Why does Windows 11 need secure boot


mcp111

mcp111

New member
Local time
1:48 PM
Posts
6
OS
windows 10
And it's such a complicated procedure to enable secure boot

Windows 11 and Secure Boot - Microsoft Support

Learn how to change settings to enable Secure Boot if you are not able to upgrade to Windows 11 because your PC is not currently Secure Boot capable.
support.microsoft.com support.microsoft.com

Is it really worth it?
 

My Computer My Computer

At a glance

windows 10
OS
windows 10
mcp111 said:
And it's such a complicated procedure to enable secure boot

Windows 11 and Secure Boot - Microsoft Support

Learn how to change settings to enable Secure Boot if you are not able to upgrade to Windows 11 because your PC is not currently Secure Boot capable.
support.microsoft.com support.microsoft.com

Is it really worth it?
Click to expand...
Many motherboard manufactures are putting out a BIOS that will automatically enable everything needed to upgrade to Windows 11. Plus, as the article says, secure boot is to prevent malicious software from loading at boot. That's a feature I like.
 

My Computers My Computers

System One System Two Other systems

  • At a glance

    Windows 11 Pro 25H2 RP channelRyzen 9 5900XCorsair Vengeance RGB PRO 64GB (2x32GB) DDR4 ...ASUS GeForce RTX 4070 Super OC 12GB DDR6 / ZO...
    OS
    Windows 11 Pro 25H2 RP channel
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home built
    CPU
    Ryzen 9 5900X
    Motherboard
    MSI MPG X570S Edge Max WiFi
    Memory
    Corsair Vengeance RGB PRO 64GB (2x32GB) DDR4 3600 (PC4-28800) C18
    Graphics Card(s)
    ASUS GeForce RTX 4070 Super OC 12GB DDR6 / ZOTAC RTX 3060 Twin Edge OC 12GB GDDR6
    Sound Card
    Proprietary on MB / FiiO K5Pro DAC
    Monitor(s) Displays
    ViewSonic XG2530 25"/Benq XL2411P 24"/ ASUS VA24DQSB) 23.8"
    Screen Resolution
    1920x1080 240Hz/144Hz/60Hz (based on monitor setup above)
    Hard Drives
    SK hynix Gold P31 1TB PCIe NVMe Gen3 M.2 2280 Internal SSD
    ADATA XPG SX8200 Pro 1TB
    Samsung SSD 860 EVO 1TB 2.5 Inch SATA III Internal SSD
    PSU
    Corsair RM1000e
    Case
    Phanteks Enthoo Pro Full Tower Chassis with Window
    Cooling
    Corsair iCUE H60i RGB PRO XT Liquid CPU Cooler
    Keyboard
    Corsair K70
    Mouse
    Logitech MX Master 3
    Internet Speed
    ~950Mb/s download / ~700Mb/s upload
    Browser
    Edge (Chromium)
    Antivirus
    Norton 360

  • At a glance

    Windows 11 ProRyzen 7 3700X32MB DDR4I forget, but it's old. I can't see the need ...
    Operating System
    Windows 11 Pro
    Computer type
    PC/Desktop
    Manufacturer/Model
    Home Built
    CPU
    Ryzen 7 3700X
    Motherboard
    MSI B550 Gaming GEN3 Gaming Motherboard
    Memory
    32MB DDR4
    Graphics card(s)
    I forget, but it's old. I can't see the need to upgrade it.
    Sound Card
    Propietary
    Monitor(s) Displays
    ACER LED 24"
    Screen Resolution
    1920X1080
    Hard Drives
    1TB Samsung SSD 3.5"
    Case
    Corsair
    Cooling
    Stock
    Keyboard
    Logitech
    Mouse
    Logitech
    Internet Speed
    ~750Mb/s download / ~750Mb/s upload
    Browser
    Edge
    Antivirus
    Defender and Malware Bytes
  • ASUS Vivobook 16X, 16" WUXGA(1920x1200) Business Laptop Computer, AMD Ryzen 7, 16GB DDR4 RAM, 1TB SSD, Windows 11 Pro, Wi-Fi 6, USB-C, Full-Sized Keyboard, Webcam, HDMI
And where does it say in all that that Secure Boot is required? Oh right, it doesn't,

While the requirement to upgrade a Windows 10 device to Windows 11 is only that the PC be Secure Boot capable by having UEFI/BIOS enabled, you may also consider enabling or turning Secure Boot on for better security.
Click to expand...

