Why does Windows 11 need secure boot


mcp111 said:
And it's such a complicated procedure to enable secure boot

Windows 11 and Secure Boot - Microsoft Support

Learn how to change settings to enable Secure Boot if you are not able to upgrade to Windows 11 because your PC is not currently Secure Boot capable.
support.microsoft.com support.microsoft.com

Is it really worth it?
Click to expand...
Many motherboard manufactures are putting out a BIOS that will automatically enable everything needed to upgrade to Windows 11. Plus, as the article says, secure boot is to prevent malicious software from loading at boot. That's a feature I like.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 24H2 RP channel
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home built
    CPU
    Ryzen 9 5900X
    Motherboard
    MSI MPG X570S Edge Max WiFi
    Memory
    Corsair Vengeance RGB PRO 64GB (2x32GB) DDR4 3600 (PC4-28800) C18
    Graphics Card(s)
    ASUS GeForce RTX 4070 Super OC 12GB DDR6 / ZOTAC RTX 3060 Twin Edge OC 12GB GDDR6
    Sound Card
    Proprietary on MB / FiiO K5Pro DAC
    Monitor(s) Displays
    ViewSonic XG2530 25"/Benq XL2411P 24"/ ASUS VA24DQSB) 23.8"
    Screen Resolution
    1920x1080 240Hz/144Hz/60Hz (based on monitor setup above)
    Hard Drives
    SK hynix Gold P31 1TB PCIe NVMe Gen3 M.2 2280 Internal SSD
    ADATA XPG SX8200 Pro 1TB
    Samsung SSD 860 EVO 1TB 2.5 Inch SATA III Internal SSD
    PSU
    Corsair RM1000e
    Case
    Phanteks Enthoo Pro Full Tower Chassis with Window
    Cooling
    Corsair iCUE H60i RGB PRO XT Liquid CPU Cooler
    Keyboard
    Corsair K70
    Mouse
    Logitech MX Master 3
    Internet Speed
    ~950Mb/s download / ~700Mb/s upload
    Browser
    Edge (Chromium)
    Antivirus
    Norton 360
  • Operating System
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Ryzen 7 3700X
    Motherboard
    MSI B550 Gaming GEN3 Gaming Motherboard
    Memory
    32MB DDR4
    Graphics card(s)
    I forget, but it's old. I can't see the need to upgrade it.
    Sound Card
    Propietary
    Monitor(s) Displays
    ACER LED 24"
    Screen Resolution
    1920X1080
    Hard Drives
    1TB Samsung SSD 3.5"
    Case
    Corsair
    Cooling
    Stock
    Mouse
    Logitech
    Keyboard
    Logitech
    Internet Speed
    ~750Mb/s download / ~750Mb/s upload
    Browser
    Edge
    Antivirus
    Defender and Malware Bytes
And where does it say in all that that Secure Boot is required? Oh right, it doesn't,

While the requirement to upgrade a Windows 10 device to Windows 11 is only that the PC be Secure Boot capable by having UEFI/BIOS enabled, you may also consider enabling or turning Secure Boot on for better security.
Click to expand...

The only things required as of right now are TPM enabled, and UEFI and not CFM bios enabled.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    Ryzen 5 5600
    Motherboard
    MSI B550 Tomahawk
    Memory
    T-Force Vulcan Z - 32 GB (2x16) @ 3600 MHz
    Graphics Card(s)
    Sapphire RX 7600
    Monitor(s) Displays
    Sansui ES-G27F2Q
    Screen Resolution
    2560 x 1440P
    Hard Drives
    XPG SX8200 240GB M.2 PCIe Gen3x4 NVMe
    Samsung 850 EVO 250 GB
    Adata SU800 1 TB
    WD Black SN750 500GB
    PSU
    EVGA SuperNOVA 650 G3
    Case
    Deepcool CK500WH
    Cooling
    Deepcool Castle 280EX, plus 3 140 MM case fans (2 in front, 1 in rear)
    Keyboard
    Logitech G213 Prodigy
    Mouse
    Logitech ERGO M575
mcp111 said:
Why does Windows 11 need secure boot
Click to expand...
Because MS are trying to make it possible to run Windows 11 as a very well-protected operating system.

mcp111 said:
And it's such a complicated procedure to enable secure boot

Windows 11 and Secure Boot - Microsoft Support

Learn how to change settings to enable Secure Boot if you are not able to upgrade to Windows 11 because your PC is not currently Secure Boot capable.
support.microsoft.com support.microsoft.com
Click to expand...
Go to the Bios,
find the entry for enabling Secure boot,
enable Secure boot,
save the change,
exit.

mcp111 said:
Is it really worth it?
Click to expand...
If you think it's worth thwarting somebody who has planted malware that is designed to hijack your bootup process then it's worth it.
Otherwise it's not.
The same consideration applies to Windows 10.

