How to Disable Secure Boot in Windows: Step-by-Step Guide

Secure Boot is a UEFI feature responsible for Windows boot security. It checks whether the bootloader, drivers, and system components can be trusted. Sometimes it needs to be temporarily disabled: for example, when configuring the system, installing certain drivers, working with non-standard software, or fixing boot errors. Below is a clear guide on how to check the status of Secure Boot, how to disable Secure Boot in BIOS on ASUS, Gigabyte, and MSI, and how to enable it again without unnecessary risks. ⚡

What Is Secure Boot and Why Disable It?

Secure Boot is a UEFI setting that controls the computer startup process before Windows loads. The feature checks the digital signatures of the bootloader, drivers, and important system files. If a component fails verification, the device may block it from launching.

The main purpose of Secure Boot is to improve system security and protect the computer from malicious bootloaders, rootkits, and unauthorized interference with the startup process. Under normal conditions, it is better to keep this feature enabled.

Disabling Secure Boot may be necessary if the system prevents you from installing a required driver, running technical software, using an alternative OS, or changing boot parameters. Before changing the settings, it is important to understand how to restore everything back.

How the Security Mode Works and Why It Blocks Third-Party Software

When you turn on the computer, UEFI takes control before Windows starts. At this stage, Secure Boot checks whether the bootloader and drivers are included in the trusted list. If there is no signature or it does not match the keys, the system blocks the component from launching.

This is why Secure Boot issues may appear when working with some private programs, technical utilities, testing drivers, and tools that require low-level access to the system. In such cases, Secure Boot configuration may be needed for the required software to launch correctly.

Important: disabling Secure Boot is not a universal fix for all errors. If a program does not start, first check Windows compatibility, the availability of signed drivers, and the developer’s requirements.

Requirements of Modern Anti-Cheats and Games

With game anti-cheats, the situation may be the opposite. Some protection systems require Secure Boot to be enabled. This is especially common on Windows 11, where TPM, UEFI, and the current security status may also be checked.

How to Check the Current Secure Boot Status in Windows

Before changing BIOS parameters, you should check the current Secure Boot status. This can be done without restarting the computer using built-in Windows tools.

Checking via msinfo32 and System Information

1. Press Win + R.

2. Enter the command msinfo32.

3. Press Enter.

4. In the “System Information” window, find the “Secure Boot State” field.

5. Also check the “BIOS Mode” line.

If the field shows Enabled, the feature is active. If it shows Disabled, Secure Boot is already turned off. If it says “Unsupported,” the system may be running in Legacy mode instead of UEFI.

How to Disable Secure Boot in BIOS: Step-by-Step Guide

If you need to understand how to disable Secure Boot in BIOS, first enter the BIOS or UEFI interface. Section names differ depending on the manufacturer, but the logic is almost always the same: open Boot or Security, find Secure Boot, and switch the parameter to Disabled.

Entering the BIOS/UEFI Interface on Different Devices

To enter BIOS, restart the computer and press the required key immediately after powering it on. The most common keys are Delete, F2, F10, F12, or Esc.

• ASUS: usually Delete or F2.

• Gigabyte: most often Delete.

• MSI: usually Delete.

• HP: often Esc, then F10.

• Lenovo: often F2, Fn + F2, or a separate Novo button.

Some interfaces require switching to Advanced Mode. On ASUS, this is often done with the F7 key. In English BIOS interfaces, you may see commands such as press, select, enter, and save.

ASUS

If you need to figure out how to turn off Secure Boot in ASUS BIOS, follow this order:

1. During computer startup, press Delete or F2.

2. Switch to Advanced Mode if the simplified interface is open.

3. Open the Boot tab.

4. Find the Secure Boot section.

5. Select Secure Boot Control.

6. Set the parameter to Disabled.

7. Press F10 and save the settings.

GIGABYTE

To understand how to turn off Secure Boot in Gigabyte BIOS, follow these steps:

1. Restart the computer and press Delete.

2. Go to the BIOS Features or Boot section.

3. Find the Secure Boot item.

4. If the option is unavailable, disable CSM Support first.

5. Select Disabled.

6. Save the parameters via Save & Exit.

MSI

On MSI motherboards, the order is usually as follows:

1. Press Delete during system startup.

2. Open Settings.

3. Go to the Security section.

4. Select Secure Boot.

5. Change the feature status to Disabled.

6. Save the settings and restart the device.

Universal Method

If the manufacturer is different, such as HP, Acer, Lenovo, or Dell, use the general algorithm:

1. Enter BIOS or UEFI.

2. Find the Boot, Security, Authentication, or System Configuration section.

3. Find the Secure Boot item.

4. Select Disabled.

5. Save the settings with F10 or Save & Exit.

This is how to disable Secure Boot in BIOS if the menu differs from popular ASUS, Gigabyte, or MSI interfaces.

