Can secure boot be disabled? UEFI with "Secure Boot": Secure PC Boot. Function activity check

As can be understood from the translation of secure boot, it means secure boot. This protocol began to be used in the UEFI BIOS and its main purpose is to protect the computer or laptop on which it is installed from unauthorized interventions, such as hacking, changing boot records, installing unlicensed software. You will learn more about secure boot in this article.

What is secure boot?

Secure boot is a secure boot protocol that checks the signatures of the system's boot code against special keys embedded in the BIOS each time the system boots. If any inconsistencies are found, the download is terminated with an appropriate message.

Message about finding inconsistencies with the secure boot option

That is why, with the Secure Boot option enabled, it is impossible to reinstall the operating system installed in the laptop by default.

Only by disabling secure boot can you reinstall Windows.

How to know if Secure boot is enabled from Windows OS without entering BIOS?

If you want to know if your operating system is loaded in protected mode, then you can do this as follows.

Open the window " Run by holding down the WIN+R key combination.

Calling up system information

In it, type msinfo32 and and press " OK«.

After that, the window " System Information", where in the line " Secure Boot Status"The status of the secure boot option will be displayed - (supported - means enabled, not supported - means disabled).

Bought Asus laptop, wanted to boot from boot disk to reinstall Windows 8, on Windows 7, I can’t boot from the disk, what should I do?

You need to disable the so-called mode - secure boot

We just find the image with our BIOS and see how UEFI is disabled in it.

secure boot- This protective function, created in 2012 by Microsoft resulting in a non-deliverable priority BIOS boot on CD / DVD disc, which means you can't boot the drive, and you can't prioritize booting to USB, whether it's a USB flash drive or an external hard drive. Access I.e. completely closed, but you can disable this protection provided.

Depending on the way to disable manufacturers may differ from those described here, but in general, the essence remains the same. The main thing to understand is that the purpose of Secure Boot is official keys that the user must purchase at his own expense. Here are the 3 most common BIOSes (and instructions on how to disable UEFI):

In older BIOS versions, disabling Secure Boot was pretty easy:

In new BIOS versions, Secure Boot is disabled much more difficult. We just find our image (or images) and look at them as this very Secure Boot is turned off.

2nd option:

Select Security Boot Parameters

For OS type, choose Windows 8 UEFI. (Even if you want to install another OS)

Click on Manage Keys

Select the Provisioning default key to Disable.

Then, click on secure key boot to remove all old keys

Then insert your boot disk or flash drive

Third option:

Red window appears, press F10 (Accept)

Then start from the bottom:

Overship key select custom

Existing Support Select Enabled

then see the boot order (if necessary, disable UEFI boot sources operating system pressing F5) and save the settings

A little explanation:

1) Removing Windows 8 s hard drive does not affect Secure Boot, since this feature is built into the BIOS, as well as the BIOS on the motherboard. Thus, even if you are command line commands through DiskPart, list disks and clear delete all partitions then end up on startup only see this message here:

2) Make sure to switch to key custom control keys, otherwise the result will see a message like (pressing the combination of the listed 2948 + Enter will not help you in response to the reaction you will not see):

UEFI or secure boot- This is a standard BIOS protection that limits the ability to run USB media as a boot drive. This security protocol can be found on computers running Windows 8 and newer. Its essence is to prevent the user from booting from the installer of Windows 7 and below (or an operating system from another family).

This feature can be useful for the corporate segment, as it helps prevent unauthorized booting of the computer from unauthorized media that may contain various malware and spyware.

For ordinary PC users, this feature is useless, on the contrary, in some cases it can even interfere, for example, if you want to install Linux along with Windows. Also, due to problems with the UEFI settings, an error message may pop up while working in the operating system.

To find out if you have this protection, it is not necessary to go to the BIOS and look for information about this, just take a few simple steps without leaving Windows:

Depending on the motherboard manufacturer, the process for disabling this feature may look different. Consider options for the most popular manufacturers motherboards and computers.

