Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
Secure Boot is disabled in your computer’s UEFI/BIOS firmware, not from a normal Windows switch. In Windows 11 or 10, open Settings > System > Recovery > Advanced startup > Restart now, then choose Troubleshoot > Advanced options > UEFI Firmware Settings > Restart. In firmware, locate Secure Boot under a menu such as Security, Boot or Authentication, set it to Disabled, save, and reboot. Have your BitLocker recovery key ready first: changing firmware settings can trigger a recovery prompt.
What does Secure Boot do, and why would you turn it off?
Secure Boot is a UEFI security feature that permits boot software only when it is trusted or digitally signed by the device manufacturer’s certificate chain. Microsoft describes it as a way to ensure that a PC starts with firmware the manufacturer trusts. This helps block boot-level malware, but it can also prevent an older operating system, some Linux distributions, certain graphics hardware, or other incompatible boot software from starting.
As an Amazon Associate I earn from qualifying purchases.
Disabling Secure Boot is therefore usually a compatibility step, not a performance tweak. It does not make games run faster, add graphics features, or increase Windows memory. Microsoft recommends enabling it again as soon as the incompatible installation or test is complete.
The exact labels and locations depend on the motherboard or laptop model. Microsoft’s general instructions apply across Windows editions, while the firmware screen itself is supplied by the computer manufacturer.
Popular on Amazon
- Spacious Design: Measuring 21.1" wide and 14.1" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy ergonomic support with the integrated cushioned wrist rest.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a sleek black carbon color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.8 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
How do I disable Secure Boot from Windows 11 or Windows 10?
The Windows Recovery route is the most consistent method because it reboots directly into your machine’s UEFI setup. Save open work before starting.
- Open recovery settings. In Windows 11, select Start > Settings > System > Recovery. In Windows 10, select Start > Settings > Update & Security > Recovery.
- Enter Advanced startup. Under Advanced startup, select Restart now. Windows will reboot to a blue options screen.
- Open the firmware menu. Choose Troubleshoot > Advanced options > UEFI Firmware Settings > Restart. If UEFI Firmware Settings is absent, the computer may be configured for legacy BIOS, the firmware may not expose the option to Windows, or the manufacturer may require a startup key.
- Find Secure Boot. Search the firmware tabs named Security, Boot, Authentication, or a similarly named section. Some systems hide advanced controls until you switch from a simplified view to an advanced mode.
- Change the setting. Select Secure Boot or Secure Boot Control, change it to Disabled, and confirm any warning.
- Save and restart. Choose Save Changes and Exit, or use the firmware’s displayed save shortcut. The computer should boot back into Windows.
Do not confuse Secure Boot with Fast Boot, TPM, or a supervisor-password setting. Changing the wrong item can alter startup behavior without solving the compatibility problem.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsCan I open UEFI with a startup key instead?
Yes. Many computers open firmware setup when you repeatedly press a key immediately after powering on or restarting. Common keys include F1, F2, F12, and Esc, but there is no universal key.
- Shut down completely, then power on and begin tapping the manufacturer’s setup key.
- Use the on-screen prompt, if one appears, such as “Setup,” “BIOS,” or “UEFI.”
- If Windows starts normally, restart and try again with a different key listed in the computer’s manual.
Microsoft notes that the route varies by manufacturer. If Secure Boot is missing or locked, consult the support page for the exact model rather than guessing at unrelated firmware options.
What are the firmware menus on an ASUS computer?
ASUS documentation dated June 4, 2026 illustrates why model-specific instructions matter. The following paths are examples, not a universal ASUS procedure.
