8 and 8.1, after installing the updates, we encountered system errors that are associated with the so-called “secure boot”. What is it? This is a function that prevents unauthorized operating systems and software from starting when the PC is turned on. It is needed to additionally protect your computer from viruses and rootkits that can harm the system at the moment when it boots. But what to do if the specified function causes constant errors? It's all about the given parameters. In this article we will take a closer look at how to properly configure Secure Boot. Let's figure it out. Go!

If there is such a problem, this article is for you.

There are a number of issues with Secure Boot. Most often, this error message is “Secure Boot is not configured correctly” or “Secure Boot Violation Invalid signature detected”. What to do in this case? Often it is enough to simply enable the specified function through the BIOS. But some users do not have such an item in the BIOS at all. Then you should try turning it off. How to do this is discussed later in the article.

Now you will know exactly what to do if your computer's secure boot settings are not configured correctly. As you can see, this situation is easy to fix. Just a few minutes, and your system is working as it should again. Write in the comments whether the article helped you deal with the error, and share your experience in solving this problem with other users.

26. 12.2017

Blog of Dmitry Vassiyarov.

How to disable UEFI - several ways

Good day.

Do you want to start or reinstall an operating system from a flash drive or disk, but your computer won’t let you do it? Are you sure that the boot drive is configured correctly?

In this case, you should find out how to disable UEFI, in particular, a separate option - Secure Boot protection. Are these English terms not familiar to you? You will find explanations and instructions on how to disable it for different hardware in my article.

Brief introduction

In short, UEFI is a modern, improved analogue. Usually it is equipped with equipment no younger than 2010, with Windows 8, 8.1, 10 and other new systems.

I wrote in more detail here.

It has a feature such as Secure Boot, which prevents the launch of unauthorized OS and programs when the PC is turned on. This is not any built-in Windows service, but only the protection used by the operating system.

Thus, even if the boot disk or USB drive is configured as expected, this does not mean that it will provide it with access to the hardware. Users may also receive the following message on their desktop from Windows 8 and 8.1: “Secure Boot is not configured correctly.”

To get rid of such problems, I suggest disabling it. But first, let's figure out whether this option is active for you so that you don't waste your time.

Is Secure Boot enabled?

Let's get straight to the point:

• Press Win + R to bring up the Run window.
• Enter the msinfo32 command into it and press Enter.

• A menu will open with information about your system. Look for the line “Secure Boot Status” to know the answer to your question.

Open UEFI

Regardless of your computer model and motherboard, to disable the mentioned option, you first need to get into UEFI. This can be done in two ways.

First way

Are you dealing with Windows 8 or 8.1? Then this instruction is for you:

• In the panel on the right, open “Options”;
• Follow this route: Changing settings - Update and recovery - Recovery.
• When you reach the finish line, find the section with special boot options and click the “Restart” button in it.

• Select "Software Settings" and you'll be taken to where you should be.

Second way

The alternative method is extremely simple: if you have a desktop computer, press the Delete key when you turn it on. If the laptop is F2 or Fn + F2. There may be other options, but these are the most common.

Instructions for different laptops and motherboards

I've put together several methods to disable Secure Boot on various UEFI interfaces. But if you don’t find your specific hardware model among them, it doesn’t matter. The settings of most motherboards suggest an identical algorithm of actions in such situations. So there is a good chance that one of these instructions will work for your UEFI.

Acer

On desktop computers from this company, you can disable the security function in the “Authentication” section or in the “Advanced - System Configuration”.

On laptops, you will see this option on the main tab, but you cannot deactivate it there. To make this possible, you first need to put a code on the “Security” tab using the “Set Supervisor Password” tool. You may also have to install Legacy Mode or CSM boot mode instead of UEFI.

How to disable UEFI in Asus

In the latest models of this brand you need:

• Switch to the “Boot” tab
• Select Safe option,
• In the “OS Type” line, put the answer “Other OS”.

Sometimes there is another method: in the same tab or in “Security” you should switch the parameter we need to the “Disabled” state.

Dell, Lenovo and Toshiba

You must follow the same steps as in the second version of the previous instructions.

Gigabyte

You can disable Secure Startup on this hardware in the “BIOS Features” tab. To enable the OS from a boot drive, as in the example with Acers, you also need to enable CSM and the previous boot option.

HP

Do you have a laptop from this company? Immediately when you turn it on, press the “Esc” button. This will bring up a menu where you can get into the BIOS by clicking F10. Next, you will need the “System Configuration” tab, and in it - the “Boot Options” section. In it you will see the necessary parameter, which should be set to inactive.

