Windows 10: UEFI with secure boot disabled

I ran a Belarc analysis and it showed a notification that the " UEFI with secure boot is disabled ".Is this a default setting or does it need to be enabled?I looked at the boot settings but was unable to figure out how to resolve this issue.I am not one who likes to guess at these things.I hope someone has a good idea about this.I will appreciate it very much.

:)

 

Questions reguarding clean installation of windows 10

You need to disable secure boot from UEFI settings.

UEFI Firmware Settings - Boot to from inside Windows 10
then see secure boot settings and disable.

 

“Your organisation used Windows Defender Application Control to block this app

Take a look at this link
https://www.technorms.com/45538/disable-enable-secure-boot-asus-motherboard-uefi-bios-utility

 

It is not essential to enable it but you increase risk of malware hijacking pc. Windows 7 cannot be installed in uefi mode if enabled if secure boot is on.

However, good idea to turn it on.

 

I appreciate the reply but i am confused by the bios settings and not sure how to enable it.

 

Will someone please tell me the details of how to enable the UEFI secure boot?I will appreciate it very much.

 

How to Disable UEFI Secure Boot in Windows 10 64 bit and 32 bit - YouTube


One way. You can also boot directly into your BIOS by restarting and pressing F10. (maybe diff key on some systems ?)

 

Go there:

Settings/Updates & Security/Recovery/Advanced Startup/Restart/Troubleshoot/Advanced Options/UEFI Firmware Settings/Not the same for all machines (hardware vendor).

That will bring you to BIOS settings, for HP it is pretty easy in the Security Boot Configuration menu.

Legacy Support: Disable
Secure Boot: Enable
Key management: Don't Clear (set to Clear if disable/false)
Key Ownership: HP Keys
Fast Boot: Enable

Apply changes and exit. To confirm, open Powershell in admin mode and run:

Code: Confirm-SecureBootUEFI[/quote] False = disable
True = enable
or not supported or ressource not available.

Code: Windows PowerShell Copyright (C) 2016 Microsoft Corporation. All rights reserved. PS C:\Windows\system32> Confirm-SecureBootUEFI True PS C:\Windows\system32>[/quote]

 

Many thanks Mike for your reply.I am using Windows 10 Home/64 bit on a year old Lenovo 90ED desktop pc.Do you think the settings will be pretty much the same?Thanks again!!!

 

Hi.
Reading on the Lenovo site:
How to boot to Legacy device or system configured with Microsoft Windows 7 (32-bit or 64-bit) or Windows 8 (32-bit) - ThinkPad, ThinkCentre, ThinkStation, IdeaCentre

So my question would be, what have you done to the system, that has disabled Secure Boot?

EDIT: Perhaps you could just go into the BIOS and set it to defaults. But if you have installed a Legacy (MBR) version of W10, or upgraded a version of W7 to W10, you will not be able to boot the OS with Secure Boot turned on.

 

No, it won't!

You must find the parameter(s) combination that enables secure boot. You may want to try disabling legacy mode or BIOS mode in the boot menu first.

The given parameters in post # 6 are an indication, but Fast Boot can be set to Disable and it would also work (true). You must find the way KB If you keep on getting false in Powershell (Secure Boot is available and you may try reset to default). The owner manual of your laptop may also be helpful...

Edit: In system information under system summary, SMBIOS Version is 2.8.

 

I am using Windows 10 Home (x64) Build 14393.1066(RS1) which came on the computer about a year ago when it was new.I have not done anything to the system except look at the bios one time to my knowledge.I discovered this error a few days ago when i ran a Belarc analysis.I am getting a little confused by all this and since the computer seems to work ok i wonder how important this error is?I really would like to fix it if i can without causing worse problems.

 

This whole thing of secure boot is not part of your operating system. It is part of your motherboard, which hosts the BIOS.
Google for "secure boot" and the details of your particular motherboard model, and then you will get the specific instructions you need. Unfortunately, the BIOS is a little different with every motherboard, and it can be confusing if you don't have the right instructions.

 

I forgot to mention that if your computer is pretty old, then it might not even have secure boot at all.
The older models of motherboards have only the old-style BIOS, they don't have the UFI firmware.
In any case, don't sweat it, it is not a big deal either way.

 

Not supported:

Code: PS C:\Windows\system32> Confirm-SecureBootUEFI Confirm-SecureBootUEFI : Variable is currently undefined: 0xC0000100 At line:1 char:1 + Confirm-SecureBootUEFI + ~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : ResourceUnavailable: (Microsoft.Secur...BootUefiCommand:ConfirmSecureBootUefiCommand) [C onfirm-SecureBootUEFI], StatusException + FullyQualifiedErrorId : GetFWVarFailed,Microsoft.SecureBoot.Commands.ConfirmSecureBootUefiCommand PS C:\Windows\system32>[/quote]