Solved Why is my device security different?

S

Silencious

Well-known member

Local time

7:35 AM

Posts

22

OS

windows 11

• Yesterday at 5:27 PM

• #1

Hi people, I was watching a youtube about secure boot and to check if I had any issues. The presenter said to click Windows security and then go to
device security which is shon here. But on my computer Windows 11 25H2
I have this
Can anyone tell me why? I have 64Bit. I also put in PowerShell as admin this command and I get this. Can someone help me or put my mind at ease?

 

My Computer

System One

• OS

  windows 11

G

garlin

Well-known member

Guru

VIP

Local time

11:35 PM

Posts

6,142

OS

Windows 7

• Yesterday at 5:31 PM

• #2

The entire Secure Boot section disappears from Device Security when Secure Boot is disabled.

From PowerShell:

Code:

Confirm-SecureBootUEFI

$true = Secure Boot ON
$false = Secure Boot OFF
Error = Legacy CSM mode

 

My Computer

System One

• OS

  Windows 7

S

Silencious

Well-known member

Thread Starter

Local time

7:35 AM

Posts

22

OS

windows 11

• Yesterday at 5:34 PM

• #3

So I need to go back into the bios again?

 

My Computer

System One

• OS

  windows 11

G

garlin

Well-known member

Guru

VIP

Local time

11:35 PM

Posts

6,142

OS

Windows 7

• Yesterday at 5:37 PM

• #4

The only way to switch your Secure Boot mode is from BIOS. Otherwise a hacker could just disable it from Windows.

 

My Computer

System One

• OS

  Windows 7

S

Silencious

Well-known member

Thread Starter

Local time

7:35 AM

Posts

22

OS

windows 11

• Yesterday at 5:38 PM

• #5

When I updated my Bios I thought it would remain in secure boot. I'll reboot and try again

 

My Computer

System One

• OS

  windows 11

S

Silencious

Well-known member

Thread Starter

Local time

7:35 AM

Posts

22

OS

windows 11

• Yesterday at 5:53 PM

• #6

Ok, so I rebooted into the BIOS, and it says that secure boot is enabled, and underneath it says 'not active'? Is this normal?

 

My Computer

System One

• OS

  windows 11

G

garlin

Well-known member

Guru

VIP

Local time

11:35 PM

Posts

6,142

OS

Windows 7

• Yesterday at 5:56 PM

• #7

Are you using Legacy CSM mode, instead of UEFI mode? Did you delete your Secure Boot certs at any time?

UEFI mode must be used for Secure Boot to work.

 

My Computer

System One

• OS

  Windows 7

S

Silencious

Well-known member

Thread Starter

Local time

7:35 AM

Posts

22

OS

windows 11

• Yesterday at 6:25 PM

• #8

Solved. After much thought. I went back to the BIOS, checked that CSM was in fact disabled, and that my BIOS mode was UEFI. Changed the standard mode in the BIOS to custom. Disable the secure boot and reboot into Windows. Went into recovery and advanced options, restarted the computer, and went into troubleshoot and UEFI settings. Back in the BIOS, checked the key management, reinstalled the keys, and re-enabled secure boot. Rebooted, and now...

 

My Computer

System One

• OS

  windows 11

S

Silencious

Well-known member

Thread Starter

Local time

7:35 AM

Posts

22

OS

windows 11

• Yesterday at 6:27 PM

• #9

Thanks Garlin for your time and effort

 

My Computer

System One

• OS

  windows 11