How to disable Secure Boot in BIOS UEFI? Hello admin, could you do a short review on this topic? Very often you have to reinstall friends on Windows 7, and to do this you know, you need to disable the “Secure Boot” option in UEFI. Everyone has laptops and computers different manufacturers and the interface is also different, so the options containing this setting are slightly different and sometimes it’s difficult to figure it all out.

How to disable Secure Boot

Hello friends! Protocol secure boot Secure Boot, based on special certified keys (currently available only in Windows 8), will not allow you to boot your laptop from any boot disk except for the installation disk with the G8 itself. Therefore, to boot your laptop or computer from an installation disk with a different operating system, you need disable Secure Boot in BIOS UEFI.

The Secure Boot protocol option is mainly found in the Security sections, less often System Configuration or Boot, but I want to say that for Windows installations 7 on a new laptop with a UEFI BIOS, it is not enough to disable only one Secure Boot option in the interface in UEFI, you also need to enable “compatibility mode with other operating systems” and it is also called differently for all manufacturers: “Launch CSM”, or “CMS Boot” , “UEFI and Legacy OS”, “CMS OS”, and is located in the main section of the UEFI BIOS called Advanced, then see the subsection “BOOT MODE” or “OS Mode Selection”.

Let's look at the settings of the InsydeH20 setup utility, typical for all laptops, with UEFI elements, for example, Acer laptops have this BIOS, and then we'll also look at other similar utilities that may have latest laptops and desktop computers.

How to disable Secure Boot on a Toshiba laptop. InsydeH20 setup utility

We go into the BIOS and go to the Security section, see the “Secure Boot” option we need, move to it using the arrows on the keyboard and press Enter,

Again, use the arrows to select Disabled (disabled)

And press Enter. With these simple steps we were able to disable Secure Boot in the UEFI BIOS.

But that’s not all, now we need to enable the “compatibility mode with other operating systems.” Go to the “Advanced” section and find the “System configuration” option

And go into it, here we select the option "Boot Mode" or "OS Mode Selection", and set it instead of the UEFI OS position (maybe UEFI BOOT) to the "CSM Boot" or "UEFI and Legacy OS", "CMS OS" position

For our changes to take effect, we save our changes in the BIOS, press F10,

Then agree Yes and press Enter

reboot occurs. Now we can boot our laptop from the installation disk with any operating system.
Next, you can enter the laptop boot menu (usually you need to press the ESC or F10 key when turning it on) and select your (already connected) bootable USB flash drive with the operating system or installation disk If you don’t know how to do this, read our article.

How to disable the Secure Boot option on an HP laptop

Sometimes things don’t go so smoothly; for example, on some laptop models you need to go through a few extra steps.

We enter the UEFI BIOS and select the “System Configuration” option, enter it and select Boot Options, and also enter it.

We see our secure boot option Secure Boot, set it to Disabled (disabled), and set the “compatibility mode with other operating systems” option “Legacy support” to “Enabled”,

We answer Yes to the warning.

We save the settings, press F-10, select Yes and Enter, reboot the laptop, after the reboot this window appears with the warning “A change to the operating system secure boot mode is peding...” In English they do not ask you to enter code 8721 on the laptop keyboard (in your case the code will of course be different) and press Enter, after this changes in the UEFI BIOS settings will be saved and the laptop will reboot.

When you turn on the HP laptop, press the ESC key and get to the start menu, select F-9 Boot Device Options (change boot settings), then select our flash drive or floppy drive with the installation disk to boot.

How to disable the Secure Boot option on a Samsung laptop. Aptio Setup Utility

This utility is mainly installed on Samsung laptops. When booting the laptop, press the F2 key and enter the BIOS. Go to the Boot section, disable the “Secure Boot” option,

Using the arrows on the keyboard, select it and set it to “Disabled”, press “Enter”

At the warning that the computer may boot with an error, press Enter.

In the same section below, the “OS Mode Selection” parameter appears, select it and press “Enter”

set it to “CMS OS” or “UEFI and Legacy OS” and press “Enter”.

Again a warning appears about the possibility of the next boot of the laptop with an error, press Enter. We save the changes we made in the BIOS, press “F10”, agree Yes, press Enter. The laptop reboots, press F10 when loading and get into the boot menu, in it select the laptop drive or bootable USB flash drive.

How to disable Secure Boot on an Acer Aspire laptop

Friends, firstly we have, but here I’ll just note that on Acer laptops The Aspire Secure Boot option is inactive by default; in order to activate it and then disable it, you must first assign a password to enter the UEFI BIOS. What do I need to do!