All the best,
Denis
 

My Computer

System One

  • OS
    Windows 11 Home x64 Version 23H2 Build 22631.3447
stormy13 said:
And where does it say in all that that Secure Boot is required? Oh right, it doesn't,



The only things required as of right now are TPM enabled, and UEFI and not CFM bios enabled.
Click to expand...
THe PC health check tool says Secure boot is required and gives this article as a reference
 

My Computer

System One

  • OS
    windows 10
Try3 said:
Because MS are trying to make it possible to run Windows 11 as a very well-protected operating system.


Go to the Bios,
find the entry for enabling Secure boot,
enable Secure boot,
save the change,
exit.


If you think it's worth thwarting somebody who has planted malware that is designed to hijack your bootup process then it's worth it.
Otherwise it's not.
The same consideration applies to Windows 10.

All the best,
Denis
Click to expand...
So why wasn't secure boot required for windows 10? Windows 10 was a smooth upgrade. Didn't have to fiddle with bios settings
 

My Computer

System One

  • OS
    windows 10
jvickers said:
Many motherboard manufactures are putting out a BIOS that will automatically enable everything needed to upgrade to Windows 11. Plus, as the article says, secure boot is to prevent malicious software from loading at boot. That's a feature I like.
Click to expand...
will hp have such a bios? And when?
 

My Computer

System One

  • OS
    windows 10
Unless I'm missing something, the documentation from Microsoft says that your PC must be "Secure Boot capable", not that you have to have it enabled. It's a confusing distinction.


Windows 11 and Secure Boot​


Published August 2021


This article is intended for users who are not able to upgrade to Windows 11 because their PC is not currently Secure Boot capable. If you are unfamiliar with this level of technical detail, we recommend that you consult your PC manufacturer’s support information for more instructions specific to your device.

Rob
 

My Computer

System One

  • OS
    Windows 10 Professional
    Computer type
    PC/Desktop
    Manufacturer/Model
    Digital Storm VELOX
    CPU
    Intel Core i9 11900K
    Motherboard
    ASUS PRIME Z590-P
    Memory
    64GB
    Graphics Card(s)
    NVIDIA GeForce GTX 1650
    Sound Card
    Realtek onboard
    Monitor(s) Displays
    Acer R221Q 21.5"
    Screen Resolution
    1920 x 1080
    Hard Drives
    2 x Samsung SSD 990 EVO Plus (1 TB)
    2 x Seagate ST4000NE001 (4 TB)
    PSU
    None
    Case
    VELOX
    Cooling
    Cooler Master
    Keyboard
    Logitech
    Mouse
    Kensington trackball
    Browser
    Firefox, Chrome
    Antivirus
    Windows Defender, Malwarebytes
mcp111 said:
THe PC health check tool says Secure boot is required and gives this article as a reference
Click to expand...

Not it doesn't,

1637676371534.png

Unless you are trying to tell me that I have it enabled when I know that it isn't and never has been.
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    Ryzen 5 5600
    Motherboard
    MSI B550 Tomahawk
    Memory
    T-Force Vulcan Z - 32 GB (2x16) @ 3600 MHz
    Graphics Card(s)
    Sapphire RX 7600
    Monitor(s) Displays
    Sansui ES-G27F2Q
    Screen Resolution
    2560 x 1440P
    Hard Drives
    XPG SX8200 240GB M.2 PCIe Gen3x4 NVMe
    Samsung 850 EVO 250 GB
    Adata SU800 1 TB
    WD Black SN750 500GB
    PSU
    EVGA SuperNOVA 650 G3
    Case
    Deepcool CK500WH
    Cooling
    Deepcool Castle 280EX, plus 3 140 MM case fans (2 in front, 1 in rear)
    Keyboard
    Logitech G213 Prodigy
    Mouse
    Logitech ERGO M575
mcp111 said:
So why wasn't secure boot required for windows 10? Windows 10 was a smooth upgrade. Didn't have to fiddle with bios settings
Click to expand...