The only things required as of right now are TPM enabled, and UEFI and not CFM bios enabled.
 

My Computer My Computer

At a glance

Windows 11Ryzen 5 5600T-Force Vulcan Z - 32 GB (2x16) @ 3600 MHzSapphire RX 7600
OS
Windows 11
Computer type
PC/Desktop
CPU
Ryzen 5 5600
Motherboard
MSI B550 Tomahawk
Memory
T-Force Vulcan Z - 32 GB (2x16) @ 3600 MHz
Graphics Card(s)
Sapphire RX 7600
Monitor(s) Displays
Sansui ES-G27F2Q
Screen Resolution
2560 x 1440P
Hard Drives
XPG SX8200 240GB M.2 PCIe Gen3x4 NVMe
Samsung 850 EVO 250 GB
Adata SU800 1 TB
WD Black SN750 500GB
PSU
EVGA SuperNOVA 650 G3
Case
Deepcool CK500WH
Cooling
Thermalright Frozen Warframe 240 SE, plus 3 140 MM case fans (2 in front, 1 in rear)
Keyboard
Logitech G213 Prodigy
Mouse
Logitech ERGO M575
mcp111 said:
Why does Windows 11 need secure boot
Click to expand...
Because MS are trying to make it possible to run Windows 11 as a very well-protected operating system.

mcp111 said:
And it's such a complicated procedure to enable secure boot

Windows 11 and Secure Boot - Microsoft Support

Learn how to change settings to enable Secure Boot if you are not able to upgrade to Windows 11 because your PC is not currently Secure Boot capable.
support.microsoft.com support.microsoft.com
Click to expand...
Go to the Bios,
find the entry for enabling Secure boot,
enable Secure boot,
save the change,
exit.

mcp111 said:
Is it really worth it?
Click to expand...
If you think it's worth thwarting somebody who has planted malware that is designed to hijack your bootup process then it's worth it.
Otherwise it's not.
The same consideration applies to Windows 10.

All the best,
Denis
 

My Computer My Computer

At a glance

Windows 11 Home x64 Version 25H2 Build 26200....
OS
Windows 11 Home x64 Version 25H2 Build 26200.8037
stormy13 said:
And where does it say in all that that Secure Boot is required? Oh right, it doesn't,



The only things required as of right now are TPM enabled, and UEFI and not CFM bios enabled.
Click to expand...
THe PC health check tool says Secure boot is required and gives this article as a reference
 

My Computer My Computer

At a glance

windows 10
OS
windows 10
Try3 said:
Because MS are trying to make it possible to run Windows 11 as a very well-protected operating system.


Go to the Bios,
find the entry for enabling Secure boot,
enable Secure boot,
save the change,
exit.


If you think it's worth thwarting somebody who has planted malware that is designed to hijack your bootup process then it's worth it.
Otherwise it's not.
The same consideration applies to Windows 10.

All the best,
Denis
Click to expand...
So why wasn't secure boot required for windows 10? Windows 10 was a smooth upgrade. Didn't have to fiddle with bios settings
 

My Computer My Computer

At a glance

windows 10
OS
windows 10
jvickers said:
Many motherboard manufactures are putting out a BIOS that will automatically enable everything needed to upgrade to Windows 11. Plus, as the article says, secure boot is to prevent malicious software from loading at boot. That's a feature I like.
Click to expand...
will hp have such a bios? And when?
 

My Computer My Computer

At a glance

windows 10
OS
windows 10
Unless I'm missing something, the documentation from Microsoft says that your PC must be "Secure Boot capable", not that you have to have it enabled. It's a confusing distinction.


