Disabling Secure Boot

If you’re running certain PC graphics cards, hardware, or operating systems such as Linux or previous version of Windows you may need to disable Secure Boot.

Secure Boot helps to make sure that your PC boots using only firmware that is trusted by the manufacturer. You can usually disable Secure Boot through the PC’s firmware (BIOS) menus, but the way you disable it varies by PC manufacturer. If you are having trouble disabling Secure Boot after following the steps below, contact your manufacturer for help.

• After disabling Secure Boot and installing other software and hardware, you may need to restore your PC to the factory state to re-activate Secure Boot.
• Be careful when changing BIOS settings. The BIOS menu is designed for advanced users, and it’s possible to change a setting that could prevent your PC from starting correctly. Be sure to follow the manufacturer’s instructions exactly.

Disable Secure Boot

Before disabling Secure Boot, consider whether it is necessary. From time to time, your manufacturer may update the list of trusted hardware, drivers, and operating systems for your PC. To check for updates, go to Windows Update, or check your manufacturer’s website.

Open the PC BIOS menu. You can often access this menu by pressing a key during the bootup sequence, such as F1, F2, F12, or Esc.

Or, from Windows, hold the Shift key while selecting Restart. Go to Troubleshoot > Advanced Options: UEFI Firmware Settings.

Find the Secure Boot setting, and if possible, set it to Disabled. This option is usually in either the Security tab, the Boot tab, or the Authentication tab.

Save changes and exit. The PC reboots.

Install the graphics card, hardware, or operating system that’s not compatible with Secure Boot.

In some cases, you may need to change other settings in the firmware, such as enabling a Compatibility Support Module (CSM) to support legacy BIOS operating systems. To use a CSM, you may also need to reformat the hard drive using the Master Boot Record (MBR) format, and then reinstall Windows. For more info, see Windows Setup: Installing using the MBR or GPT partition style.

Re-enable Secure Boot

Uninstall any graphics cards, hardware, or operating systems that aren’t compatible with Secure Boot.

Open the PC BIOS menu. You can often access this menu by pressing a key during the bootup sequence, such as F1, F2, F12, or Esc.

Or, from Windows: go to Settings charm > Change PC settings > Update and Recovery > Recovery > Advanced Startup: Restart now. When the PC reboots, go to Troubleshoot > Advanced Options: UEFI Firmware Settings.

Find the Secure Boot setting, and if possible, set it to Enabled. This option is usually in either the Security tab, the Boot tab, or the Authentication tab.

On some PCs, select Custom, and then load the Secure Boot keys that are built into the PC.

If the PC does not allow you to enable Secure Boot, try resetting the BIOS back to the factory settings.

Save changes and exit. The PC reboots.

If the PC isn’t able to boot after enabling Secure Boot, go back into the BIOS menus, disable Secure Boot, and try to boot the PC again.

In some cases, you may need to refresh or Remove everything to its original state before you can turn on Secure Boot. For more info, see How to restore, refresh, or Remove everything.

If the above steps don’t work, and you still want to use Secure Boot, contact your manufacturer for help.

Как отключить (включить) безопасную загрузку (Secure Boot) в UEFI BIOS

В данной статье показаны действия, с помощью которых можно отключить или включить безопасную загрузку (Secure Boot) в интерфейсе BIOS UEFI.

Безопасная загрузка — это стандарт безопасности, который гарантирует пользователю, что его компьютер при загрузке использует только программное обеспечение, которому доверяет изготовитель компьютера.

В некоторых случаях может возникнуть необходимость отключить безопасную загрузку (Secure Boot) в интерфейсе UEFI BIOS, например при установке операционных систем Windows 7, Windows XP или Linux, а также для обеспечения работоспособности некоторых графических адаптеров и другого оборудования, потому-что функция безопасная загрузки может посчитать операционную систему, драйвер или приложение ненадежными, так как они не указаны как доверенные в базе данных безопасной загрузки.

Чтобы отключить безопасную загрузку (Secure Boot), войдите в настройки параметров встроенного ПО UEFI используя способы представленные в статье ➯ Как войти в настройки BIOS UEFI и ➯ Как войти в настройки параметров UEFI BIOS из интерфейса системы Windows 10.