Go to the tab " Security" and select the item " Set Supervisor Password", press Enter and assign a password. After assigning a password, the Secure Boot option will become active and can be set to Disable.

How to disable the Secure Boot option on a Packard Bell laptop

Press the button when loading F2, less often F6 and get into the UEFI BIOS of the laptop,

Here we go to the tab Boot.

If before turning on the laptop you connected a flash drive to it, then it may not decide immediately in this menu.

Set the Boot Mode option to Legacy BIOS.

And the option Secure Boot set to position Disabled.

Now the flash drive should determine. Place the flash drive in the first position, save the settings and reboot. If the bootable flash drive is made according to our articles, then the download will be successful.

How to disable Secure Boot on a desktop computer

Press Enter and enter it, press Enter again and select Other OS (other operating system),

Now we leave here and select CSM (Compatibility Support Module),

Set the Launch CSM option to Enabled.

In the additional options that open, select Boot device options and set Legacy OpROM only or UEFI and Legacy OpROM.

With these steps we disabled Secure Boot and enabled advanced boot mode. Press F10 and save the changes we made to the UEFI BIOS. Save configuration and reset? Yes.

Disable the Secure Boot option in the UEFI interface of the Asrock motherboard.

If you have maternal Gigabyte board read our detailed article.

MSI motherboard. Subsection "Boot mode select".

Note: On many laptops it is impossible to disable the Secure Boot option, since it is inactive, in this case it can help.

The security mode in UEFI, or security boot, provides startup protection on a laptop or desktop computer: it blocks access to changing the boot priority from a CD/DVD, USB drive (including the ability to use an OS with bootable flash drive), prevents attempts to install an unlicensed, unauthorized OS, or tamper with the boot shell. In such situations, when loading, the message “secure boot violation” appears on the display, indicating that it is impossible to modify the boot in the BIOS (in BIOS), UEFI.

To remove this blocking, you need to disable the corresponding options in UEFI. After disabling protection, you can change the boot priority from disks and USB flash drives, as well as install any OS distributions.

This article will tell you how to disable secure boot in boot shell options. It describes in detail how to turn off the protection mode on devices of popular brands, and how to find out using the system settings whether Secure Boot is enabled.

Checking whether a function is active

You can find out the boot protection activation status in two ways:

Method number 1: in options

1. Press the “Win” + “R” keys together on the keyboard.

2. In the Run panel, type msinfo32, press Enter.

3. Find the “Loading Status” option. View its value: "Off." - protection mode is disabled, “On” - included.

Method number 2: in the Powershell console

1. Run the utility:

• open the Start menu;
• V search bar set the name of the utility - powershell;

2. Click the utility line that appears in the Start panel list.

3. In the console, enter the command - Confirm-SecureBootUEFI.

4. Press "Enter".

5. The system will immediately display the protection status after entering the command: True - enabled, False - disabled.

How to open UEFI/BIOS settings

To deactivate Security Boot, you first need to open the UEFI or BIOS boot shell. This procedure can also be performed in different ways:

Method No. 1: using “hot keys”

Restart the OS. Press "Del". If login to the shell failed, it means that another " hotkey» to enter boot settings mode. This can be “F2” or the combination “FN+F2” (on a laptop).

Note. The BIOS button may be indicated on the monitor during system startup.

Method No. 2: standard OS option

(option for 8/8.1)
1. Activate the slide-out panel (on the right side of the screen).

2. Go to: Settings → Change settings... → Update and... → Recovery.

3. In additional add-ons, set the restart mode to “Settings via UEFI”.

4. Activate the "Reboot" command.

Disablement Guides

ASUS motherboard (PC)

1. Restart your PC. Press the “Del” or “F2” key (depending on the specific ASUS model). When the shell is displayed, press "F7", "Advanced Mode" will be displayed.

2. In “Boot”, click on the “Secure Boot” line.

3. In the settings panel, set “Other OS”.

4. Go back to "Boot", Compatibility Support Module (CSM).

5. Enable the Launch CSM option: set its line to Enabled.

6. In “Boot Device Control” set the value to “UEFI and Legacy …” or “Legacy OpROM …”.

7. Below in the list, in “Boot ... Devices”, select “Both, Legacy ... first” or “Legacy OpROM ...”.

All. The setup is complete. Protection is deactivated. Press “F10”, confirm the modification of the settings. Reboot your OS.

