Secure Boot Not Enabled? 5 Ways to Turn It On (Windows 11)
Windows 11 needs Secure Boot but it's off? 5 ways to enable Secure Boot — UEFI mode, GPT conversion, CSM disable — step-by-step.
Secure Boot Not Enabled? 5 Ways to Turn It On (Windows 11)
Windows 11 (and games like Valorant/Fortnite) require Secure Boot — but your PC says it's off or unsupported? Usually it's a BIOS setting or legacy boot mode. Here's how to fix it.
Table of Contents
- What Secure Boot Actually Is
- Check Status First (msinfo32)
- Fix 1 — Enable Secure Boot in BIOS
- Fix 2 — Disable CSM/Legacy Mode
- Fix 3 — Convert MBR to GPT (If Needed)
- Fix 4 — Clear/Restore Secure Boot Keys
- Fix 5 — Update BIOS
- FAQ — 10 Questions
- Conclusion
What Secure Boot Actually Is
Secure Boot is a UEFI feature that only allows trusted/signed software during startup — blocks rootkits and boot-level malware. Windows 11 and some anti-cheat games require it.
Check Status First (msinfo32)
Win+R→msinfo32→ Enter- Check "Secure Boot State" — On/Off/Unsupported
- Check "BIOS Mode" — must say UEFI (not Legacy)
Fix 1 — Enable Secure Boot in BIOS
- Restart → Del/F2 → BIOS
- Boot or Security tab → Secure Boot → Enabled
- Grayed out? See Fix 2.
Fix 2 — Disable CSM/Legacy Mode
- BIOS → Boot → CSM (Compatibility Support Module) → Disabled
- Or "OS Type" → Windows UEFI Mode (ASUS boards)
- Secure Boot becomes selectable → Enable
Fix 3 — Convert MBR to GPT (If Needed)
BIOS Mode shows "Legacy"? Disk is MBR — convert:
mbr2gpt /validate /allowFullOS
mbr2gpt /convert /allowFullOS
Validate first — if OK, convert (keeps data). Then switch BIOS to UEFI → enable Secure Boot.
Fix 4 — Clear/Restore Secure Boot Keys
Enabled but still "Off"? BIOS → Secure Boot → Key Management → Restore Factory Keys → Save & Exit.
Fix 5 — Update BIOS
Old BIOS may have broken Secure Boot — update firmware from manufacturer.
FAQ
Q1. "Secure Boot State: Unsupported"?
PC is in Legacy/CSM mode — disable CSM first.
Q2. Enabling it erased Windows?
Only if boot mode switched carelessly — GPT+UEFI is safe.
Q3. MBR2GPT failed validation?
Disk has >3 partitions or is dynamic — remove extra partition.
Q4. Games require it (Valorant)?
Yes — Vanguard needs TPM 2.0 + Secure Boot both on.
Q5. Dual boot Linux affected?
Yes — use shim-signed distros or keep it off.
Q6. Grayed out after CSM off?
Set Admin BIOS password first — unlocks option on some boards.
Q7. Secure Boot same as TPM?
No — different features, both needed for Win11.
Q8. Old laptop without UEFI?
Pre-2012 machines often can't — no workaround.
Q9. Does it slow boot?
No — often faster in UEFI mode.
Q10. How to verify?
msinfo32 → Secure Boot State: On.
Conclusion
Secure Boot off = enable in BIOS; grayed → disable CSM + ensure UEFI/GPT. MBR disk → mbr2gpt converts without data loss.
TAGS: secure boot not enabled, enable secure boot windows 11, uefi mode, csm disable, mbr2gpt, secure boot valorant, secure boot grayed out, techn trainer
What's Your Reaction?
