Jul 24, 2025

hsehestedt said:
Unfortunately, that is not the case. You don't even need secure boot capability, much less have it enabled, to turn on BitLocker.

I believe you forgot to quote my entire post.

antspants said:
Secure Boot is not strictly required for BitLocker, but it helps if you're using TPM-only protection (i.e., BitLocker unlocks automatically on boot).
Turning on Secure Boot will not require a reinstall, as long as your system is using UEFI boot mode and the OS was installed accordingly.

gunrunnerjohn · Jul 25, 2025

I upgraded my new laptop from Win11 Home to Win11 Pro for one primary reason. I use RDP to access other remote computers and I wanted to do the same with my new laptop. Yes, I could have used one of the many other remote control applications, but RDP works and I'm already using it for other systems, I saw no reason to go a different direction. Since Home was already installed and I had configured and customized it, changing the key and letting Windows Update do the upgrade was pretty painless.

hsehestedt · Jul 25, 2025

gunrunnerjohn said:
I upgraded my new laptop from Win11 Home to Win11 Pro for one primary reason. I use RDP to access other remote computers and I wanted to do the same with my new laptop. Yes, I could have used one of the many other remote control applications, but RDP works and I'm already using it for other systems, I saw no reason to go a different direction. Since Home was already installed and I had configured and customized it, changing the key and letting Windows Update do the upgrade was pretty painless.

That's one of my main reasons for using Pro on everything. That and Hyper-V.

secure boot on or off?

Well-known member

My Computer

Like a rolling drone.

My Computers

Like a rolling drone.

My Computers

Well-known member

Attachments

My Computer

Like a rolling drone.

My Computers

Like a rolling drone.

My Computers

Well-known member

My Computer

Arklahoma Storm Spotter

My Computers

Arklahoma Storm Spotter

My Computers

Well-known member

My Computer

Well-known member

My Computer

Like a rolling drone.

My Computers

Well-known member

My Computer

Well-known member

My Computer

Like a rolling drone.

My Computers

Well-known member

My Computers

Like a rolling drone.

My Computers

Like a rolling drone.

My Computers

Well-known member

My Computers

Well-known member

My Computers

Similar threads