For what ever reason MS has decided to implement these changes/addition in 11 and not 10. That's why.



mcp111 said:
will hp have such a bios? And when?
Click to expand...
What model HP PC/device do you have? It might make it easier to tell if they will if you fill out the my computer section.
 

My Computer

System One

  • OS
    Windows 11 Home(Beta) - 24H2 - 26120.3941
    Computer type
    PC/Desktop
    Manufacturer/Model
    Banana Junior 5600-G Series
    CPU
    AMD Ryzen 5 5600G
    Motherboard
    Asus ROG Strix B550-F
    Memory
    G.SKILL Ripjaws V Series 64GB 4x16
    Graphics Card(s)
    Nvidia geforce gtx titan x
    Monitor(s) Displays
    28" ASUS VP28U 4k
    Screen Resolution
    4K, 1080p
    Hard Drives
    Primary SAMSUNG 970 EVO Plus
    PSU
    EVGA BQ 700w 80+ Bronze
    Case
    Zalman i3 NEO
    Cooling
    ARCTIC Freezer 7 X
    Keyboard
    Corsair
    Mouse
    Amazon Generic with Cord
    Internet Speed
    Download: 295.11 mbps Upload: 65.35 mbps T-Mobile Internet
    Browser
    Firefox and Edge
    Antivirus
    MS - Defender
    Other Info
    Speakers: Klipsch ProMedia 2.1
mcp111 said:
And it's such a complicated procedure to enable secure boot

Windows 11 and Secure Boot - Microsoft Support

Learn how to change settings to enable Secure Boot if you are not able to upgrade to Windows 11 because your PC is not currently Secure Boot capable.
support.microsoft.com support.microsoft.com

Is it really worth it?
Click to expand...
Literally couldn't be simpler to do tbf, Enter bios, Find it, Turn on, Tada.
But as its been said, It only has to be capable, Not actually turned on.
 

My Computer

System One

  • OS
    11
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom
    CPU
    10700k@5.2
    Motherboard
    Gigabyte Gaming X Z490
    Memory
    Viper Steelseries 32gb@ 3600mhz
    Graphics Card(s)
    Gigabyte 2070 Super 8GB, +200 core + 600 memory
    Monitor(s) Displays
    ASUS 4k HDR, Two 1080p Benq and Samsung
    Screen Resolution
    3840x2160/2560x1440/1920x1080
    Hard Drives
    Adata XPG SX8200 PRO 1tb
    Samsung EVO 870 500GB
    PSU
    Corsair RX 650
    Case
    NZXT h510
    Cooling
    CM HYPER 212 RGB
    Keyboard
    Razer Ornata Chroma
    Mouse
    Steelseries Rival 710
Hi,
All 11 required security features are superficial at best if one doesn't use the features they are targeted for

11 opens a bunch of holes
Hyper-v virtualization
Remote access
Widgets which is gadgets on steroids mostly just bloats up a system with auto feeds

I disable and remove all this nonsense anyway so most of the security nonsense is just more bloat.

Hell I started disabling defender to it's just nagware now alerting me of my own personal settings I changed in it so alerts just got old lol

UEFI only boot is the nasty one not secure boot uefi kills legacy.
 