Asus laptop

1. In the boot shell, in Security - Secure Boot, set it to “Disabled”.

2. In “Boot” - Fast Boot, change the parameter to “Disabled”.

3. Save the options configuration (F10), reboot. Open BIOS.

4. In Boot - “Launch …” change the value to “Enabled”.

5. Save the changes and reboot the OS.

Asrock

1. In UEFI, open “Security” (the “Shield” icon in the top menu).

2. In “Secure Boot”, move the switch to “Disabled”.

3. Press "F10" to save the settings. Restart your PC.

Gigabyte

1. In UEFI, open the “... Features” menu.

2. Set options:

• Windows 8 Features - Other OS;
• Boot Mode Selection" - "Legacy only" / "UEFI and Legacy" ( possible options);
• Other PCI Device ROM Priority - Legacy OpROM.

3. Save the modifications made using the “F10” key.

MSI

1. In the shell menu, go to: SETTINGS → Boot.

2. In Boot Mode Select, change the parameter to “Legacy+UEFI”.

3. Press F10 to save changes to options.

Toshiba

1. In Security - “Secure Boot” set the position to “Disabled”.

2. Go to the shell: Advanced → System Configuration.

3. Find “Boot Mode” (it may also be called OS Mode Selection) and set its switch to the “CSM Boot” position ( alternative names parameter - CMS OS, UEFI and Legacy OS).

4. Activate the command to save settings using the “F10” key. Restart the system. Now you can use boot disks and flash drives, as well as install any OS.

HP

In HP Pavillion laptops, you need to do a few more things to deactivate additional settings:

1. To enter the UEFI-BIOS during the reboot process, press the “F10” key (in some models: ESC → F10).

2. In the shell, go to: System Configuration → Boot Options.

3. Change the position of the following options:

• Secure Boot - Disabled (disabling protective mode);
• Legacy support - Enabled (enable compatibility with other OS).

5. For the new settings to take effect, activate saving the parameters using the F10 key.

6. Reboot the OS. Once the system restart is complete, a warning will appear and a request to enter the specified code (displayed in the line ... to complete the change). Type it and press "Enter". The laptop will automatically reboot.

To change the boot priority in order to use the installation USB flash drive when turning on the laptop, go to the start menu (ESC key) and execute necessary settings in the “Boot Device Options” section (F9 key).

Samsung

1. To go to the UEFI-BIOS shell, press the “F2” key while starting the laptop.

2. Go to the “Boot” panel, place the cursor in the “Secure Boot” line.

3. In the submenu, change its parameter to “Disabled”.

4. At the warning message, select OK (confirm the change).

5. After disabling the protection, the “OS Mode Selection” item will appear in the same list. Set the CMS OS (or UEFI and Legacy OS) parameter in it.

6. Save your settings changes (F10).

7. Restart the laptop and go into the UEFI-BIOS again.

8. Go to: Security → Set Supervisor Password. Press "Enter", enter earlier set password. In subsequent fields, press “Enter” without entering any data.

At the "Changes...saved" message, use the Enter key again. Now the password has been reset and you have access to activate/deactivate Secure Boot protection.

Lenovo

1. Enter the UEFI console using the F2 key or the Fn+F2 combination (depending on the model).
2. Open: “Security” section → “Secure Boot” option. In its column, put the value “Disabled”.
3. Save the option value (press F10).

Dell

In Dell laptops equipped with the InsydeH2O shell, deactivation of protection is performed as follows:

1. The menu opens: Boot tab → UEFI Boot subsection.
2. The “Secure Boot” line is set to “Enabled”.
3. The settings are saved and the laptop restarts.

Bottom line

As you can see, the principle of disabling Secure Boot protection is different models almost the same except for some nuances related to the location of the menu and additional add-ons. Even if your PC or laptop model is not included in this review, use the secure boot option to deactivate basic algorithm. Namely: entering the UEFI shell → disabling Secure Boot (+ on some computers, enabling compatibility with other OSes) → saving the created shell configuration → rebooting the system.

Successful and quick computer setup! Be extremely careful when changing the value of options in the UEFI console.

UEFI Secure Boot- This is a standard protection on the BIOS, which limits the ability to launch USB drives as a boot drive. This security protocol can be found on computers with Windows 8 and later. Its essence is to prevent the user from booting from the Windows 7 installer and below (or an operating system from another family).

This function can be useful for the corporate segment, as it allows you to prevent unauthorized booting of your computer from unauthorized media that may contain various malware and spyware.

Ordinary PC users do not need this feature; on the contrary, in some cases it can even interfere, for example, if you want to install Linux together with Windows. Also, due to problems with UEFI settings, an error message may appear while working in the operating system.

To find out if you have this protection, it is not necessary to go to the BIOS and look for information about this, just do a few simple steps without leaving Windows:

Depending on your motherboard manufacturer, the process for disabling this feature may look different. Let's consider options for the most popular manufacturers of motherboards and computers.