Отключение безопасной загрузки

Чтобы отключить безопасную загрузку (Secure Boot), войдите в настройки параметров встроенного ПО UEFI и выберите пункт Advanced или нажмите клавишу F7.

Затем в режиме Advanced Mode перейдите на вкладку Boot и выберите параметр Меню безопасной загрузки

В меню безопасной загрузки вы увидите состояние безопасной загрузки (в данный момент состояние Включено ), чтобы отключить безопасную загрузку выберите параметр Управление ключами .

Затем выберите Очистить ключи безопасной загрузки .

Подтвердите удаление ключей безопасной загрузки нажав кнопку Yes .

Теперь нужно сохранить изменения, для этого перейдите на вкладку Exit и выберите опцию Save Changes & Reset .

Подтвердите сохранение измененных параметров и после перезагрузки компьютера, режим безопасной загрузки будет отключен.

В некоторых моделях материнских плат Asus, для отключения безопасной загрузки следует зайти на вкладку Security или Boot и установить для параметра Secure Boot значение Disabled .

Включение безопасной загрузки

Чтобы включить безопасную загрузку (Secure Boot), войдите в настройки параметров встроенного ПО UEFI и выберите пункт Advanced или нажмите клавишу F7

Затем в режиме Advanced Mode перейдите на вкладку Boot и выберите параметр Меню безопасной загрузки

В меню безопасной загрузки выберите параметр Управление ключами .

Затем выберите Установка ключей безопасной загрузки по умолчанию .

Подтвердите установку ключей безопасной загрузки по умолчанию нажав кнопку Yes .

Теперь нужно сохранить изменения, для этого перейдите на вкладку Exit и выберите опцию Save Changes & Reset .

Подтвердите сохранение измененных параметров и после перезагрузки компьютера, режим безопасной загрузки будет включен.

Способ отключения в интерфейсе BIOS InsydeH2O

Чтобы отключить безопасную загрузку в интерфейсе BIOS InsydeH2O, перейдите на вкладку Security , затем выберите параметр Secure Boot и установите для него значение Disabled , затем сохраните настройки нажав клавишу F10.

Enable Secure Boot on your device

Your organization requires that you enable Windows Secure Boot, which is a security feature that helps protect your device.

If you’re using a mobile device, contact your IT support person and they’ll help enable Secure Boot for you.

If you’re using a PC, you can either:

• Contact your IT support person for help.
• Try enabling Secure Boot on your own through the PC BIOS menu. For step-by-step instructions, see the Re-enable Secure Boot section in this article.

More information about Secure Boot

Secure boot is a security standard developed by members of the PC industry to help make sure that a device boots using only software that is trusted by the Original Equipment Manufacturer (OEM).

Check Secure Boot status

To check the status of Secure Boot on your PC:

1. Go to Start.
2. In the search bar, type msinfo32 and press enter.
3. System Information opens. Select System Summary.
4. On the right-side of the screen, look at BIOS Mode and Secure Boot State. If Bios Mode shows UEFI, and Secure Boot State shows Off, then Secure Boot is disabled.

Next steps

For more detailed information about the Secure Boot feature, see the Windows Developer Hardware docs.

Still need help? Contact your IT support person. For contact information, check the Company Portal website.

How to Disable and Enable UEFI Secure Boot in Windows 10

Disabling UEFI secure boot mode in Windows 10 may be necessary to enable your graphics card or to boot the PC with an unrecognizable USB drive or CD. For example, while booting it with a Linux distribution, your PC manufacturer may discourage you from using unsecure mode for booting.

If you perform an advanced restart using a USB device in secure mode, you may encounter a “security boot fail” error. This is perfectly normal, and there is no need to panic. Basically, Windows 10 is designed to boot using only firmware that is trusted by the manufacturer.

In this guide you will learn how to safely disable UEFI secure boot and also reenable it so that you can go back to the secure mode whenever you want. Both procedures are fast, easy and trouble-free. Just follow the steps in this guide.

Disable and Enable UEFI Secure Boot in Windows 10

First, go to “Advanced Startup” from the Start menu.

Once you click “Restart now” in the above menu selection, you will be guided to a blue screen. Use the arrow keys to select “Troubleshoot.”

In the next step, select “Advanced options,” and use the arrow keys to navigate to “UEFI Firmware Settings.”