Also popular on Amazon
- 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
- Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
- Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
- HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
- What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.
| Device category in the ASUS example | Firmware path | Save action |
|---|---|---|
| Many notebooks, all-in-ones, and handhelds | Enter BIOS, switch to Advanced Mode, open Security > Secure Boot > Secure Boot Control, then choose Disable. | Press F10 and confirm. |
| Some desktop models | Open Boot > Secure Boot > OS Type, then choose Other OS. | Press F10 and confirm. |
Another model may use a different label, place the control under Boot, or require an administrator password. Treat the manufacturer’s page as authoritative for your model and firmware revision.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →What should I do about BitLocker before changing Secure Boot?
Prepare for a BitLocker recovery challenge before changing firmware. BitLocker can treat a UEFI or Secure Boot change as a possible boot-environment alteration. Microsoft’s support guidance says the recovery screen accepts a 48-digit recovery key; entering hyphens is optional.
Find and save the recovery key
- From another device, sign in to the Microsoft account associated with the encrypted PC and locate its BitLocker recovery keys.
- Check any printed copy, USB backup, company-management portal, or password-management record your organization uses.
- Match the key’s identifier shown on the recovery screen to the saved key before entering it.
If the key cannot be found, do not proceed casually. Firmware changes can leave you unable to unlock the Windows volume, and reinstalling Windows would erase data.
Should you suspend BitLocker?
Microsoft’s BitLocker documentation distinguishes suspending protection from decrypting the drive. Suspension leaves the data encrypted but temporarily avoids a recovery challenge during an applicable firmware or boot-component update. Decryption removes BitLocker protection and can take a long time; it is not necessary merely to change Secure Boot in every configuration.
Follow your device manufacturer’s current guidance for whether to suspend protection before the change. ASUS specifically warns that altering BIOS settings on an encrypted drive may require the recovery key. If Windows asks for the key afterward, enter it rather than repeatedly restarting.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Also popular on Amazon
- Note: Not suitable for MacBooks released after 2023 or devices with a protruding front camera; Not applicable to full-screen or notch-style tempered glass screen protectors; Do not use on the rear camera of the phone.
- 💻 Why Do You Need a Webcam Cover Slide? — Safeguard your privacy by covering your webcam with our reliable webcam cover when not in use. Don't let anyone secretly watch you. Stay protected!
- ✅ Thin & Stylish — Enhance your laptop's functionality and aesthetics with our 0.027" ultra-thin webcam covers. Seamlessly close your laptop while adding a touch of sophistication.
- ✅ Fits Most Devices — Compatible with laptops, phones, tablets, desktops! Keep your privacy intact on Ap/ple, Mac/Book, iPh/one, iP/ad, H/P, L/novo, De/ll, Ac/er, As/us, Sa/msung devices.
- ✅ 365 Days Protection — Our upgraded 3.0 adhesive ensures a strong hold that won't damage your equipment. Experience reliable, long-term privacy protection day in and day out.
What if Secure Boot is greyed out or cannot be changed?
A disabled-looking control usually indicates a firmware prerequisite, not a Windows fault. Check these possibilities in order:
- Administrator or supervisor password: Some firmware requires a setup password before security settings become editable. Set or enter one only if the manufacturer documents the process, and record it securely.
- Standard versus advanced view: Switch to the firmware’s advanced interface; the control may be hidden in an easy mode.
- Legacy boot configuration: Secure Boot generally belongs to UEFI mode. A system configured for legacy compatibility may need a different boot mode, but changing it without checking the disk layout can make Windows unbootable.
- Managed hardware: A work or school administrator may enforce the setting. Contact the organization instead of bypassing management controls.
- Outdated firmware: Read the model’s support notes before updating UEFI. A firmware update has its own power-loss and recovery risks.
Never clear Secure Boot keys or choose an option such as “reset to setup mode” simply because the normal Disable control is unavailable. Those operations change the trust database and can prevent signed boot software from loading.
Do I need to change CSM, GPT, or MBR as well?
