What's happened Secure Boot and how to disable it? I will try to answer these questions in this article.
Owners of modern computers should be primarily interested in this topic, but owners of prehistoric computers will also sooner or later encounter this topic. So... let's begin...

Instructions for disabling Secure Boot on various platforms

I'll give you a few examples of disabling the secure boot feature on various motherboards oh and laptops. If you don't find your option on the list, don't be upset. After reading how this is done on other platforms, you can do it on your own, since on most devices that support this function, the methods for enabling/disabling are similar. In the instructions I will describe the steps starting from the fact that I have already entered the UEFI interface.

Asus

Consider disabling the Secure Boot function on laptops and motherboards from the company Asus. What do we have to do?

1. Go to the tab BOOT(download) and click on the item
2. Click on the item OS Type(operating system type)
3. Select an option Other OS(other operating system)
4. Save the settings by pressing the F10 button on your keyboard

On some Asus boards Instead of the Boot tab, there is a Security tab, where in the Secure Boot item you need to set the switch to the Disabled status.

Dell

To disable secure boot on laptops from the company Dell, you need to go to the Boot tab and select UEFI there. Next you need to set the value to "Disabled" and save the settings by pressing the F10 button
.

Lenovo

On laptops Lenovo go to the Secure Boot tab and set the value to Disabled. Next, save the settings.

HP

On laptops HP in the BIOS go to the System Configuration tab and select Boot Options. Next, find the Secure Boot item and set it to Disabled.
You already know how to save the settings.

Acer

On laptops Acer To disable Secure Boot, you must first unlock the ability to disable it. To do this, you need to set a password on the Secure tab using Set Supervisor Password. And only after that, on the Boot tab for the Secure Boot item you can set the value to Disabled

Gigabyte

For motherboards from this manufacturer, you can disable secure boot on the BIOS Features tab
.

There is no point in listing other manufacturers further. In most cases, the options for disabling the function will not differ much. If you still have problems with this, write in the comments and I will try to help you.
Finally, I’ll show you how you can find out whether the Secure Boot option is enabled or not on your PC.

How to find out if Secure Boot is activated on Windows

1. Press the WIN+R buttons (where Win is a button that looks like this ).
2. Type the command msinfo32 and press Enter.
3. In the system information window that opens, look at the item "Secure Boot State" There will be ON/OFF or NOT SUPPORTED, which means the same as OFF.

26. 12.2017

Blog of Dmitry Vassiyarov.

How to disable UEFI - several ways

Good day.

Do you want to start or reinstall an operating system from a flash drive or disk, but your computer won’t let you do it? Are you sure that the boot drive is configured correctly?

In this case, you should find out how to disable UEFI, in particular, a separate parameter - Secure protection Boot. Are these English terms not familiar to you? You will find explanations and instructions on how to disable it for different hardware in my article.

Brief introduction

In short, UEFI is a modern, improved analogue. Usually it is equipped with equipment no younger than 2010, with Windows 8, 8.1, 10 and other new systems.

I wrote in more detail here.

It has a feature such as Secure Boot, which prevents the launch of unauthorized OS and programs when the PC is turned on. This is not any built-in Windows service, but only the protection used by the operating system.

Thus, even if boot disk or the USB drive will be configured as expected, this does not mean that it will provide access to the hardware. Users may also receive the following message on their desktop from Windows 8 and 8.1: “Secure Boot is not configured correctly.”

To get rid of such problems, I suggest disabling it. But first, let's figure out whether this option is active for you so that you don't waste your time.

Is Secure Boot enabled?

Let's get straight to the point:

• Press Win + R to bring up the Run window.
• Enter the command msinfo32 into it and press Enter.

• A menu will open with information about your system. Look for the line “Secure Boot Status” to know the answer to your question.

Open UEFI

Regardless of your computer model and motherboard, to disable the mentioned option, you first need to get into UEFI. This can be done in two ways.

First way

Are you dealing with Windows 8 or 8.1? Then this instruction is for you:

• In the panel on the right, open “Options”;
• Follow this route: Changing settings - Update and recovery - Recovery.
• When you reach the finish line, find the section with special boot options and click the “Restart” button in it.

• Select "Software Settings" and you'll be taken to where you should be.

Second way

The alternative method is extremely simple: if you have a desktop computer, when you turn it on, press Delete key. If the laptop is F2 or Fn + F2. There may be other options, but these are the most common.

Instructions for different laptops and motherboards

I've put together several methods to disable Secure Boot on various UEFI interfaces. But if you don’t find your specific hardware model among them, it doesn’t matter. The settings of most motherboards suggest an identical algorithm of actions in such situations. So there's a good chance that one of these instructions will work for your UEFI.

