How to enable or disable Secure Boot (2023)

17 May 2020 6:16pm at May 23, 2022 •by CarvedInside • in Articles • 15

Disabling Secure Boot would be required for example in order to enable Test Mode for Windows if you received the "The value is protected by Secure Boot policy" error, in some cases if you want to install a specific Linux OS or if you want to install Windows 7. Enabling Secure Boot is required in order to install Windows 11. The exact location and procedure to enable or disable Secure Boot can vary depending on BIOS version and motherboard generation.

Contents

See Also
How to Enable Secure Boot in BIOS on Gigabyte and AORUS

  1. Generic instructions
  2. ASRock motherboards
  3. ASUS motherboards
  4. BIOSTAR motherboards
  5. Gigabyte motherboards
  6. MSI motherboards
  7. Acer PCs and notebooks

Page updates

  • 23 May 2022: Article updated with a precautionary notice about checking if GPU BIOS has UEFI support, which may have been a cause of black screens.
  • 30 Jun 2021: Article updated with a precautionary notice about boot disk being GPT partition style.
  • 17 May 2020: Article published.

Generic instructions

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start. Some OEM PC(HP, Dell, Acer, Lenovo, Toshiba etc.) and notebooks use keys like F1, F2, F8, F10 or F12 for entering BIOS.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Look for "Secure Boot" option under under Boot, Security or Authentication menu categories.
  3. Set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start. Some OEM PC(HP, Dell, Acer, Lenovo, Toshiba etc.) and notebooks use keys like F1, F2, F8, F10 or F12 for entering BIOS.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Look for "Secure Boot" option under under Boot, Security or Authentication menu categories.
  3. Set "Secure Boot" to Enabled.
  4. Save and exit.

ASRock motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Security-> set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot->CSM(Compatibility Support Module)-> set CSM to Disabled.
  4. Save and exit.
  5. Enter BIOS.
  6. Go to Security and set "Secure Boot" to Enabled.
  7. Save and exit.

ASUS motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot > Secure Boot > Key Management-> Clear Secure Boot keys-> Yes.
  4. Go to Boot > Secure Boot, it should show that Secure Boot is disabled.
  5. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot-> CSM(Compatibility Support Module)-> set "Launch CSM" to Disabled.
  4. Save and exit.
  5. Enter BIOS.
  6. Go to Boot > Secure Boot > Key Management-> "Restore DB Defaults".
  7. Go to Boot > Secure Boot, it should show that Secure Boot is enabled.
  8. Save and exit.

BIOSTAR motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Go to Security ->Secure Boot-> Set "Secure Boot" to Disabled.
  3. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Go to Advanced-> CSM Configuration-> Set "CSM Support" to Disabled.
  3. Save and exit.
  4. Enter BIOS.
  5. Go to Security ->Secure Boot-> Set "Secure Boot" to Enabled.
  6. Save and exit.

Gigabyte motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot and set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot and set "CSM Support" to Disabled.
  4. Save and exit.
  5. Enter BIOS.
  6. Go to Boot and set "Secure Boot" to Enabled.
  7. Save and exit.

MSI motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to "Advanced"-> "Settings"-> "Windows OS Configuration"->Secure Boot-> set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. If you want to enable Secure Boot: "Advanced"-> "Settings"-> "Windows OS Configuration"-> look for "Windows 8/8.1 Feature" or "Windows 10 WHQL Support" and set it to "UEFI".
  4. Save and exit.
  5. Enter BIOS.
  6. Go to "Advanced"-> "Settings"-> "Windows OS Configuration"->Secure Boot-> set "Secure Boot" to Enabled.
  7. Save and exit.

Acer PCs and notebooks

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Go to Boot section, set "Secure Boot" to Disabled.
    • If the option is not there look under Authentication section-> Set "Secure Boot" to Disabled.
  3. Save and exit.
Enable Secure Boot
Precautionary notices

If you haven't had Secure Boot enabled before in your current system, before enabling Secure Boot do the following checks:

  1. Check if your boot disk partition style is GPT. See "Checking MBR or GPT partition style" of this guide. If it's not GPT then your OS will not boot.
  2. Check if your GPU BIOS has UEFI support. You can do this in GPU-Z and see if UEFI checkbox is ticked. If it is not ticked, then your system will not boot, only showing a black screen and may require you to do a external BIOS reset (clear CMOS pins on the motherboard or temporarily removing the motherboard battery).
Enable Secure Boot guide
  1. Enter BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Go to Boot section,set "Boot Mode" to UEFI.
  3. Save and exit.
  4. Enter BIOS.
  5. Go to Boot section, set "Secure Boot" to Enabled.
    • If the option is not there look under Authentication section-> Set "Secure Boot" to Enabled.
  6. Save and exit.

Useful for the following OS:

  • Windows 8, Windows 8.1, Windows 10, Windows 11, Windows Server 2012, Windows Server 2016, Windows Server 2019.
Top Articles
Latest Posts
Article information

Author: Virgilio Hermann JD

Last Updated: 13/08/2023

Views: 6121

Rating: 4 / 5 (41 voted)

Reviews: 80% of readers found this page helpful

Author information

Name: Virgilio Hermann JD

Birthday: 1997-12-21

Address: 6946 Schoen Cove, Sipesshire, MO 55944

Phone: +3763365785260

Job: Accounting Engineer

Hobby: Web surfing, Rafting, Dowsing, Stand-up comedy, Ghost hunting, Swimming, Amateur radio

Introduction: My name is Virgilio Hermann JD, I am a fine, gifted, beautiful, encouraging, kind, talented, zealous person who loves writing and wants to share my knowledge and understanding with you.