Windows 10: Secure Boot and UEFI Firmware updates?

Quick question.

I have Secure Boot enabled, but would it cause any issues in case I need to update the UEFI firmware?
So do I need to disabled Secure Boot before updating the firmware?

Thx!

:)

 

Questions reguarding clean installation of windows 10

You need to disable secure boot from UEFI settings.

UEFI Firmware Settings - Boot to from inside Windows 10
then see secure boot settings and disable.

 

Windows defender application guard

• Use UEFI firmware/BIOS settings at power-up to disable Secure Boot
• Login to Windows to confirm that the problem has been resolved
  
  • If not, try resetting or deleting Secure Boot Keys in BIOS settings
    
• Re-enable Secure Boot in BIOS/ UEFI firmware settings

 

Hi,
It's always recommended to use optimize defaults in bios before flashing them so I doubt secure boot would hurt anything seeing it being activated is a default setting.

 

You don't have to disable it. The secure boot setting in UEFI only affects whether or not you can boot to an unsigned OS bootloader.

If something goes wrong you can still get into UEFI to change the setting.

 

The laptop I have is still with the Windows 7 logo sticker on it and now I am running Windows 10 on it.
So, as I now recall, I had to change the BIOS settings to use only UEFI and then now I have enabled Secure Boot.

So what do you suggest in case I need a firmware update?
Should I disable Secure Boot before doing the firmware updates?

 

Just leave it enabled.

 

If laptop is so old that it came with Windows 7, a firmware update is highly unlikely. Updating bios has nothing to do with secure boot anyway.

 

But sometimes the firmware needs to be updated with security patches as well especially with all this Spectre and Meltdown vulnerabilities.

So this is why I needed to know whether or not Secure Boot needs to be disabled or not.

So again, Secure Boot can be left enabled during these firmware updates?

 

Several people already responded that you can leave it enabled.

 

I've done this a few times and just left secure boot enabled which worked fine. It's prudent to load the BIOS defaults after a BIOS update, reboot then make your BIOS settings. Note it's usually possible to save/load your preferred settings from within the BIOS.

 

It is still unlikely the bios will be updated on old devices.

Anyway you have been answered several tims now. Just leave it alone.

 

Hi,
Mostly scare ware don't worry about it there is nothing in the wild exploiting these issues
Disable remote desktop features
Don't use operating systems in virtual machine
Make sure you use a real antivirus program
Don't open links from within email from people you don't know and even if you do know them just know from even them copy and paste the links into a new browser window if you want to view one.. *Smile

Don't click on adds in websites or now within win-10 os.

A lot of older machines will not be getting a bios update
MS will probably be issuing updates to patch the os where there is little to no action one needs to do other than install windows updates.

Win-10 is so generic looking bad guys and gals love it so assume every popup message that looks like an MS message is malicious when asking for your personal details/ payments.... *Smile

 

Well thanks to all for your added responses.
If something goes wrong, then I will have to disable Secure Boot.
No big deal.

 

Hi,
Nobody that I've noticed has said secure boot needs to be disabled *Smile
Optimize defaults whatever that does is what should be done before flashing bios you'll read that on all bios instructions posted by mother board manufactures.