Disabling the Feature in the Boot or Security Section

In most cases, the parameter is located in the Boot or Security section. Sometimes you also need to change OS Type to Other OS or disable CSM. On some motherboards, Secure Boot management becomes available only after restoring or deleting keys.

https://www.youtube.com/watch?v=W8WT3QgYx5Y

How to Enable Secure Boot Again

After finishing system configuration, you may need to enable Secure Boot again. This is especially important if you run official games with modern anti-cheats or want to restore the standard Windows protection level.

Required System Preparation: Disabling CSM and Selecting UEFI Mode

Before enabling Secure Boot, check three conditions:

• the system must boot in UEFI mode;

• CSM must be disabled;

• the system disk must use GPT, not MBR.

If you are learning how to disable Secure Boot in UEFI, remember the reverse principle as well: proper enabling requires pure UEFI mode without Legacy boot.

After changing the mode, do not forget to save the parameters. If Windows was previously installed in Legacy mode, simply switching to UEFI may cause a boot error.

Activating Encryption Keys

Sometimes the enable option remains greyed out, and the Enabled value cannot be selected. The most common reason is missing Secure Boot keys.

1. Open the Secure Boot section.

2. Go to Key Management.

3. Find Restore Factory Keys.

4. Confirm restoring the factory keys.

5. Save the settings and restart the system.

Converting a Disk from MBR to GPT Before Changing BIOS Settings

If Windows is installed in Legacy mode and the disk is partitioned as MBR, Secure Boot may be unavailable. Full UEFI operation often requires GPT. Windows includes the built-in mbr2gpt utility, which allows conversion without a clean reinstall.

Using the mbr2gpt Utility

Before starting, back up important files. Although the tool is designed to preserve data, any operation with the system disk requires caution.

1. Open Command Prompt as administrator.

2. Run disk validation.

mbr2gpt /validate /allowFullOS

If validation succeeds, start the conversion:

mbr2gpt /convert /allowFullOS

After completion:

• restart the computer;

• enter BIOS;

• switch the boot mode to UEFI;

• disable CSM;

• enable Secure Boot if needed.

Common Errors and Issues — FAQ

Secure Boot issues most often appear because of a mismatch between boot mode, disk partition style, and BIOS parameters. Below are the most common situations and ways to fix them.

Black Screen or Constant BIOS Launch

If a black screen appears after changing parameters or the computer constantly opens BIOS instead of Windows, check the boot mode.

• Restore the previous UEFI or Legacy mode.

• Check the boot order in Boot Priority.

• Make sure the system disk is visible in BIOS.

• Use Load Optimized Defaults to reset the parameters.

• If you changed CSM, try temporarily restoring the previous value.

Most often, this error happens when Windows is installed in Legacy mode and the user abruptly switches the device to UEFI without preparing the disk.

“Secure Boot Can Be Enabled When System in User Mode” Error

This error usually means the system is not in the required Secure Boot user mode or the BIOS does not have the correct keys.

What to do:

1. Open the Secure Boot section.

2. Go to Key Management.

3. Select Restore Factory Keys.

4. Save the parameters.

5. Restart the computer.

https://youtu.be/DTaRBysKjjY?si=mJVHQMY2_VgwFrwN

Key Takeaways on Working with Secure Boot

Secure Boot improves Windows security and controls component startup before the system loads. Disable the feature only when it is truly needed: for system configuration, working with certain drivers, restoring boot, or launching compatible technical software.

Before making changes, always check the status via msinfo32, review the Secure Boot state, BIOS mode, and disk partition style. If the system is running in Legacy mode, deal with UEFI and GPT first, and only then change Secure Boot parameters.

• To disable it, look for Secure Boot in the Boot, Security, or Authentication sections.

• On ASUS, the path is often Boot → Secure Boot.

• On Gigabyte, the BIOS Features section is often needed.

• On MSI, the path usually goes through Settings → Security.

• To enable it again, check UEFI, CSM, and Restore Factory Keys.

Save this guide before changing BIOS: it will help you quickly check Secure Boot status, safely adjust the parameters, and return the computer to working condition if errors appear after configuration. ✅