Acer

IN desktop computers This company can disable the security function in the “Authentication” section or in the “Advanced - System Configuration”.

On laptops, you will see this option on the main tab, but you cannot deactivate it there. To make this possible, you first need to put a code on the “Security” tab using the “Set Supervisor Password” tool. You may also have to install Legacy Mode or CSM boot mode instead of UEFI.

How to disable UEFI in Asus

IN latest models of this brand you need:

• Switch to the “Boot” tab
• Select Safe option,
• In the “OS Type” line, put the answer “Other OS”.

Sometimes there is another method: in the same tab or in “Security” you should switch the parameter we need to the “Disabled” state.

Dell, Lenovo and Toshiba

You must follow the same steps as in the second version of the previous instructions.

Gigabyte

You can disable Secure Startup on this hardware in the “BIOS Features” tab. To enable the OS from a boot drive, as in the example with Acers, you also need to enable CSM and the previous boot option.

HP

Do you have a laptop from this company? Immediately when you turn it on, press the “Esc” button. This will bring up a menu where you can get into the BIOS by clicking F10. Next, you will need the “System Configuration” tab, and in it - the “Boot Options” section. In it you will see the necessary parameter, which should be set to inactive.

I think in order to disable UEFI, something from the above will work for you. Sometimes it happens that the setting to disable Secure Boot takes the form of selecting an operating system in the BIOS. In such a situation, select the Windows 7 option - this will mean that you have disabled Secure Boot.

Have you ever tried to install another operating system in parallel with Windows? If so, depending on what you were trying to install, you may have encountered the UEFI Secure Boot feature. If Secure Boot does not recognize the program you are trying to install, it will not allow you to install it. Secure Boot is really useful for protecting your computer from malware. However, it also prevents loading quite “respectable” operating systems - such as Kali Linux, Android x86 and TAILS.
Fortunately, there is a way to resolve this situation. In this article, we will tell you how to disable the UEFI Secure Boot feature so that you can install a second operating system.

First, let's look at how exactly Secure Boot protects your system.
Secure Boot is a feature of UEFI, that is, the Unified Extensible Firmware Interface, and UEFI, in turn, is a more advanced alternative to the BIOS interface found on many devices.

Secure Boot can be compared to a checkpoint. Before allowing a program into the system, it checks it. If the program has the proper digital signature, it is allowed through the gate. If the digital signature cannot be recognized, Secure Boot prevents the program from starting and requires a system reboot.
But it happens that, although the program is safe and has a reliable source, its digital signature is not in the Secure Boot database.
So, even if you download Linux distributions directly from their developer’s website and check checksums, to make sure that the software has not been hacked, Secure Boot can still “not miss” them. Other operating systems, as well as drivers and hardware software, may suffer the same fate.

How to disable Secure Boot

First of all, you should remember that Secure Boot is not just some annoying “feature” that you need to get rid of as soon as possible. In the end, this function protects the interests of your own computer.
Also, keep in mind that when you re-enable Secure Boot, you may need to reset the BIOS. You will not lose your data, but personal BIOS settings will be reset. In addition, it may happen that once you disable Secure Boot, you will no longer be able to return it.
So, to disable Secure Boot, do the following:

• Turn off your computer. Then turn it back on and log in BIOS mode. This mode is usually entered using the F1, F2, F12, Esc or Del buttons (depending on the computer model). Windows users can enter the menu additional parameters boot (Advanced Boot) by pressing Shift and selecting Restart. Then you need to click on Troubleshoot > Advanced Options: UEFI Firmware Settings.
• Find the Secure Boot feature. If available, select Disabled. Typically, the Secure Boot option is located in the Security, Boot, or Authentication menu.
• Click on Save and Exit. The system will reboot.

So, you have successfully disabled Secure Boot. Now feel free to take a flash drive with an operating system that you could not install before, and try again.

How to reactivate Secure Boot

To enable Secure Boot again, you will have to remove all traces of the presence of an unsigned operating system from your computer - otherwise nothing will work.

• Uninstall any unsigned software installed while Secure Boot was disabled.
• Turn off your computer. Then turn it back on and enter BIOS mode. This mode is usually entered using the F1, F2, F12, Esc or Del buttons (depending on the computer model). Windows users can access the Advanced Boot menu by pressing Shift and selecting Restart.
• Find the Secure Boot option and select Enabled. Typically, the secure boot option is found in the Security, Boot, or Authentication menu.
• If you can't enable Secure Boot, try resetting your BIOS to reset it to factory settings. After returning the factory settings, try enabling Secure Boot again.
• Click Save and Exit. The system will reboot.
• If the system does not boot, disable Secure Boot again.