My Computer

System One

  • OS
    Win-7-10-11Pro's
    Computer type
    PC/Desktop
    Manufacturer/Model
    Acer 17" Nitro 7840sn/ 2x16gb 5600c40/ 4060/ stock 1tb-os/ 4tb sn850x
    CPU
    10900k & 9940x & 5930k
    Motherboard
    z490-Apex & x299-Apex & x99-Sabertooth
    Memory
    Trident-Z Royal 4000c16 2x16gb & Trident-Z 3600c16 4x8gb & 3200c14 4x8gb
    Graphics Card(s)
    Titan Xp & 1080ti FTW3 & evga 980ti gaming
    Sound Card
    Onboard Realtek x3
    Monitor(s) Displays
    1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
    Screen Resolution
    1920-1080 not sure what the t.v is besides 43" class scales from 1920-1080 perfectly
    Hard Drives
    2-WD-sn850x 4tb/ 970evo+500gb/ 980 pro 2tb.
    PSU
    1000p2 & 1200p2 & 850p2
    Case
    D450 x2 & 1 Test bench in cherry Entertainment center
    Cooling
    Custom water loops x3 with 2x mora 360mm rads only 980ti gaming air cooled
    Keyboard
    G710+x3
    Mouse
    Redragon x3
    Internet Speed
    xfinity gigabyte
    Browser
    Firefox
    Antivirus
    mbam pro
mcp111 said:
Your results are different
IT told me my PC doesn't meet Windows 11 requirements because secure boot is not enabled
Click to expand...
All you have to do is to go into the BIOS and activate Secure Boot.
 

My Computer

System One

  • OS
    Windows 11 Home(Beta) - 24H2 - 26120.3941
    Computer type
    PC/Desktop
    Manufacturer/Model
    Banana Junior 5600-G Series
    CPU
    AMD Ryzen 5 5600G
    Motherboard
    Asus ROG Strix B550-F
    Memory
    G.SKILL Ripjaws V Series 64GB 4x16
    Graphics Card(s)
    Nvidia geforce gtx titan x
    Monitor(s) Displays
    28" ASUS VP28U 4k
    Screen Resolution
    4K, 1080p
    Hard Drives
    Primary SAMSUNG 970 EVO Plus
    PSU
    EVGA BQ 700w 80+ Bronze
    Case
    Zalman i3 NEO
    Cooling
    ARCTIC Freezer 7 X
    Keyboard
    Corsair
    Mouse
    Amazon Generic with Cord
    Internet Speed
    Download: 295.11 mbps Upload: 65.35 mbps T-Mobile Internet
    Browser
    Firefox and Edge
    Antivirus
    MS - Defender
    Other Info
    Speakers: Klipsch ProMedia 2.1
Hi,
I've hopped over all new system requirements I wouldn't worry about secure boot.
 

My Computer

System One

  • OS
    Win-7-10-11Pro's
    Computer type
    PC/Desktop
    Manufacturer/Model
    Acer 17" Nitro 7840sn/ 2x16gb 5600c40/ 4060/ stock 1tb-os/ 4tb sn850x
    CPU
    10900k & 9940x & 5930k
    Motherboard
    z490-Apex & x299-Apex & x99-Sabertooth
    Memory
    Trident-Z Royal 4000c16 2x16gb & Trident-Z 3600c16 4x8gb & 3200c14 4x8gb
    Graphics Card(s)
    Titan Xp & 1080ti FTW3 & evga 980ti gaming
    Sound Card
    Onboard Realtek x3
    Monitor(s) Displays
    1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
    Screen Resolution
    1920-1080 not sure what the t.v is besides 43" class scales from 1920-1080 perfectly
    Hard Drives
    2-WD-sn850x 4tb/ 970evo+500gb/ 980 pro 2tb.
    PSU
    1000p2 & 1200p2 & 850p2
    Case
    D450 x2 & 1 Test bench in cherry Entertainment center
    Cooling
    Custom water loops x3 with 2x mora 360mm rads only 980ti gaming air cooled
    Keyboard
    G710+x3
    Mouse
    Redragon x3
    Internet Speed
    xfinity gigabyte
    Browser
    Firefox
    Antivirus
    mbam pro
And what are the specs of your computer, which you have already been asked and ignored?
 

