sprite

How to enable or disable Secure Boot

17 May 2020 6:16pm at May 23, 2022 • by •  in Articles •  15

Disabling Secure Boot would be required for example in order to enable Test Mode for Windows if you received the "The value is protected by Secure Boot policy" error, in some cases if you want to install a specific Linux OS or if you want to install Windows 7. Enabling Secure Boot is required in order to install Windows 11. The exact location and procedure to enable or disable Secure Boot can vary depending on BIOS version and motherboard generation.

Contents

  1. Generic instructions
  2. ASRock motherboards
  3. ASUS motherboards
  4. BIOSTAR motherboards
  5. Gigabyte motherboards
  6. MSI motherboards
  7. Acer PCs and notebooks
Page updates

  • 23 May 2022: Article updated with a precautionary notice about checking if GPU BIOS has UEFI support, which may have been a cause of black screens.
  • 30 Jun 2021: Article updated with a precautionary notice about boot disk being GPT partition style.
  • 17 May 2020: Article published.

Generic instructions

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start. Some OEM PC(HP, Dell, Acer, Lenovo, Toshiba etc.) and notebooks use keys like F1, F2, F8, F10 or F12 for entering BIOS.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Look for "Secure Boot" option under under Boot, Security or Authentication menu categories.
  3. Set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start. Some OEM PC(HP, Dell, Acer, Lenovo, Toshiba etc.) and notebooks use keys like F1, F2, F8, F10 or F12 for entering BIOS.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Look for "Secure Boot" option under under Boot, Security or Authentication menu categories.
  3. Set "Secure Boot" to Enabled.
  4. Save and exit.

ASRock motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Security-> set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot->CSM(Compatibility Support Module)-> set CSM to Disabled.
  4. Save and exit.
  5. Enter BIOS.
  6. Go to Security and set "Secure Boot" to Enabled.
  7. Save and exit.

ASUS motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot > Secure Boot > Key Management-> Clear Secure Boot keys-> Yes.
  4. Go to Boot > Secure Boot, it should show that Secure Boot is disabled.
  5. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot-> CSM(Compatibility Support Module)-> set "Launch CSM" to Disabled.
  4. Save and exit.
  5. Enter BIOS.
  6. Go to Boot > Secure Boot > Key Management-> "Restore DB Defaults".
  7. Go to Boot > Secure Boot, it should show that Secure Boot is enabled.
  8. Save and exit.

BIOSTAR motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Go to Security ->Secure Boot-> Set "Secure Boot" to Disabled.
  3. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Go to Advanced-> CSM Configuration-> Set "CSM Support" to Disabled.
  3. Save and exit.
  4. Enter BIOS.
  5. Go to Security ->Secure Boot-> Set "Secure Boot" to Enabled.
  6. Save and exit.

Gigabyte motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot and set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot and set "CSM Support" to Disabled.
  4. Save and exit.
  5. Enter BIOS.
  6. Go to Boot and set "Secure Boot" to Enabled.
  7. Save and exit.

MSI motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to "Advanced"-> "Settings"-> "Windows OS Configuration"->Secure Boot-> set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. If you want to enable Secure Boot: "Advanced"-> "Settings"-> "Windows OS Configuration"-> look for "Windows 8/8.1 Feature" or "Windows 10 WHQL Support" and set it to "UEFI".
  4. Save and exit.
  5. Enter BIOS.
  6. Go to "Advanced"-> "Settings"-> "Windows OS Configuration"->Secure Boot-> set "Secure Boot" to Enabled.
  7. Save and exit.

Acer PCs and notebooks

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Go to Boot section, set "Secure Boot" to Disabled.
    • If the option is not there look under Authentication section-> Set "Secure Boot" to Disabled.
  3. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Go to Boot section, set "Boot Mode" to UEFI.
  3. Save and exit.
  4. Enter BIOS.
  5. Go to Boot section, set "Secure Boot" to Enabled.
    • If the option is not there look under Authentication section-> Set "Secure Boot" to Enabled.
  6. Save and exit.
Useful for the following OS:

  • Windows 8, Windows 8.1, Windows 10, Windows 11, Windows Server 2012, Windows Server 2016, Windows Server 2019.
Donation notice
Was this helpful? Please consider supporting us by making a donation.
AdSense

15 Comments

  1. Jan28 Jun 2021 @ 05:10

    This is not very helpful "If you haven't had this set to "UEFI" before, your OS will not boot if your disk partition style is MBR and not GPT" settings for MSI motherboards.
    how to solve this? Also you need a platform Key (PK) . But its unclear how to get one.

    Reply

    • CarvedInside29 Jun 2021 @ 00:06

      Which specific motherboard do you have? If you can, please take a screenshot or picture with the settings where Platform Key setting is and upload it to image service(imgur,imgbb, etc.).
      Here is a guide on how to check if your boot partition style is MBR or GPT and how to convert it to GPT.

      Reply

  2. wasa29 Jun 2021 @ 18:51

    Hi, i just tried out the method and now the pc won't boot at all, it just display a black screen and doing nothing i can't access the bios too

    Reply

    • CarvedInside30 Jun 2021 @ 05:08

      Which motherboard do you have? Which version of Windows? How did you enter the BIOS prior to this issue?
      At the moment I'm not sure what is going on. Think you need to reset the BIOS settings.