I think in order to disable UEFI, something from the above will work for you. Sometimes it happens that the setting to disable Secure Boot takes the form of selecting an operating system in the BIOS. In such a situation, select the Windows 7 option - this will mean that you have disabled Secure Boot.

How to disable Secure Boot in BIOS UEFI? Hello admin, could you do a short review on this topic? Very often you have to reinstall friends on Windows 7, and to do this you know, you need to disable the “Secure Boot” option in UEFI. Laptops and computers are from different manufacturers and the interface is also different, so the options containing this setting are slightly different and sometimes it’s difficult to figure it all out.

How to disable Secure Boot

Hello friends! The Secure Boot secure boot protocol, based on special certified keys (currently available only in Windows 8), will not allow you to boot your laptop from any boot disk other than the installation disk with the 8 itself. Therefore, to boot your laptop or computer from an installation disk with a different operating system, you need disable Secure Boot in BIOS UEFI.

The Secure Boot secure boot protocol option is mainly found in the Security sections, less often System Configuration or Boot, but I want to say that to install Windows 7 on a new laptop with a UEFI BIOS, it’s not enough to disable just one Secure Boot option in the UEFI interface, you also need to enable “ compatibility mode with other operating systems” and it is also called differently for all manufacturers: “Launch CSM”, or “CMS Boot”, “UEFI and Legacy OS”, “CMS OS”, and is located in the main section of the UEFI BIOS called Advanced , then see the subsection “BOOT MODE” or “OS Mode Selection”.

Let's look at the settings of the InsydeH20 setup utility, typical for all laptops, with UEFI elements, for example, Acer laptops have this BIOS, and then we'll also look at other similar utilities that the latest laptops and desktop computers may have.

How to disable Secure Boot on a Toshiba laptop. InsydeH20 setup utility

We go into the BIOS and go to the Security section, see the “Secure Boot” option we need, move to it using the arrows on the keyboard and press Enter,

Again, use the arrows to select Disabled (disabled)

And press Enter. With these simple steps we were able to disable Secure Boot in the UEFI BIOS.

But that’s not all, now we need to enable the “compatibility mode with other operating systems.” Go to the “Advanced” section and find the “System configuration” option

And go into it, here we select the option "Boot Mode" or "OS Mode Selection", and set it instead of the UEFI OS position (maybe UEFI BOOT) to the "CSM Boot" or "UEFI and Legacy OS", "CMS OS" position

For our changes to take effect, we save our changes in the BIOS, press F10,

Then agree Yes and press Enter

reboot occurs. Now we can boot our laptop from the installation disk with any operating system.
Next, you can enter the laptop boot menu (usually you need to press the ESC or F10 key when turning it on) and select your (already connected) bootable USB flash drive with the operating system or installation disk, if you don’t know how to do this, read our article.

How to disable the Secure Boot option on an HP laptop

Sometimes things don’t go so smoothly; for example, on some laptop models you need to go through a few extra steps.

We enter the UEFI BIOS and select the “System Configuration” option, enter it and select Boot Options, and also enter it.

We see our secure boot option Secure Boot, set it to Disabled (disabled), and set the “compatibility mode with other operating systems” option “Legacy support” to “Enabled”,

We answer Yes to the warning.

We save the settings, press F-10, select Yes and Enter, reboot the laptop, after the reboot this window appears with the warning “A change to the operating system secure boot mode is peding...” In English they do not ask you to enter code 8721 on the laptop keyboard (in your case the code will of course be different) and press Enter, after this changes in the UEFI BIOS settings will be saved and the laptop will reboot.

When you turn on the HP laptop, press the ESC key and get to the start menu, select F-9 Boot Device Options (change boot settings), then select our flash drive or floppy drive with the installation disk to boot.

How to disable the Secure Boot option on a Samsung laptop. Aptio Setup Utility

This utility is mainly installed on Samsung laptops. When booting the laptop, press the F2 key and enter the BIOS. Go to the Boot section, disable the “Secure Boot” option,

Using the arrows on the keyboard, select it and set it to “Disabled”, press “Enter”

At the warning that the computer may boot with an error, press Enter.

In the same section below, the “OS Mode Selection” parameter appears, select it and press “Enter”

set it to “CMS OS” or “UEFI and Legacy OS” and press “Enter”.

Again a warning appears about the possibility of the next boot of the laptop with an error, press Enter. We save the changes we made in the BIOS, press “F10”, agree Yes, press Enter. The laptop reboots, press F10 when loading and get into the boot menu, in it select the laptop drive or bootable USB flash drive.

How to disable Secure Boot on an Acer Aspire laptop

Friends, firstly we have, but here I’ll just note that on Acer Aspire laptops the Secure Boot option is inactive by default, in order to activate it and then disable it, you must first assign a password to enter the UEFI BIOS. What do I need to do!

