Secure Boot is one of the most important security features in modern PCs. It’s designed to protect your computer from malware, rootkits, and unauthorized software that might try to load during startup. If you’re running Windows 11, Secure Boot is not just recommended — it’s often required to meet system compatibility standards.
But what if you need to enable or disable Secure Boot for specific reasons, like installing another operating system (Linux), running certain drivers, or troubleshooting boot issues?
In this detailed guide, we’ll cover everything you need to know about how to change Secure Boot state in Windows 11 — including what Secure Boot is, why you may want to change it, and step-by-step instructions to safely enable or disable it.
Key Takeaways (Quick Summary)
-
Secure Boot is a UEFI feature that helps protect your PC at startup.
-
You can check its status in System Information or with PowerShell.
-
To enable/disable Secure Boot, you need to access the UEFI/BIOS firmware settings.
-
Changing Secure Boot requires UEFI mode (not Legacy BIOS).
-
Always back up your data before making firmware-level changes.
What Is Secure Boot in Windows 11?
Secure Boot is a UEFI (Unified Extensible Firmware Interface) feature that ensures only trusted software (like Microsoft-certified bootloaders) runs when your computer starts. This prevents malicious programs from hijacking your system during boot.
Think of it like a security guard at a concert entrance — only allowing verified ticket holders in.
Why Would You Want to Change Secure Boot State?
While Secure Boot improves security, there are situations where you may want to turn it off:
-
✅ Installing another operating system (like Linux or older Windows versions).
-
✅ Running unsigned drivers or older hardware that Secure Boot blocks.
-
✅ Troubleshooting boot problems after updates or driver installs.
-
✅ Dual-boot setups where another OS is not compatible with Secure Boot.
On the flip side, you’ll want Secure Boot enabled if:
-
✅ You want maximum protection against boot-time malware.
-
✅ You’re running Windows 11 exclusively.
-
✅ Your PC is used for business or sensitive work.
How to Check Secure Boot State in Windows 11
Before changing it, let’s confirm whether Secure Boot is already enabled or disabled.
Method 1: Using System Information
-
Press Win + R, type
msinfo32, and press Enter. -
Look for Secure Boot State in the right pane.
-
On → Secure Boot is enabled.
-
Off → Secure Boot is disabled.
-
Unsupported → Your PC doesn’t support it (usually older systems).
-
Method 2: Using PowerShell
-
Open PowerShell as Administrator.
-
Type the command:
-
Results:
-
True → Secure Boot is enabled.
-
False → Secure Boot is disabled.
-
Cmdlet not supported → Your PC doesn’t support UEFI Secure Boot.
-
Step-by-Step Guide: How to Change Secure Boot State in Windows 11
Changing Secure Boot requires accessing UEFI firmware (BIOS). Here’s how:
Step 1: Restart Into UEFI Settings
-
Press Win + I to open Settings.
-
Navigate to System > Recovery.
-
Under Advanced startup, click Restart now.
-
Choose Troubleshoot > Advanced options > UEFI Firmware Settings.
-
Click Restart → Your PC will boot into UEFI/BIOS.
Step 2: Locate Secure Boot Option
UEFI interfaces vary by manufacturer (Dell, HP, Lenovo, ASUS, Acer, etc.), but typically:
-
Go to the Boot, Security, or Authentication tab.
-
Look for Secure Boot.
Step 3: Change Secure Boot State
-
To Enable Secure Boot: Select Enabled.
-
To Disable Secure Boot: Select Disabled.
⚠️ If the option is grayed out:
-
Ensure your system is using UEFI mode, not Legacy BIOS.
-
Convert your disk from MBR to GPT if needed.
Step 4: Save and Exit
-
Press the key shown on your BIOS screen (usually F10) to Save & Exit.
-
Your PC will restart with the new Secure Boot state.
Troubleshooting Secure Boot Issues
1. Secure Boot Option Is Missing
-
Check if your PC supports UEFI.
-
If it’s running in Legacy BIOS mode, you’ll need to switch to UEFI (requires GPT partition style).
2. Secure Boot Greyed Out
-
Disable CSM (Compatibility Support Module) first.
-
Then retry enabling Secure Boot.
3. Windows Won’t Boot After Changing Secure Boot
-
Re-enter BIOS and revert changes.
-
Or use System Restore from recovery options.
Pros and Cons of Changing Secure Boot State
| Pros (Enabled) | Cons (Disabled) |
|---|---|
| Protects against rootkits & malware | Required for dual-boot with some Linux distros |
| Required for Windows 11 compatibility | Allows older drivers & apps |
| Ensures system integrity | Slightly less secure startup |
Tips Before Changing Secure Boot
-
✅ Back up your important data.
-
✅ Ensure you know how to access BIOS/UEFI.
-
✅ Create a System Restore Point in Windows.
-
✅ Only disable Secure Boot if you have a specific reason.
Conclusion
Changing the Secure Boot state in Windows 11 is not difficult once you know where to look. Whether you’re enabling it for security or disabling it for compatibility, the process involves accessing your UEFI firmware settings, locating the option, and switching it on or off.
Remember:
-
Keep Secure Boot enabled for maximum protection.
-
Disable it only if necessary (like installing another OS).
-
Always take precautions like backups before making changes.
By managing Secure Boot wisely, you can balance security and flexibility on your Windows 11 PC.
FAQs
1. Is Secure Boot required for Windows 11?
Yes, Secure Boot (along with TPM 2.0) is a minimum system requirement for Windows 11.
2. Can I disable Secure Boot after installing Windows 11?
Yes, you can disable it in BIOS, but some security features may stop working.
3. Does disabling Secure Boot affect performance?
No, Secure Boot doesn’t impact system speed. It only controls what runs at startup.
4. Why can’t I enable Secure Boot on my PC?
Your system may be in Legacy BIOS mode or using an MBR disk. You’ll need to switch to UEFI with GPT.
5. Will Secure Boot block Linux installation?
Yes, some Linux distros require disabling Secure Boot for installation. Others (like Ubuntu) support it.