      Reply

  3. Ty29 Jun 2021 @ 23:13

    I just recently followed this to enable secure boot in my motherboard, after enabling it though I can't seem to boot back into the bios I also followed the part where you press restart and hold shift and go to uefi firmware, but it just restarts and does the same thing and boots instantly back to windows. Pressing F2 or Del or F12 does not work anymore and just instantly boots back into Windows any fix? or should I just do a CMOS reset on my motherboard?

    Reply

    • CarvedInside30 Jun 2021 @ 01:23

      Which motherboard or notebook do you have? What is you complete version of Windows? Really weird issue, I think this could be a bug within your motherboard BIOS or Windows.
      Things to try:
      a. Disable Windows 10 Fast Startup https://help.uaudio.com/hc/en-us/articles/213195423-How-To-Disable-Fast-Startup-in-Windows-10
      b. Disconnect the system from the power cable and battery if you have notebook. Try to enter the BIOS by pressing the BIOS key (Del/F2/F10/F12 etc.).
      c. Disconnect the system from the power cable and batter if you have notebook. Temporarily remove the boot storage drive, connect the power and try to enter the BIOS by pressing the BIOS key (Del/F2/F10/F12 etc.).
      d. Reset the BIOS.

      For b), c) and d) methods, once you get back in BIOS, if you still want to keep Secure Boot enabled, look for a setting called Fast Boot or something along those lines and set it to disabled. See if entering BIOS with Secure Boot enabled works then.

      Let me know how it goes.

      Reply

      • Ty30 Jun 2021 @ 18:56

        I did a CMOS reset using my manual. I have a A320m-ds2 gigabyte motherboard. Located the two pins and it worked! I just got back into the BIOS and I can now successfully use F12 to boot back into it. Thanks for the help!

        Reply

        • CarvedInside01 Jul 2021 @ 03:13

          Before the BIOS reset, have you tried to disable Windows 10 Fast Startup to see if that would allow you to enter the BIOS?

          Reply

  4. Eddy12087609 Oct 2021 @ 07:05

    Hi guys at Maxedtech

    I tried a YouTube guide on how to install windows 11 by fixing the tpm and secure boot issues that are plaguing those of us that build the own pc and want to upgrade safely from MS. So I followed the tutorial and managed to fix the tpm 2.0 issue, but unfortunately every time I try the secure boot method the bios saves and returns to the bios screen every time no matter if I follow all the video guides step by step. Some said is thanks to MSI issues. My mobo is a X570-A pro, running a Ryzen 5 1600 ,gpu Radeon RX 590

    Reply

  5. Jookie19 Oct 2021 @ 14:55

    Same issue with me. I have an MSI motherboard. I got TPM enabled ok. Then moved to enable Secure Boot. Now my PC won't boot and won't display the BIOS no matter what I try. I guess I'll have to reset my BIOS back to default so I can get back into it!

    What is Microsoft doing with all these new settings. Are they necessary?

    Reply

    • CarvedInside20 Oct 2021 @ 20:01

      Don't know why this is happening and especially why you can't even get into the BIOS.

      Before you've enabled Secure Boot, did you check if the system disk partition style is GPT (like it's presented "Checking MBR or GPT partition style" of this guide)?

      For Windows 11 installation, there is a way to bypass the Secure Boot requirement by modifying the Windows 11 installation files with a tool like Ventoy (guide here).

      Reply

  6. n116 Nov 2021 @ 10:25

    Thank you so much. Helpful.

    Reply

  7. baran gökkan01 Dec 2021 @ 20:25

    hi, I have a lenovo motherboard, but you did not explain the solution of lenovo here, could you please tell me?

    Reply

    • CarvedInside02 Dec 2021 @ 11:01

      At the moment I don't have specific instructions for Lenovo PC's or notebooks. The "Generic instructions" section might be of help to you.

      Reply

  8. Dan24 Mar 2023 @ 00:06

    For ASRock have to add change standard to custom --> then install default factory keys

    Then say yes to the onscreen prompts and F10 to Save and exit.

    Reply

Legend:AdminAuthorFeaturedLinkedOff-topic

Leave a new commentReply to comment

Comment received.
Your comment may be held for moderation. If it does not show up immediately, please be patient. Comments have to comply with these rules:
  • English language only
  • Don't post insults or threats
  • Try to keep the discussion constructive and informative
  • Don't post questions without doing a search beforehand
  • For replies to individuals regarding the SAME discussion, use Reply to write to that individual. For a NEW issue write a new comment.
  • Make your comment easly readable. Write the product names how they are originally written or at least capitalize their first letter. Write "i" as "I". Add a space after end of a sentence and beginning of another (e.g. ".I" -> ". I").

We've noticed that you're using an AdBlocker

It's not just you, over 66% of our site's visitors are blocking the ads.

Please disable adblock for this website and refresh this page if you:
find the content useful
want us to create more useful content and software
want tech support through the comment section

The ads are placed so that there is minimal interference with page reading. There are no pop-up, pop-under or sticky ads.

Alternatively, you can support us by making a donation.

Close