Method 1: For ASUS

Method 2: For HP

Method 3: For Toshiba and Lenovo

Here, after entering the BIOS, you need to select the partition security. There should be an option "Secure Boot", against which you want to set the value Disable.

Method 4: For Acer

If everything was relatively simple with previous manufacturers, then the initially required parameter will not be available for making changes. To unlock it, you will need to put a password on the BIOS. You can do this with the following instructions:

Good day.

Quite often, many users ask questions about Secure Boot (for example, this option sometimes needs to be disabled when Windows installation). If not disabled, this security feature (developed by Microsoft in 2012) will check and look for special keys that are available only for Windows 8 (and higher). Accordingly, you will not be able to boot a laptop from any media ...

In this short article, I want to look at several popular brands of laptops (Acer, Asus, Dell, HP) and show how to disable Secure Boot with an example.

Important note! To disable Secure Boot, you need to go into the BIOS - and for this you need to press the appropriate buttons immediately after turning on the laptop. One of my articles is devoted to this issue -. It lists buttons for different manufacturers and details how to enter the BIOS. Therefore, in this article I will not dwell on this issue ...

Acer

(Screenshots from laptop BIOS Aspire V3-111P)

After entering the BIOS, you need to open the "BOOT" tab and see if the "Secure Boot" tab is active. Most likely, it will be inactive and cannot be changed. This is due to the fact that the administrator password is not set in the BIOS section "Security".

To install it, you should open this section and select the item " Set Supervisor Password"And press Enter.

Actually, after that you can open the section " Boot"- the tab" Secure Boot"Will be active and it can be switched to Disabled (i.e. turn off, see screenshot below).

After rebooting the laptop, it should boot from any* bootable device (for example, from a USB flash drive with Windows 7).

Asus

Some Asus laptop models (especially new ones) sometimes confuse novice users. In fact, how can you disable secure boot in them?

1. First, go to the BIOS and open the section "Security". At the very bottom there will be an item " Secure Boot Control" - you need to switch it to disabled, i.e. switch off.

2. After the reboot, enter the BIOS again and then in the "Boot" section, do the following:

Fast Boot - switch to Disabled mode (i.e. turn off fast boot. The tab is not everywhere! If you don’t have it, then just skip this recommendation);
Launch CSM - switch to Enabled mode (i.e. enable support and compatibility with "old" OS and software);
Then press again F10- save the settings and restart the laptop.

3. After the reboot, we enter the BIOS and open the " Boot" - in the "Boot Option" item, you can select the bootable media that is connected to USB port(For example). Screenshot below.

Then save BIOS settings and restart the laptop (F10 button).

Dell

(Screenshots from Dell Inspiron 15 3000 Series laptop)

In Dell laptops, disabling Secure Boot is probably one of the easiest - one entry into Bios is enough and no administrator passwords, etc. are needed.

After entering the BIOS - open the "Boot" section and set the following parameters:

Boot List Option - Legacy (this includes support for older operating systems, i.e. compatibility);
Security Boot - disabled (disable secure boot).

Actually, then you can edit the download queue. Most install a new Windows OS with bootable USB flash drives - so below is a screenshot of which line you need to move to the very top so that you can boot from a flash drive ( USB Storage Device).

After entering the settings, press the button F10- this will save the entered settings, and then the button Esc- thanks to it, you exit the BIOS and restart the laptop. Actually, this is the end of disabling secure boot on a Dell laptop!

HP

After entering the BIOS, open the section " System configuration", And then go to the tab" Boot Option"(See screenshot below).

After the reboot, the text "A change to the operating system secure boot mode is pending ..." will appear.

We are warned about the changes made to the settings and offered to confirm them with a code. You just need to enter the code shown on the screen and press Enter.

After this change, the laptop will reboot, and secure boot will be disabled.

To boot from a USB flash drive or disk: when you turn on your HP laptop, press ESC, and select “F9 Boot Device Options” from the start menu, then you can select the device you want to boot from.

In principle, in laptops of other brands, turning off secure boot proceeds in the same way, there are no significant differences. The only point: on some models, entering the BIOS is “complicated” (for example, in laptops Lenovo- you can read about it in this article :). On the sim round off, all the best!