My Computer

System One

  • OS
    Windows 11
    Computer type
    PC/Desktop
    CPU
    Ryzen 5 5600
    Motherboard
    MSI B550 Tomahawk
    Memory
    T-Force Vulcan Z - 32 GB (2x16) @ 3600 MHz
    Graphics Card(s)
    Sapphire RX 7600
    Monitor(s) Displays
    Sansui ES-G27F2Q
    Screen Resolution
    2560 x 1440P
    Hard Drives
    XPG SX8200 240GB M.2 PCIe Gen3x4 NVMe
    Samsung 850 EVO 250 GB
    Adata SU800 1 TB
    WD Black SN750 500GB
    PSU
    EVGA SuperNOVA 650 G3
    Case
    Deepcool CK500WH
    Cooling
    Deepcool Castle 280EX, plus 3 140 MM case fans (2 in front, 1 in rear)
    Keyboard
    Logitech G213 Prodigy
    Mouse
    Logitech ERGO M575
Devlin1888 said:
Literally couldn't be simpler to do tbf, Enter bios, Find it, Turn on, Tada.
But as its been said, It only has to be capable, Not actually turned on.
Click to expand...
But the PC health check tool expects it to be turned on otherwise it fails
 

My Computer

System One

  • OS
    windows 10
Last edited:

My Computer

System One

  • OS
    Windows 11 Home(Beta) - 24H2 - 26120.3941
    Computer type
    PC/Desktop
    Manufacturer/Model
    Banana Junior 5600-G Series
    CPU
    AMD Ryzen 5 5600G
    Motherboard
    Asus ROG Strix B550-F
    Memory
    G.SKILL Ripjaws V Series 64GB 4x16
    Graphics Card(s)
    Nvidia geforce gtx titan x
    Monitor(s) Displays
    28" ASUS VP28U 4k
    Screen Resolution
    4K, 1080p
    Hard Drives
    Primary SAMSUNG 970 EVO Plus
    PSU
    EVGA BQ 700w 80+ Bronze
    Case
    Zalman i3 NEO
    Cooling
    ARCTIC Freezer 7 X
    Keyboard
    Corsair
    Mouse
    Amazon Generic with Cord
    Internet Speed
    Download: 295.11 mbps Upload: 65.35 mbps T-Mobile Internet
    Browser
    Firefox and Edge
    Antivirus
    MS - Defender
    Other Info
    Speakers: Klipsch ProMedia 2.1
mcp111 said:
But the PC health check tool expects it to be turned on otherwise it fails
Click to expand...
Hi,
MS fixed the first compatibility tool but as always ms can't fix anything lol
 

My Computer

System One

  • OS
    Win-7-10-11Pro's
    Computer type
    PC/Desktop
    Manufacturer/Model
    Acer 17" Nitro 7840sn/ 2x16gb 5600c40/ 4060/ stock 1tb-os/ 4tb sn850x
    CPU
    10900k & 9940x & 5930k
    Motherboard
    z490-Apex & x299-Apex & x99-Sabertooth
    Memory
    Trident-Z Royal 4000c16 2x16gb & Trident-Z 3600c16 4x8gb & 3200c14 4x8gb
    Graphics Card(s)
    Titan Xp & 1080ti FTW3 & evga 980ti gaming
    Sound Card
    Onboard Realtek x3
    Monitor(s) Displays
    1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
    Screen Resolution
    1920-1080 not sure what the t.v is besides 43" class scales from 1920-1080 perfectly
    Hard Drives
    2-WD-sn850x 4tb/ 970evo+500gb/ 980 pro 2tb.
    PSU
    1000p2 & 1200p2 & 850p2
    Case
    D450 x2 & 1 Test bench in cherry Entertainment center
    Cooling
    Custom water loops x3 with 2x mora 360mm rads only 980ti gaming air cooled
    Keyboard
    G710+x3
    Mouse
    Redragon x3
    Internet Speed
    xfinity gigabyte
    Browser
    Firefox
    Antivirus
    mbam pro
You must log in or register to reply here.

Similar threads

Why does Windows 11 23H2 and Windows 10 22H2 have Kernel DMA Protection turned off on the same hardware and the same BIOS version?
Replies
1
Views
660
zbook
Z
Secure boot, and its interaction with Windows 11 security, other features
Replies
1
Views
651
Thorshammer342
T
  • Article Article
System Enable or Disable Secure Boot in Windows 11
Replies
10
Views
14K
dacrone
dacrone
  • Article Article
System Check if Secure Boot is Enabled, Disabled, or Unsupported in Windows 11
Replies
4
Views
15K
Marcus Vinicus
Marcus Vinicus
Why does Windows 11 frequently stop transferring off and on?
Replies
4
Views
2K
idgat
idgat

Latest Support Threads

Latest Tutorials

Back
Top Bottom