Windows 11 does not need Secure Boot?

JohnnyGui · Apr 9, 2022

I have Windows 10 and have Secure Boot disabled as stated in the System Information dialog. Also, CSM is enabled in BIOS.

Windows Update is telling me that Windows 11 can be installed on my PC despite reading all over the internet that I need to have Secure Boot enabled.

How is this possible?

Try3 · Apr 9, 2022

Windows 11 merely wants Secure Boot to be available.
It does not need to be enabled.

Windows 11 and Secure Boot - MSSupport
Why does Windows 11 need secure boot - ElevenForum

Denis

NavyLCDR · Apr 9, 2022

Just because you have items disabled does not mean your computer does not meet requirements. Secure Boot is available if you turn it on, so it meets Windows 11 requirements.

JohnnyGui · Apr 9, 2022

Try3 said:
Windows 11 merely wants Secure Boot to be available.
It does not need to be enabled.

Windows 11 and Secure Boot - MSSupport
Why does Windows 11 need secure boot - ElevenForum

Denis

Ah that explains it. Thanks

NavyLCDR said:
Just because you have items disabled does not mean your computer does not meet requirements. Secure Boot is available if you turn it on, so it meets Windows 11 requirements.

I understand this, but I read that it needs it enabled to install Windows 11. Apparently many sources misunderstood this.

NavyLCDR · Apr 9, 2022

JohnnyGui said:
Ah that explains it. Thanks

I understand this, but I read that it needs it enabled to install Windows 11. Apparently many sources misunderstood this.

It will need to be enabled if you want to upgrade to or clean install Windows 11 without using a workaround.

JohnnyGui · Apr 9, 2022

NavyLCDR said:
It will need to be enabled if you want to upgrade to or clean install Windows 11 without using a workaround.

But that's the thing. Windows Update is telling me that I can install it now while Secure Boot is disabled.

Servo · Apr 9, 2022

I installed windows 11, like you, with csm enabled (for ventoy) and secure boot disabled (so I could have csm), Its worked without problems, so go for it :)

NavyLCDR · Apr 9, 2022

Servo said:
I installed windows 11, like you, with csm enabled (for ventoy) and secure boot disabled (so I could have csm), Its worked without problems, so go for it :)

And also let us know how it goes.

JohnnyGui · Apr 9, 2022

Servo said:
I installed windows 11, like you, with csm enabled (for ventoy) and secure boot disabled (so I could have csm), Its worked without problems, so go for it :)

Thanks for confirming. I'm surprised why sources say otherwise.

I'm now wondering whether a clean install of Windows 11 would also be possible.

Servo · Apr 9, 2022

I would do an image of your working windows 10 before you try
Macrium free version would do, or maybe the free version of EaseUs offered to members on here

Sir_George · Apr 9, 2022

I upgraded from Windows 10 in November and have had no problems with Secure Boot being off.

NavyLCDR · Apr 9, 2022

I guess MS must have dropped it as a requirement then.

hsehestedt · Apr 9, 2022

Confirmed: Just tried it and a clean install can be successfully performed with Secure Boot disabled - it just needs to be an available option (for now). I'm sure that Microsoft will likely tighten the reigns on that requirement in the future.

As for CSM, I'm fairly certain that it doesn't matter if that is enabled, so long as UEFI is the primary mode of the firmware. Pretty sure I've tested it that way on my laptop in the past, but I can't 100% swear to it. My current testing was done with VMware and there is no CSM option available there.

If you really need this tested to be sure, please let me know and I'll do a backup on laptop and try it.

hsehestedt · Apr 9, 2022

My apologies: I forgot that there was no real need to have to backup my laptop. If Win 11 setup is going to fail because setup requirements are not met, it will do so before the point where the HD contents are wiped out during setup. So, I tried it. I enabled CSM and started setup and Win 11 setup is perfectly fine with that.

Hope that helps!

zbook · Apr 10, 2022

Please run:
ms-settings:windowsupdate

Meet Windows 11: Features, Look, Benefits & More | Microsoft

Meet Windows 11, the newest Windows version from Microsoft. Upgrade your PC to Windows 11, or explore which devices come equipped with Windows 11 features.

www.microsoft.com

Microsoft Windows 11 requirements:

UEFI
Secure Boot capable

Windows 11 requirements

Hardware requirements to deploy Windows 11.

docs.microsoft.com

Windows 11 Specs and System Requirements | Microsoft

Find an overview of Windows 11 specs and features from Microsoft. Learn about the device specifications, versions and languages available for Windows 11

www.microsoft.com

Windows 11 and Secure Boot - Microsoft Support

Learn how to change settings to enable Secure Boot if you are not able to upgrade to Windows 11 because your PC is not currently Secure Boot capable.

support.microsoft.com

JohnnyGui · Apr 13, 2022

hsehestedt said:
My apologies: I forgot that there was no real need to have to backup my laptop. If Win 11 setup is going to fail because setup requirements are not met, it will do so before the point where the HD contents are wiped out during setup. So, I tried it. I enabled CSM and started setup and Win 11 setup is perfectly fine with that.

Hope that helps!

Thanks a lot for testing this. Do you mean it will warn you if it's not compatible even before deleting the HD content during this clean install screen?

@zbook

Thanks, I knew it stated that it should be Secure Boot capable but I was hesitating since other sources explicitly mentioned it should be enabled. I think these confirmations have helped me now.

hsehestedt · Apr 13, 2022

Yes, if your hardware does not meet requirements, Windows setup will inform you of this prior to you reaching the screen you show in your screenshot.

tinmar49 · Apr 14, 2022

I have 4 pc's all with secure boot enabled, running W11 and it does not seem to have any impact on their use. Except for this one that I have on the insider beta program. Somehow I have added a password in the bios and have to use it immediately before putting the pin in when turning on. This also affects running an offline WD scan as I have to put the password in as the pc restarts and before the scan can begin, If I simply set it to scan and walked away, it would never boot. I am used to this on this pc, if I switch on, the password comes up within 6 seconds.
Secure boot was running on my laptop without my ever knowing about it until the advent of W11 brought it to my attention, and I had changed the hdd to an SSD within a month of buying it.