Windows 10: Secure boot enabled in BIOS, but PC Check disagrees

Hello,My question is similar to https://answers.microsoft.com/en-us/windows/forum/all/pc-health-check-says-secure-boot-not-active-but-it/48d73249-5fb7-4d01-a9bf-02dad7a2debaI want to upgrade from Win 10 to Win 11.I have Secure Boot enabled in BIOS, but when I run PC Health Check it said that "This PC must support Secure Boot".System info is here: https://i.ibb.co/cSybrZzQ/Screenshot-2025-02-14-224308.jpgWhy Not Win info is here : https://i.ibb.co/P83Wf9c/Screenshot-2025-02-14-224732.jpgThanks Nick Price

:)

 

Enable Secure Boot B550M DS3H AC

Hello Jose Luis Beltran Adame

Welcome to the Microsoft Community.

Can you tell me your motherboard model? Click Search on the taskbar and enter Device Manager.

To enable Secure Boot on your Gigabyte B550M DS3H AC motherboard, follow these steps:

1. Enter BIOS Setup:
   
   Restart your computer and press the Del key (or the key specified for your motherboard) repeatedly as soon as the system starts to boot, to enter the BIOS setup.
   
2. Navigate to the Boot Menu:
   
   Once in the BIOS, use the arrow keys to navigate. Look for a tab or section named Boot, Security, or something similar.
   
3. Enable Secure Boot:
   
   1. Inside the Boot or Security menu, find the Secure Boot option. It might be under a submenu, often labeled as Windows OS Configuration, Boot Mode Selection, or similar.
      
   2. Change the Secure Boot setting from Disabled to Enabled.
      
4. Change Boot Mode if Necessary:
   
   Make sure that the Boot Mode is set to UEFI and not Legacy or CSM (Compatibility Support Module). Secure Boot requires UEFI mode to be enabled.
   
5. Save and Exit:
   
   Save the changes and exit the BIOS. This is usually done by pressing the F10 key and selecting Yes to save the configuration and restart the computer.
   

This is the official detailed documentation:

Enable Secure Boot on Windows devices - Microsoft Intune | Microsoft Learn

If you cannot find the Secure Boot option, ensure that you have the latest firmware/BIOS version for your motherboard. Manufacturers sometimes update the BIOS to improve compatibility and add new features. You can check Gigabyte's official website for the latest BIOS version and instructions on how to update it.

In case the Secure Boot option still doesn't appear, it might be hidden or disabled due to another setting in the BIOS, such as a legacy boot mode or CSM compatibility mode being enabled. Make sure these are set correctly or disabled to allow Secure Boot to be enabled.

If you continue to face difficulties, consulting the motherboard's manual can provide more specific guidance, or contacting Gigabyte's support for assistance might be necessary.

Disclaimer: Please back up important data in advance before performing any actions that may cause data loss.

If there is anything not clear or I can't understand your problem, please do not hesitate to let me know.

Best Regards

| Microsoft Community Support Specialist

 

enable secure boot

Hi ShowMeGirl1

To enable Secure Boot, your PC must have UEFI BIOS and you need to boot your PC into BIOS

Start your PC, on the manufacturers logo screen, there is generally an indication of how to boot your PC into Setup - usually it is F2, or F12 . .

On the Manufacturers Screen, repeatedly press that appropriate key, so your system boots into BIOS

If you do have UEFI, you will see the Secure Boot and legacy Boot options, turn off Legacy Boot (if applicable) and turn on Secure Boot

Also Please Note: to enable Secure Boot, your hard drive must be GPT, not MBR!

 

UEFI bios enabled but no secure boot on windows 10?


I would go with what is showing in the Bios. If it says that the secure boot keys are loaded then it is on. I'm running the insider build and under System info it says secure boot is unsupported, but it is on and the keys are loaded in my UEFI BIOS. I think this is what the OP is saying. The only other thing that came to mind is if bitlocker was confused with secure boot, they are totally different. To check system info WIN + R type msinfo32 , hit OK.

This is a partial listing.