Not for a routine temporary Secure Boot change. CSM (Compatibility Support Module) is a separate legacy-boot compatibility feature. UEFI installations normally use a GPT disk, while legacy BIOS compatibility normally uses MBR.
| Boot arrangement | Typical partition style | Main risk when switching |
|---|---|---|
| UEFI | GPT | Changing to legacy mode can make an existing Windows installation fail to boot. |
| Legacy BIOS or CSM | MBR | Some older systems or operating systems require it, but modern Windows setup may require conversion or reinstallation. |
Microsoft notes that enabling CSM can require an MBR disk and a Windows reinstall. Reformatting or converting a disk can erase data, so make a verified backup and follow the manufacturer’s instructions before altering partition style. Do not enable CSM merely because Secure Boot is disabled; use it only when the operating system or hardware specifically requires legacy boot.
When is a Windows installation USB drive useful?
A bootable Windows installation USB flash drive is useful when you are reinstalling Windows, repairing startup, or installing another operating system that needs physical installation media. Microsoft’s setup instructions call for booting the installation USB or DVD in UEFI mode when using a UEFI installation.
Also popular on Amazon
- Anti-Slip Surface - Transform your laptop into a mobile workstation with the AboveTEK portable laptop lap desk. The anti-slip surface provides a strong grip for laptops up to 15.6 inches(Diagonal), while the double rubber strip on the bottom ensures a stable display or typing experience on your lap, couch, or bed.
- Retractable Mouse Pad - Retractable laptop mouse pad extends on both directions for the left/right handed with elevation along the edges for stopping mouse from falling off. The size of laptop tray is 14" X 9.7" and the size of mouse pad is 7.4" X 6.1".
- Effective Heat Shield - The effective heat shield made of sturdy and thick material protects your laptop from overheating. Prioritizes your comfort and safety, an ideal lap pad or board for working anywhere.
- EASY to Carry and Store - With an ergonomic and simplistic design, the lap desk is portable to store in a backpack. Only 15" in size, 2.2 lb of weight and with slim 0.6 inch thickness, it is ready to be easily carried around.
- Widely Applicable - The smooth platform accommodates laptops and tablets up to 15.6 inches(Diagonal), making it a versatile accessory and one of the best gifts for mom, dad, students and professionals. Perfect for use as a laptop bed tray or tablet holder anywhere at home, library, or park.
The drive is not required just to flip Secure Boot off through firmware. If the only task is changing the setting, use Windows Recovery or the manufacturer’s startup key. If you do create installation media, select the UEFI entry for the USB in the boot menu and back up personal files first; choosing the wrong installer or partition can overwrite the internal drive.
How do I restore Secure Boot after the task?
- Restart into UEFI using Settings > System > Recovery > Advanced startup > Restart now, or the model’s startup key.
- Return to the same Security, Boot, or Authentication page.
- Set Secure Boot or Secure Boot Control to Enabled. On firmware that uses an operating-system profile, choose the Windows or standard profile rather than Other OS.
- Save and exit, then verify that Windows starts normally.
If you changed CSM or the boot mode for a legacy installation, restore the previous mode only after confirming which operating system you need to start. Restoring Secure Boot while leaving a legacy-only boot configuration can prevent that installation from loading.
What should I do if Windows will not start afterward?
First, return to firmware and restore the exact setting you changed. If BitLocker appears, enter the matching 48-digit recovery key. If the machine still does not boot, avoid deleting partitions or clearing Secure Boot keys.
Recommended Free Tools
- Check that the Windows Boot Manager remains first in the boot order.
- Undo any CSM, Legacy, or UEFI-mode change unless the installation was deliberately converted.
- Disconnect nonessential USB drives that may have become the first boot device.
- Use Windows installation media to reach Repair your computer only after firmware settings are back to their prior state.
- Contact the manufacturer when the firmware reports invalid keys, corrupted boot entries, or a model-specific error.
Repeated recovery prompts after every restart usually indicate that protection was not properly resumed, firmware measurements changed again, or the wrong recovery key was entered. Record the exact screen message before making another change.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Does the 2026 Secure Boot certificate change affect this decision?