Windows 11 and Secure Boot​


Published August 2021


This article is intended for users who are not able to upgrade to Windows 11 because their PC is not currently Secure Boot capable. If you are unfamiliar with this level of technical detail, we recommend that you consult your PC manufacturer’s support information for more instructions specific to your device.

Rob
 

My Computer My Computer

At a glance

Windows 11 Professional 25H2Intel Core i9 11900K64GBNVIDIA GeForce GTX 1650
OS
Windows 11 Professional 25H2
Computer type
PC/Desktop
Manufacturer/Model
Digital Storm VELOX
CPU
Intel Core i9 11900K
Motherboard
ASUS PRIME Z590-P
Memory
64GB
Graphics Card(s)
NVIDIA GeForce GTX 1650
Sound Card
Realtek onboard
Monitor(s) Displays
Acer R221Q 21.5"
Screen Resolution
1920 x 1080
Hard Drives
2 x Samsung SSD 990 EVO Plus (1 TB)
2 x Seagate ST4000NE001 (4 TB)
PSU
None
Case
VELOX
Cooling
Cooler Master
Keyboard
Logitech
Mouse
Kensington trackball
Browser
Firefox, Chrome
Antivirus
Windows Defender, Malwarebytes
mcp111 said:
THe PC health check tool says Secure boot is required and gives this article as a reference
Click to expand...

Not it doesn't,

1637676371534.png

Unless you are trying to tell me that I have it enabled when I know that it isn't and never has been.
 

My Computer My Computer

At a glance

Windows 11Ryzen 5 5600T-Force Vulcan Z - 32 GB (2x16) @ 3600 MHzSapphire RX 7600
OS
Windows 11
Computer type
PC/Desktop
CPU
Ryzen 5 5600
Motherboard
MSI B550 Tomahawk
Memory
T-Force Vulcan Z - 32 GB (2x16) @ 3600 MHz
Graphics Card(s)
Sapphire RX 7600
Monitor(s) Displays
Sansui ES-G27F2Q
Screen Resolution
2560 x 1440P
Hard Drives
XPG SX8200 240GB M.2 PCIe Gen3x4 NVMe
Samsung 850 EVO 250 GB
Adata SU800 1 TB
WD Black SN750 500GB
PSU
EVGA SuperNOVA 650 G3
Case
Deepcool CK500WH
Cooling
Thermalright Frozen Warframe 240 SE, plus 3 140 MM case fans (2 in front, 1 in rear)
Keyboard
Logitech G213 Prodigy
Mouse
Logitech ERGO M575
mcp111 said:
So why wasn't secure boot required for windows 10? Windows 10 was a smooth upgrade. Didn't have to fiddle with bios settings
Click to expand...

For what ever reason MS has decided to implement these changes/addition in 11 and not 10. That's why.



mcp111 said:
will hp have such a bios? And when?
Click to expand...
What model HP PC/device do you have? It might make it easier to tell if they will if you fill out the my computer section.
 

My Computer My Computer

At a glance

Windows 11 Home(RP) - 25H2 -26200.8728AMD Ryzen 5 5600GG.SKILL Ripjaws V Series 64GB 4x16Nvidia geforce gtx titan x
OS
Windows 11 Home(RP) - 25H2 -26200.8728
Computer type
PC/Desktop
Manufacturer/Model
Banana Junior 5600-G Series
CPU
AMD Ryzen 5 5600G
Motherboard
Asus ROG Strix B550-F
Memory
G.SKILL Ripjaws V Series 64GB 4x16
Graphics Card(s)
Nvidia geforce gtx titan x
Monitor(s) Displays
28" ASUS VP28U 4k
Screen Resolution
4K
Hard Drives
Primary SAMSUNG 970 EVO Plus
PSU
EVGA BQ 700w 80+ Bronze
Case
Zalman i3 NEO
Cooling
ARCTIC Freezer 7 X
Keyboard
Corsair
Mouse
Amazon Generic with Cord
Internet Speed
Download: 295.11 mbps Upload: 65.35 mbps T-Mobile Internet
Browser
Firefox and Edge
Antivirus
MS - Defender
Other Info
Speakers: Klipsch ProMedia 2.1
mcp111 said:
And it's such a complicated procedure to enable secure boot

Windows 11 and Secure Boot - Microsoft Support

Learn how to change settings to enable Secure Boot if you are not able to upgrade to Windows 11 because your PC is not currently Secure Boot capable.
support.microsoft.com support.microsoft.com

Is it really worth it?
Click to expand...
Literally couldn't be simpler to do tbf, Enter bios, Find it, Turn on, Tada.
But as its been said, It only has to be capable, Not actually turned on.
 

