Secure Boot

Some features require Secure Boot to be disabled. Most systems fall into one of the two common cases below.

If you prefer a visual walkthrough, you can watch this video — but keep in mind that your BIOS layout may look different depending on your system.

https://www.youtube.com/watch?v=z0YJi8RJHK4&ab_channel=TechEmpty

---

✅ Most Common Methods

1. Directly Disable Secure Boot

• In your BIOS/UEFI, go to the Boot or Security tab.

• Find Secure Boot or Secure Boot Control.

• Set it to Disabled.

---

2. Clear Secure Boot Keys

• If there’s no direct disable option, go to Key Management or a similar section.

• Choose one of the following:

  • Clear Secure Boot Keys

  • Delete All Secure Boot Keys

  • Clear PK (Platform Key)

• After this, Secure Boot will usually be automatically disabled.

---

🔍 How to Check if Secure Boot Is Enabled

You can easily check whether Secure Boot is enabled without entering BIOS by using the System Information tool.

---

🧭 Steps:

1. Press Start and search for System Information

2. Open the System Information app

3. In the System Summary section (loaded by default), scroll down

4. Look for the row labeled “Secure Boot State”

If it says On, then Secure Boot is enabled. If it says Off, you're good to go.

---

🧭 Other Possible Variations (Less Common)

Some systems may behave differently depending on brand or firmware version:

• Secure Boot option is greyed out: You may need to set an Administrator/Supervisor password to unlock it.

• Secure Boot Mode / Custom Mode: On some boards (e.g., ASUS), you must set Secure Boot Mode to Custom to change keys or disable it.

• No Disable Option at All: Clearing the Platform Key (PK) via Key Management typically disables Secure Boot even when there's no toggle.

• Secure Boot Status is Enabled Even After Disabling: This is normal if the platform key is still installed. It will show as “Enabled” until keys are cleared.