Method 1: For ASUS

Method 2: For HP

Method 3: For Toshiba and Lenovo

Here, after entering the BIOS, you need to select the partition "Security". There should be a parameter "Secure Boot", opposite which you need to set the value "Disable".

Method 4: For Acer

If with previous manufacturers everything was relatively simple, then initially the required parameter will not be available for making changes. To unlock it, you will need to set a BIOS password. You can do this using the following instructions:

If you bought a PC or laptop with a pre-installed Windows 8 operating system, and then wanted to remove it and change it, for example, to “Seven” or even any version of Linux OS, then you will have problems with this, due to the “Secure boot” system "Boot".

Microsoft developers during development latest version Windows 8 has completely abandoned support for sixteen-bit BIOS versions. Instead, the system became 100% compatible with the so-called UEFI BIOS, which has a secure boot system “Secure Boot”.

The Secure Boot system is designed to prevent startup malware before loading the operating system and antivirus software, respectively.

It would seem like a very wonderful system, but due to Secure Boot it is simply impossible to install another operating system or software, not having digital signature. Let's give a simple example. You bought new computer with pre-installed Windows 8 and decided to install on it additionally or instead of G8 OS Windows 7 or some Unix-like system. You can forget about it, the secure boot feature will not allow you to do this. If you do not agree with this state of affairs, then you will need to disable Secure Boot in the UEFI BIOS, that is, go into the I/O system and disable this annoying system.

Manufacturers of modern motherboards mostly deactivate this function even before they complete the devices or put them on sale. If Unix developers of similar systems have already decided this problem in their OS by adding support for secure boot UEFI BIOS, their colleagues from Microsoft do not intend to make changes to Windows Vista and Windows 7. And given that these systems are used by many millions of people, knowing how to disable Secure Boot is simply necessary in order to fully use the PC.

Disabling Secure Boot is very simple; to do this, you need to restart the PC and at the very beginning of its boot, press the “Del” key on the keyboard several times (other key options are possible, for example, F8 or F2) to launch the BIOS (input-output system).

We will not describe the process of disabling Secure Boot for all BIOSes (meaning software developers). Since this is simply not realistic, and we do not yet have such an opportunity to have desktop and mobile PCs of all manufacturers at hand. Let's use the Pheonix SecureCore Tiano as an example; this BIOS is used on almost all laptops manufactured by Samsung, as well as for UEFI BIOS Utility Asus.

• Disabling Secure Boot in Samsung laptops. Go to BIOS to the Boot section. Find the Secure Boot option and set it to “Disabled”, then set the OS Mode Selection to “UEFI and CSM OS”. Ready. Now you can remove Windows 8 from Samsung laptop and install another OS.
• Disabling Secure Boot in Asus laptops. Open the UEFI “Boot” section, then “Secure Boot”, then go to the “Key Management” option and change its value to “Crear Secure Boot Keys”. Done, the intrusive feature is disabled.

CSM is a compatibility support module for the operating system. If your motherboard is equipped with a BIOS (UEFI) different from those described above, then in addition to the steps described, try activating the Legacy BIOS function.

CSM stands for Compatibility Support Module for Operating System. In other BIOS (UEFI), you may need to enable the compatibility option: Legacy BIOS. If you have problems with the installation, you can try switching the SATA controller to AHCI mode. How this is done is written in the article “Enable ACHI support for SATA drives”

It would seem that it costs a lot to reinstall the operating system on a computer; nothing is difficult, especially if you have done it many times already. The very first thing you need to do is set the BIOS to boot from the disk or flash drive where the distribution kit with the installation of the operating system is located. It turns out that everything doesn’t always happen as usual on a laptop. ASUS X550c operating room was preinstalled Windows system 8, the manufacturer has configured the BIOS in such a way that it is not immediately possible to find the boot priority, that is, booting from a disk or flash drive.

To change the settings, you need to go into the BIOS by pressing the F2 key when turning on the computer.

In the tab Boot needed at the point Launch CSM set parameter Enabled. If it is not active, which is often the case, you need to go to the tab Security and vice versa Secure Boot Control install Disabled.

After that, press the F10 key and re-enter BIOS. After reboot the item Launch CSM will become active. As I wrote above, you need to change the parameter to Enabled.

The item will appear Launch PXE OpROM with parameter Disabled, there is no need to change it. For further settings, you will need to save and reboot, press the F10 key, go back to the BIOS. After the reboot you need to enter the tab again Boot. Now we have two loading areas available.