My Computer My Computer

At a glance

11[email protected]Viper Steelseries 32gb@ 3600mhzGigabyte 2070 Super 8GB, +200 core + 600 memory
OS
11
Computer type
PC/Desktop
Manufacturer/Model
Custom
CPU
[email protected]
Motherboard
Gigabyte Gaming X Z490
Memory
Viper Steelseries 32gb@ 3600mhz
Graphics Card(s)
Gigabyte 2070 Super 8GB, +200 core + 600 memory
Monitor(s) Displays
ASUS 4k HDR, Two 1080p Benq and Samsung
Screen Resolution
3840x2160/2560x1440/1920x1080
Hard Drives
Adata XPG SX8200 PRO 1tb
Samsung EVO 870 500GB
PSU
Corsair RX 650
Case
NZXT h510
Cooling
CM HYPER 212 RGB
Keyboard
Razer Ornata Chroma
Mouse
Steelseries Rival 710
Hi,
All 11 required security features are superficial at best if one doesn't use the features they are targeted for

11 opens a bunch of holes
Hyper-v virtualization
Remote access
Widgets which is gadgets on steroids mostly just bloats up a system with auto feeds

I disable and remove all this nonsense anyway so most of the security nonsense is just more bloat.

Hell I started disabling defender to it's just nagware now alerting me of my own personal settings I changed in it so alerts just got old lol

UEFI only boot is the nasty one not secure boot uefi kills legacy.
 

My Computer My Computer

At a glance

Win-7-10-11Pro's10900k & 9940x & 5930kTrident-Z Royal 4000c16 2x16gb & Trident-Z 36...Titan Xp & 1080ti FTW3 & evga 980ti gaming
OS
Win-7-10-11Pro's
Computer type
PC/Desktop
Manufacturer/Model
Acer 17" Nitro 7840sn/ 2x16gb 5600c40/ 4060/ stock 1tb-os/ 4tb sn850x
CPU
10900k & 9940x & 5930k
Motherboard
z490-Apex & x299-Apex & x99-Sabertooth
Memory
Trident-Z Royal 4000c16 2x16gb & Trident-Z 3600c16 4x8gb & 3200c14 4x8gb
Graphics Card(s)
Titan Xp & 1080ti FTW3 & evga 980ti gaming
Sound Card
Onboard Realtek x3
Monitor(s) Displays
1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Screen Resolution
1920-1080 not sure what the t.v is besides 43" class scales from 1920-1080 perfectly
Hard Drives
2-WD-sn850x 4tb/ 970evo+500gb/ 980 pro 2tb.
PSU
1000p2 & 1200p2 & 850p2
Case
D450 x2 & 1 Test bench in cherry Entertainment center
Cooling
Custom water loops x3 with 2x mora 360mm rads only 980ti gaming air cooled
Keyboard
G710+x3
Mouse
Redragon x3
Internet Speed
xfinity gigabyte
Browser
Firefox
Antivirus
mbam pro
stormy13 said:
The only things required as of right now are TPM enabled, and UEFI and not CFM bios enabled.
Click to expand...
Boots from BIOS with UEFI off just well. The laptop has no TPM whatsoever.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
stormy13 said:
Not it doesn't,

View attachment 14375

Unless you are trying to tell me that I have it enabled when I know that it isn't and never has been.
Click to expand...
Your results are different
IT told me my PC doesn't meet Windows 11 requirements because secure boot is not enabled
 

My Computer My Computer

At a glance

windows 10
OS
windows 10
mcp111 said:
Your results are different
IT told me my PC doesn't meet Windows 11 requirements because secure boot is not enabled
Click to expand...
All you have to do is to go into the BIOS and activate Secure Boot.
 