If you decide to install another operating system, but the system does not see the bootable USB flash drive, but you set the boot priorities correctly, you may need to disable Secute Boot.

In this article, we will look at how to disable Secure Boot in Windows 10 and why BIOS does not see a bootable USB flash drive, since these two issues may be related. And we will also find out what to do if, when loading your operating system, you see on the desktop the inscription secure boot is configured incorrectly.

Secure Boot is a feature that allows or disallows the installation of other operating systems.

If you ask what is Secure Boot, then we can say that this option blocks the loading of boot disks and flash drives. Therefore, in order to install another operating system, you must disable Secure Boot, if it is enabled.

To check if the Secure Boot feature is enabled, you can use the command in the operating Windows system 10.

Why BIOS does not see a bootable USB flash drive

First you need to correctly create a bootable USB flash drive, for this we recommend that you read the article. After you have correctly created a bootable flash drive, you need to disable Secure Boot in BIOS and set the boot priority of the flash drive to your hard drive.

In general, as you might guess, if the BIOS does not see the bootable USB flash drive, you should disable the Secure Boot option. Because it allows the given bootloader authentication.

The Secure Boot setting can be found in the BIOS and UEFI along the path:

Boot Security
System Configuration

And also you need to enable boot mode in Legacy OS or CMS OS compatibility mode.

How to disable Secure Boot in Windows 10

It doesn't matter what operating system you have, either Windows 10 or Windows 8, the Secure Boot setting itself is in the BIOS or UEFI.

Therefore, we will have to go into the BIOS first. And then the location of the Secure Boot setting depends on the BIOS version. We will look at several possible locations for the Secute Boot option in laptops from different manufacturers.

Secure Boot on HP Notebooks

We go into the BIOS, at boot press Esc or key F10.
Go to bookmark System Configuration and to the section Boot Options.
In this section, we are looking for the parameter secure Boot and set its value Disabled.
A parameter Legacy support install on Enabled, which is responsible for compatibility with other operating systems.

Secure Boot on Samsung laptops

We go into the BIOS by pressing at boot F2.
Go to tab Boot and there we are already looking for a function secure boot.
To disable it, change the value Enabled on disabled.
Further, perhaps after a reboot, the OS Mode Selection parameter will appear, the value of which we need to set CMS OS or UEFI and LegacyOS.

Secure Boot on Lenovo and Toshiba laptops

Open the BIOS by clicking F2 while loading.
Go to tab security and vice versa secure boot set value disabled.
Further Advanced => System Configuration and select the option boot mode or OS Mode Selection the value to be set CSM Boot or UEFI and Legacy OS.

Secure Boot on Dell Laptops

Finding an item Boot Then UEFI Boot.
Next we expose secure boot on the value disabled.

Secure Boot on Acer laptops

In the tab Main and finding the parameter F12 Boot Menu switch to enabled.
In the tab security set the password in paragraph Set Supervisor Password.
Further Authentication and parameter value secure boot change to disabled.
Additionally, set the value CSM or Legacy Mode instead of UEFI along the way Boot => BootMode.

Secure Boot on Asus laptops

If we talk about laptops from Asus, then turn off secure boot we will have to UEFI, or rather the tab Boot, further secure boot and in paragraph OS Type set value Other OS.
In some cases section security or Boot change the parameter value secure boot on disabled.

You can meet the error secure boot is configured incorrectly after upgrading from a previous version of the operating system, for example, to Windows 10.

In most cases, enabling Secure Boot helps. You need to do the opposite as we did above to enable it.

There is another way to help remove the inscription from the desktop. We examined it, but it will only remove the inscription, but it will not fix the problem itself.

If it didn't help for Windows users 8.1 Microsoft released a patch that will remove this inscription from the desktop and fix the problem.

conclusions

In this article, we looked at how to disable Secure Boot in Windows 10 and why BIOS does not see a bootable USB flash drive.

I hope this article will be useful for you and help you figure out how to set up Secure Boot. Write in the comments how you solved this issue.