Go to the tab " Security" and select the item " Set Supervisor Password", press Enter and assign a password. After assigning a password, the Secure Boot option will become active and can be set to Disable.

How to disable the Secure Boot option on a Packard Bell laptop

Press the button when loading F2, less often F6 and get into the UEFI BIOS of the laptop,

Here we go to the tab Boot.

If before turning on the laptop you connected a flash drive to it, then it may not decide immediately in this menu.

Set the Boot Mode option to Legacy BIOS.

And the option Secure Boot set to position Disabled.

Now the flash drive should determine. Place the flash drive in the first position, save the settings and reboot. If the bootable flash drive is made according to our articles, then the download will be successful.

How to disable Secure Boot on a desktop computer

Many desktop computers have modern motherboards with UEFI BIOS and the Secure Boot protocol. Let's take ASUS, Asrock, Gigabyte motherboards as an example. It must be said that on motherboards for desktop computers the functionality of the UEFI BIOS is much expanded, here you have the Russian language and the ability to use a mouse and make all kinds of adjustments to the operating parameters of components.
When loading, press Delete or F2 and enter the UEFI BIOS. Click Advanced (F7).
Go to the Boot tab, then select the Secure Boot option,

Press Enter and enter it, press Enter again and select Other OS (other operating system),

Now we leave here and select CSM (Compatibility Support Module),

Set the Launch CSM option to Enabled.

In the additional options that open, select Boot device options and set Legacy OpROM only or UEFI and Legacy OpROM.

With these steps we disabled Secure Boot and enabled advanced boot mode. Press F10 and save the changes we made to the UEFI BIOS. Save configuration and reset? Yes.

Disable the Secure Boot option in the UEFI interface of the Asrock motherboard.

If you have a Gigabyte motherboard, read our detailed article.

MSI motherboard. Subsection "Boot mode select".

Note: On many laptops it is impossible to disable the Secure Boot option, since it is inactive, in this case it can help.

UEFI Secure Boot- This is a standard protection on the BIOS, which limits the ability to launch USB drives as a boot drive. This security protocol can be found on computers with Windows 8 and later. Its essence is to prevent the user from booting from the Windows 7 installer and below (or an operating system from another family).

This function can be useful for the corporate segment, as it allows you to prevent unauthorized booting of your computer from unauthorized media that may contain various malware and spyware.

Ordinary PC users do not need this feature; on the contrary, in some cases it can even interfere, for example, if you want to install Linux together with Windows. Also, due to problems with UEFI settings, an error message may appear while working in the operating system.

To find out whether you have this protection enabled, you don’t have to go to the BIOS and look for information about this, just take a few simple steps without leaving Windows:

1. Open line "Run" using the key combination Win+R, then enter the command there "cmd".



2. After entering it will open "Command line", where you need to enter the following:



3. In the window that opens, select "System Information", located on the left side of the window. Next you need to find the line "Secure Boot State". If it's opposite "Off", then you do not need to make any changes to the BIOS.



Depending on your motherboard manufacturer, the process for disabling this feature may look different. Let's consider options for the most popular manufacturers of motherboards and computers.

Method 1: For ASUS




Method 2: For HP




Method 3: For Toshiba and Lenovo

Here, after entering the BIOS, you need to select the partition "Security". There should be a parameter "Secure Boot", opposite which you need to set the value "Disable".

Quite often on modern laptops, when you try to boot from a flash drive or installation disk, you can see the Security boot fail error. It appears due to the enabled option, which is designed to protect the laptop from running unlicensed software on it, as well as some types of viruses.

But the most common reason for the Security boot fail error to appear is the lack of UEFI support on the boot device from which you are trying to boot (flash drive, disk).

Read about how to create a flash drive with UEFI support.

In this article we will tell you what you need to do to get rid of the Security boot fail error on Acer laptops.

Disabling Secure Boot on an Acer laptop

And go to the Security tab.

Setting the BIOS password

If the Security Boot Mode option is inactive, then select Set Supervisor Password.

In the window that appears, come up with a password and enter it twice, confirming the entry with the Enter button.

If you do not set a password, you will not be able to disable Secure Boot.

After the password is set, set the Secure Boot option to Disabled and save the settings with the F10 button and reboot the laptop, going into the BIOS settings again.

Disabling Secure Boot

Now on the Boot tab you need to enable support for Legasy BIOS (CSM Mode).

Enabling Legacy support

After this, we configure or and make sure that the Security boot fail error no longer appears.

Do not forget. Or better yet, write down the BIOS password you came up with somewhere. Otherwise, without it, you will not be able to change BIOS settings.