My Computer My Computer

At a glance

Windows 11 Home(RP) - 25H2 -26200.8728AMD Ryzen 5 5600GG.SKILL Ripjaws V Series 64GB 4x16Nvidia geforce gtx titan x
OS
Windows 11 Home(RP) - 25H2 -26200.8728
Computer type
PC/Desktop
Manufacturer/Model
Banana Junior 5600-G Series
CPU
AMD Ryzen 5 5600G
Motherboard
Asus ROG Strix B550-F
Memory
G.SKILL Ripjaws V Series 64GB 4x16
Graphics Card(s)
Nvidia geforce gtx titan x
Monitor(s) Displays
28" ASUS VP28U 4k
Screen Resolution
4K
Hard Drives
Primary SAMSUNG 970 EVO Plus
PSU
EVGA BQ 700w 80+ Bronze
Case
Zalman i3 NEO
Cooling
ARCTIC Freezer 7 X
Keyboard
Corsair
Mouse
Amazon Generic with Cord
Internet Speed
Download: 295.11 mbps Upload: 65.35 mbps T-Mobile Internet
Browser
Firefox and Edge
Antivirus
MS - Defender
Other Info
Speakers: Klipsch ProMedia 2.1
Hi,
I've hopped over all new system requirements I wouldn't worry about secure boot.
 

My Computer My Computer

At a glance

Win-7-10-11Pro's10900k & 9940x & 5930kTrident-Z Royal 4000c16 2x16gb & Trident-Z 36...Titan Xp & 1080ti FTW3 & evga 980ti gaming
OS
Win-7-10-11Pro's
Computer type
PC/Desktop
Manufacturer/Model
Acer 17" Nitro 7840sn/ 2x16gb 5600c40/ 4060/ stock 1tb-os/ 4tb sn850x
CPU
10900k & 9940x & 5930k
Motherboard
z490-Apex & x299-Apex & x99-Sabertooth
Memory
Trident-Z Royal 4000c16 2x16gb & Trident-Z 3600c16 4x8gb & 3200c14 4x8gb
Graphics Card(s)
Titan Xp & 1080ti FTW3 & evga 980ti gaming
Sound Card
Onboard Realtek x3
Monitor(s) Displays
1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Screen Resolution
1920-1080 not sure what the t.v is besides 43" class scales from 1920-1080 perfectly
Hard Drives
2-WD-sn850x 4tb/ 970evo+500gb/ 980 pro 2tb.
PSU
1000p2 & 1200p2 & 850p2
Case
D450 x2 & 1 Test bench in cherry Entertainment center
Cooling
Custom water loops x3 with 2x mora 360mm rads only 980ti gaming air cooled
Keyboard
G710+x3
Mouse
Redragon x3
Internet Speed
xfinity gigabyte
Browser
Firefox
Antivirus
mbam pro
And what are the specs of your computer, which you have already been asked and ignored?
 

My Computer My Computer

At a glance

Windows 11Ryzen 5 5600T-Force Vulcan Z - 32 GB (2x16) @ 3600 MHzSapphire RX 7600
OS
Windows 11
Computer type
PC/Desktop
CPU
Ryzen 5 5600
Motherboard
MSI B550 Tomahawk
Memory
T-Force Vulcan Z - 32 GB (2x16) @ 3600 MHz
Graphics Card(s)
Sapphire RX 7600
Monitor(s) Displays
Sansui ES-G27F2Q
Screen Resolution
2560 x 1440P
Hard Drives
XPG SX8200 240GB M.2 PCIe Gen3x4 NVMe
Samsung 850 EVO 250 GB
Adata SU800 1 TB
WD Black SN750 500GB
PSU
EVGA SuperNOVA 650 G3
Case
Deepcool CK500WH
Cooling
Thermalright Frozen Warframe 240 SE, plus 3 140 MM case fans (2 in front, 1 in rear)
Keyboard
Logitech G213 Prodigy
Mouse
Logitech ERGO M575
Devlin1888 said:
Literally couldn't be simpler to do tbf, Enter bios, Find it, Turn on, Tada.
But as its been said, It only has to be capable, Not actually turned on.
Click to expand...
But the PC health check tool expects it to be turned on otherwise it fails
 