Diagnosing an error preventing Secure Boot from being enabled

To resolve the issue of the system failing to boot with Secure Boot enabled, try the following:

• Check that the BIOS menu UEFI option was enabled. This will also ensure that legacy boot mode is disabled.
• Find out your partition type hard drive. To do this, enter search bar start menu Windows Management computer (Computer Management). Next, select Disk Management. Find your primary drive, right-click and select Properties. Now find the disk partition type. UEFI requires the GPT type, not the MBR used in more earlier versions BIOS.
• There is only one way to change the MBR type to GPT: create backup copy your data and erase all information from the disk.
• Some firmwares have an option to restore factory settings (Restore Factory Keys), which is usually located in the same menu as other Secure Boot options. If you have this option, restore factory settings, save them, exit and reboot.

If you cannot activate Secure Boot, the Trusted Boot function will come to the rescue. True, it can only recognize the digital signature of Windows 10. Trusted Boot checks drivers, startup files and other aspects of Windows.
If Trusted Boot detects a corrupted or malicious program, then, like Secure Boot, it will prevent it from loading. However, unlike Secure Boot, Trusted Boot is able to automatically correct some errors.

Secure Boot and Trusted Boot work together

Is Secure Boot necessary?

It is worth remembering that by disabling Secure Boot, you are exposing your computer to a potential threat.
It can be said that today, in times of rampant rootkits and other malware, secure boot is becoming more important than ever. So, provide your UEFI system with an additional level of security and sleep well.

Denial of responsibility: This article is written for educational purposes only. The author or publisher did not publish this article for malicious purposes. If readers would like to use the information for personal gain, the author and publisher are not responsible for any harm or damage caused.

Hello admin, the question is, on a new laptop Acer Aspire V5 I want install operating system instead of Windows 8.1 Windows system 7, I know that for this you need to disable the Secure Boot option in the BIOS and enable the Legacy extended boot mode.

I proceed like this, insert the installation into the laptop Windows flash drive 7 and reboot, press F2 when loading and enter the UEFI BIOS, but the Secure Boot option is blurred (grayed out), that is, inactive, and it is not clear how to switch it to Legacy mode.In BIOS my bootable flash drive not displayed.If you press F12 when booting the laptop and enter boot menu, then the flash drive is also missing there.

Hi all! I want to roll back new laptop Acer Aspire to factory settings, but before that I need to pull my files from the desktop Windows desktop 8.1, because when you restore the factory configuration from the drive (C:), everything will be deleted. I boot the laptop from the flash drive on which the operating system is located Linux system, but there is no flash drive in the boot menu (F12). On your website they say that you must first set the administrator password in the BIOS, then disable the Secure Boot option, and only then will you be able to boot the laptop from a flash drive. All this is somehow tricky, can you tell me how to do everything correctly?

How to disable Secure Boot on an Acer Aspire laptop. How to remove the password on the BIOS of an Acer laptop

Hello friends! I want to dissuade the author of the first letter from Windows replacement 8.1 on Windows 7, in my opinion, there are not so many disadvantages of the eight that it would be so easy to remove it from a new laptop at once, but, as they say, the master is the master and the decision is yours.

But the author of the second letter will have to disable Secure Boot, because most Linux distributions will not be able to pass the secure boot protocol! By the way, here’s a good one, which Secure Boot will not be a hindrance.

By pressing a key F2 When loading, go to the UEFI BIOS, go to the tab Main, set the option F12 Boot Menu in Enabled, with this action we allow the laptop boot menu to appear when pressing the F12 key.

Next, go to the tab Security, go down to the option Set Supervisor Password and press the Enter key, enter the password in the upper field (we will reset it later) and press Enter,

In the lower field, enter the same password and press Enter again.

To the message Changes have been saved, press again Enter.

Now let's go to the tab Boot. Select the option Boot Mode(located in position UEFI), choose Legacy

And Confirm your choice.

Press F10 (save the changes made) and reboot the laptop, when loading, click F12 and enter the boot menu, select our flash drive among other devices.

We remove the password on the BIOS of an Acer laptop, the ability to disable/enable Secure Boot remains

There is one unpleasant moment in this whole story: if you suddenly want to get into the BIOS of the laptop, you will have to enter the password you created,

as they say, nafik is necessary, because you can forget it.

We enter the BIOS, go to the tab Security , go down to the option Set Supervisor Password and press the Enter key, enter the password we created in the first field, and press Enter.