Secure Boot certificates issued in 2011 begin expiring in June 2026, according to Microsoft’s 2025 guidance. Supported Windows systems generally receive replacement certificates through Windows Update. Microsoft advises people who already have Secure Boot disabled to check their manufacturer’s guidance before changing firmware, because certificate enrollment and firmware behavior vary by device.
Also popular on Amazon
- Spacious Design: Measuring 21.1" wide and 12" deep, our lap desk comfortably fits most laptops up to 15.6". Extra room for accessories ensures convenience.
- Enhanced Functionality: Packed with handy features, including a 5x9" precision tracking mouse pad and a built-in phone slot for seamless work or video calls. Plus, enjoy laptop support with the integrated device ledge.
- Cool Comfort: Enjoy a stable surface with our lap desk's dual bolster cushion, designed for comfort and airflow, keeping your lap cool during extended use.
- Durable Surface: Work with confidence on our lap desk's solid surface, featuring a blush pink color, ensuring optimal air circulation to prevent your laptop from overheating.
- On-the-Go Convenience: With an integrated handle and lightweight design (2.14 lbs), our lap desk is portable for travel or moving around the house, offering flexibility in any space.
This certificate transition is different from manually disabling Secure Boot. Do not turn the feature off as a workaround for an update unless the manufacturer or Microsoft specifically directs you to do so. After compatibility work is complete, re-enable Secure Boot so the system can use the intended trust chain.
Does Windows 10’s end of support change the steps?
Windows 10 support ended on October 14, 2025, according to Microsoft’s 2025 notice. The firmware procedure itself is still controlled by the computer, not by that support date. However, an unsupported Windows 10 installation receives fewer security protections, so disabling Secure Boot on it carries more exposure than it did while the operating system was supported.
If you are reinstalling an operating system, confirm that the edition and hardware requirements are appropriate before changing boot mode. Keep the original firmware setting documented so you can restore it if the installation fails.
Which approach should you choose?
| Situation | Preferred approach | Why |
|---|---|---|
| Windows 11 or 10 starts normally and you need a temporary change | Windows Recovery route | It opens UEFI without guessing the startup key. |
| You cannot reach Windows | Manufacturer startup key | Firmware can be opened before the operating system loads. |
| You are installing from USB or DVD | Keep UEFI mode unless the installer explicitly requires legacy mode | UEFI installations normally use GPT and preserve modern boot security. |
| The drive is BitLocker-protected | Locate the recovery key and follow the manufacturer’s suspension guidance first | A firmware measurement change can trigger recovery. |
| The option is missing or locked | Use model-specific manufacturer documentation or support | Menu names, passwords, and policy restrictions differ by device. |
The safest pattern is temporary disablement, no unnecessary CSM or partition changes, a saved BitLocker key, and immediate re-enablement when the incompatible task is finished.
Frequently Asked Questions
How can I check whether Secure Boot is currently enabled?
Press Windows + R, type msinfo32, and press Enter. In System Information, read the Secure Boot State entry; it reports whether the firmware currently presents Secure Boot as on or off.
Will disabling Secure Boot delete my games or Windows files?
Changing the firmware toggle does not itself format a drive or remove installed files. Data loss becomes a risk only if you also reformat, convert partition styles, reinstall an operating system, or choose a destructive recovery option.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Can I disable Secure Boot without entering Windows first?
Yes. Use the computer’s firmware startup key during power-on, then open the Secure Boot menu directly. The correct key is model-specific, so use the prompt or the manufacturer’s manual rather than relying on a universal shortcut.
Why does my PC ask for BitLocker recovery after every firmware change?
BitLocker records boot-environment measurements, so repeated changes can continue to invalidate the previously trusted state. Restore the intended firmware configuration, enter the matching recovery key, and follow Microsoft’s or the manufacturer’s instructions for suspending and resuming protection during approved updates.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