You will have to restart the PC just once to change the UEFI firmware settings.

As soon as the homescreen appears, navigate to the “Boot” option using the side arrow keys. Here you can see that the secure boot mode is “enabled.” You cannot disable it directly, as the option to edit the secure boot mode will be greyed out. This is the reason you’ll need a supervisor password.

Use the arrow keys to navigate to “Security.” Click enter on your keyboard to “set a supervisor password.”

Setting a supervisor password is easy. Make sure you remember it, otherwise you won’t be able to access your Windows 10 computer’s secure mode ever again. However, you can still use it in normal mode.

It’s always better to save the supervisor password in a handwritten note. Confirm it once and hit Enter.

You will now see a success status that suggests that your changes have been saved. Click Enter to continue.

Go back to the boot menu. At this point you can see that the secure boot mode is no longer greyed out. You can now easily select the option for further editing.

Click Enter and select using the arrow keys to disable the secure boot mode. Press F10 to save your settings and restart the PC. Once your PC is in insecure mode, you can easily boot it with a USB drive which is not recognized by Microsoft.

Disable Supervisor Password in UEFI Settings

Microsoft does recommend you disable the supervisor password once you’re done. To do this, go back to “Security” and select the “Set Supervisor Password” option. You may also “set user and HDD passwords” using the up and down arrow keys.

Leave the space for “New password” blank, and the supervisor password will be automatically disabled. Confirm and enter the new selection.

It’s recommended to enable secure mode first before disabling your supervisor password.

As shown here, the supervisor password is now disabled once again.

To randomly know the current status of a PC’s UEFI secure mode, simply check if there is a “clear” message instead of “set” next to the option of “Supervisor Password Is.” If it’s “clear,” that would mean the password is disabled.

Whenever you restart the PC after disabling the secure mode, you can easily boot it again using unconventional startup techniques.

Summary

A prime objective of UEFI secure boot mode is that it protects your system from unauthorized boot loaders, especially the ones that come with malicious code. At the same time, unlocking the Windows 10 UEFI secure boot mode gives you much more control over your own PC.

By being able to disable and enable the PC of your own free will, you no longer have to run to the manufacturer for BIOS level repairs.

Have you tried disabling Windows 10 secure boot mode on your own? How was your experience? Do share in the comments below.

Sayak Boral is a technology writer with over ten years of experience working in different industries including semiconductors, IoT, enterprise IT, telecommunications OSS/BSS, and network security. He has been writing for MakeTechEasier on a wide range of technical topics including Windows, Android, Internet, Hardware Guides, Browsers, Software Tools, and Product Reviews.

One comment

It’s still far easier to just:

1) Take the install DVD with Windows 10 on it and put it in its sleeve

2) Put the DVD/sleeve on concrete in your garage

3) Light cutting torch and proceed to melt the DVD into a little puddle of slime. Once it’s dried and cooled off, take the remains and drop it where you and all the partyer’s you have over on weekends urinate outside near the shrubs when the bathroom is occupied and you have to go real bad after that third beer.

4) Alternatively, one can take the DVD in its sleeve, lay it flat on a 3/4 inch plywood and take a hammer of any type and weight to it thoroughly.

5) Go to Distrowatch.com, take a couple of days or three and look over and try some of the Linux and/or BSD distributions. Many can be tried via a ‘live’ version, all that is needed is a USB flash drive.

6) Write/call/e-mail the hardware manufacturers of the parts in your computer and demand that they quit caving to Microshaft…er…Microsoft’s strongarm tactics of trying to force everyone to use their product or it won’t work on certain hardware!!

Comments are closed.

Popular Posts

6 Ways to Check Hard Disk Health on Windows 10

8 Ways to Quickly Turn Off Your Screen in Windows 10

Latest Windows 10 Update Problems and How to Fix Them

13 Cool 4K Desktop Backgrounds for Windows 10

5 of the Best Ebook Readers for Windows 10

How to Remove Old and Useless Drivers in Windows 10

5 Lightweight Browsers for Windows 10

Find and Open Files Using Command Prompt in Windows 10

How to Increase the Maximum Volume in Windows 10

How to Fix Webcam or Camera Not Working in Windows 10

Affiliate Disclosure: Make Tech Easier may earn commission on products purchased through our links, which supports the work we do for our readers.