My Computer My Computer

At a glance

windows 10
OS
windows 10
Last edited:

My Computer My Computer

At a glance

Windows 11 Home(RP) - 25H2 -26200.8728AMD Ryzen 5 5600GG.SKILL Ripjaws V Series 64GB 4x16Nvidia geforce gtx titan x
OS
Windows 11 Home(RP) - 25H2 -26200.8728
Computer type
PC/Desktop
Manufacturer/Model
Banana Junior 5600-G Series
CPU
AMD Ryzen 5 5600G
Motherboard
Asus ROG Strix B550-F
Memory
G.SKILL Ripjaws V Series 64GB 4x16
Graphics Card(s)
Nvidia geforce gtx titan x
Monitor(s) Displays
28" ASUS VP28U 4k
Screen Resolution
4K
Hard Drives
Primary SAMSUNG 970 EVO Plus
PSU
EVGA BQ 700w 80+ Bronze
Case
Zalman i3 NEO
Cooling
ARCTIC Freezer 7 X
Keyboard
Corsair
Mouse
Amazon Generic with Cord
Internet Speed
Download: 295.11 mbps Upload: 65.35 mbps T-Mobile Internet
Browser
Firefox and Edge
Antivirus
MS - Defender
Other Info
Speakers: Klipsch ProMedia 2.1
mcp111 said:
But the PC health check tool expects it to be turned on otherwise it fails
Click to expand...
Hi,
MS fixed the first compatibility tool but as always ms can't fix anything lol
 

My Computer My Computer

At a glance

Win-7-10-11Pro's10900k & 9940x & 5930kTrident-Z Royal 4000c16 2x16gb & Trident-Z 36...Titan Xp & 1080ti FTW3 & evga 980ti gaming
OS
Win-7-10-11Pro's
Computer type
PC/Desktop
Manufacturer/Model
Acer 17" Nitro 7840sn/ 2x16gb 5600c40/ 4060/ stock 1tb-os/ 4tb sn850x
CPU
10900k & 9940x & 5930k
Motherboard
z490-Apex & x299-Apex & x99-Sabertooth
Memory
Trident-Z Royal 4000c16 2x16gb & Trident-Z 3600c16 4x8gb & 3200c14 4x8gb
Graphics Card(s)
Titan Xp & 1080ti FTW3 & evga 980ti gaming
Sound Card
Onboard Realtek x3
Monitor(s) Displays
1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Screen Resolution
1920-1080 not sure what the t.v is besides 43" class scales from 1920-1080 perfectly
Hard Drives
2-WD-sn850x 4tb/ 970evo+500gb/ 980 pro 2tb.
PSU
1000p2 & 1200p2 & 850p2
Case
D450 x2 & 1 Test bench in cherry Entertainment center
Cooling
Custom water loops x3 with 2x mora 360mm rads only 980ti gaming air cooled
Keyboard
G710+x3
Mouse
Redragon x3
Internet Speed
xfinity gigabyte
Browser
Firefox
Antivirus
mbam pro
You must log in or register to reply here.

Similar threads

Why does Windows 11 Pro get stuck on logo if Intel Virtualization technology is enabled?
Replies
5
Views
1K
usualjuptier
usualjuptier
  • Article Article
Xbox Building a Trusted Gaming Future: How Security Powers Fair Play on Windows 11
Replies
0
Views
545
Brink
Brink
Why does Windows 11 23H2 and Windows 10 22H2 have Kernel DMA Protection turned off on the same hardware and the same BIOS version?
Replies
1
Views
2K
zbook
Z
  • Article Article
Act now: Secure Boot certificates expire in June 2026
17 18 19
Replies
361
Views
69K
Genix
Genix
Secure boot, and its interaction with Windows 11 security, other features
Replies
1
Views
2K
Thorshammer342
T

Latest Support Threads

Latest Tutorials

Back
Top Bottom