Windows 10: Enable or Disable Secure Boot on Windows 10 PC

How to: Enable or Disable Secure Boot on Windows 10 PC

How to Enable or Disable Secure Boot on Windows 10 PC


Secure Boot is a security standard developed by members of the PC industry to help make sure that your PC boots using only software that is trusted by the PC manufacturer. Support for Secure Boot was introduced in Windows 8, and also supported by Windows 10.

When the PC starts, the firmware checks the signature of each piece of boot software, including firmware drivers (Option ROMs), EFI applications, and the operating system. If the signatures are good, the PC boots, and the firmware gives control to the operating system.

Secure boot prevents a sophisticated and dangerous type of malwarecalled a rootkitfrom loading when you start your device. Rootkits use the same privileges as the operating system and start before it, which means they can completely hide themselves. Rootkits are often part of an entire suite of malware that can bypass local logins, record passwords and keystrokes, transfer private files, and capture cryptographic data.

Secure Boot requires a PC with a UEFI firmware chip that meets the UEFI.

Sometimes you may need to disable Secure Boot to run some PC graphics cards, hardware, or operating systems such as Linux or previous version of Windows. Before disabling Secure Boot, consider whether it is necessary. From time to time, your manufacturer may update the list of trusted hardware, drivers, and operating systems for your PC. To check for updates, go to Windows Update, or check your manufacturer's website.

For more information about Secure Boot, see:

• Frequently Asked Questions about Secure Boot | Intel Support
• Secure Boot
• Secure boot - Device protection in Windows Defender Security Center
• Secure the Windows 10 boot process | Microsoft Docs
• Disabling Secure Boot
• Device protection in Windows Defender Security Center - Secure boot | Windows Security Support

This tutorial will show you how to enable or disable Secure Boot on your Windows 10 PC.

*note The way you enable and disable Secure Boot varies by PC and motherboard manufacturer. You should read your manufacturer's manual or support site for specific instructions.

If you would like to post screenshots below of your specific PC manufacturer Secure Boot settings, then please feel free to do so to help others.


CONTENTS:

• Option One: To Enable or Disable Secure Boot on ASRock x79 Motherboard
• Option Two: To Enable or Disable Secure Boot on Acer PCs
• Option Three: To Enable or Disable Secure Boot on HP and Compaq PCs

OPTION ONE [/i] To Enable or Disable Secure Boot on ASRock x79 Motherboard
1. Boot to your UEFI firmware settings.

2. Do step 3 (enable) or step 4 (disable) for what you want to do.


3. To Enable Secure Boot
A) Click/tap on the Security menu icon, and select Enabled for the Secure Boot setting. (see screenshot below)



B) If you haven't already, click/tap on the Install default Secure Boot keys link, and click/tap on Yes to confirm. (see screenshots below)






C) Go to step 5 below.

4. To Disable Secure Boot
A) Click/tap on the Security menu icon, select Disabled for the Secure Boot setting, and go to step 5 below. (see screenshot below)




5. Click/tap on the Exit menu icon, and click/tap on the Save Changes and Exit option. (see screenshot below)



6. Click/tap on Yes to confirm. (see screenshot below)



7. Your PC will now reboot.





OPTION TWO [/i] To Enable or Disable Secure Boot on Acer PCs
1. For how, see videos below and Enable or Disable Secure Boot on Desktops, Notebooks, and Tablets - acer Answers






OPTION THREE [/i] To Enable or Disable Secure Boot on HP and Compaq PCs
1. For how, see: HP PCs - Secure Boot (Windows 10)





That's it,
Shawn


Related Tutorials

• How to Check if Secure Boot is Enabled or Disabled in Windows 10
• How to Check if Windows 10 is using UEFI or Legacy BIOS
• How to Boot to UEFI Firmware Settings from inside Windows 10
• How to Convert Windows 10 from Legacy BIOS to UEFI without Data Loss
• How to Configure Early Launch Antimalware Boot-Start Driver Initialization Policy in Windows 8 and 10

:)

 

How to know whether the device driver enforcement is enabled/disabled?

You need to disable Secure boot in BIOS/UEFI and then check:

https://www.tenforums.com/tutorials/85279-enabl...

 

Is it possible to install Windows 10 in UEFI mode using the original USB stick?

You don't have to enable Legacy Boot to install Windows 10 . . .

If you go into your UEFI BIOS and change the following settings, you should be able to install Windows 10 on GPT:

Disable Secure Boot

Enable CSM

Then install Windows 10 and later re-enable Secure Boot . . .

 

Hello br4to92, and welcome to Ten Forums. *Smile

The dual boot issue would be a good question to ask in our Installation and Upgrade forum area.

If you're wanting to disable Secure Boot, then the "Erase all Secure Boot Setting" should be the correct option.

 

Hello and thank you for the warm welcome *Smile I'll start a new thread at Installation & Upgrade area, at your suggestion. I had some issues with booting (cannot boot into any installed OS) after i've done some changes on the hard-disk with EasyUEFI (i was not knowing what i was doing), but i've reinstalled Windows 10 and now everything's ok, except the part with dual-booting with Ubuntu. I hope i'll find some answers regarding this, because on my old laptop i was able to dual boot Windows 8.1 and Ubuntu very easy. So thanks again and have a nice day!

 

I hope you get a solution there soon. *Smile