How to disable secure boot in BIOS. How to disable secure boot in BIOS. Disabling Secure Boot on an Acer laptop

Today we will talk about what Secure Boot is. How to disable this element and why it is needed, we will consider further. We are talking about hardware configuration software that is used today instead of BIOS on various motherboards.

General information

We have already defined what Secure Boot is. How to disable this element is a question that becomes especially relevant if the function interferes with booting from a flash drive or disk during Windows installations or other operating system. There are a few other situations where deactivation may be necessary, but they are less common. It is very common for a message to appear on the main desktop indicating that the correct setting Secure Boot. We will also tell you how to disable this notification. The deactivation procedure largely depends on the UEFI interface. Therefore, recommendations for several options will be described below.

Options

First of all, let's move on to the UEFI settings. In other words, we go into the computer’s BIOS. There is the following way to do this:

  • If installed on PC Windows platform 8 or 8.1, go to the right panel and select “Options”.
  • Next, wait for the next menu to open and go to the “Change parameters” tab.
  • We use the “Update and Restore” function.
  • We wait for this tool to launch and select “Recovery”.
  • Click the “Reboot” button.
  • Then go to “Advanced Settings”, and then to “UEFI Software Settings”.
  • The computer will restart and display the necessary settings.

Delete

We continue to discuss the Secure Boot feature. How to disable it can only be understood after entering the BIOS. The first option for launching this element was described above. But a similar result can be achieved in another way. When turning on the desktop computer, press Delete. To solve the question of how to disable Secure Boot on a Lenovo laptop, you may need another key: most often F2. Pay attention to the initial screen when you turn it on. It often indicates the button we need.

Deactivation example

Next, we will take a closer look at how to disable Secure Boot on an Asus laptop. This instruction can be considered universal, since it will fit most other motherboards that support the function we are interested in.

  • Go to the OS Type item and install Other OS.
  • After this, we save the settings - as a rule, the F10 key is responsible for this.
  • On certain types of motherboards from Asus, for this purpose, go to the Security or Boot tab, then set the Secure Boot parameter to Disabled. The task is complicated by the fact that the function we are interested in, as a rule, cannot be disabled when basic settings. Switching between Enabled and Disabled is not available.
  • To make the change available in the Security section, if necessary, set a password using Set Supervisor Password. Only after this do we disable secure boot.
  • Additionally, you may need to activate Legacy Mode or CSM boot mode instead of UEFI. On certain motherboards from Gigabyte, disabling Secure Boot mode is available in the “BIOS Settings” section.

    • For start personal computer from the flash drive you will also need to activate CSM loading and previous version inclusions. The described options for finding the required function work on most computers and laptops. Certain details may change, but the outlined algorithm remains constant. For example, on some HP laptop models you need to go to the System Configuration section. Next, select Boot Options. Find Secure Boot in the menu that appears.

    We should also say briefly about Acer laptops. In them, the function we are interested in is deactivated through the Authentication section. You may need to go to Advanced and then open System Configuration to achieve the result.

    Computer viruses have become an integral part of our lives. Even those people who have never used computers have heard about them. To improve protection against malware, the Secure Boot protocol was introduced. What it is eaten with and how to turn it off will be described in detail in the article.

    Secure Boot is one of the innovations introduced with the introduction of UEFI. This in turn is a BIOS receiver. He is, accordingly, responsible for preparing and loading the OS. BIOS can be considered a very simple utility with a primitive design that is flashed into the motherboard. UEFI performs the same functions, but it is already a very beautiful and advanced program. For example, with persistence, using UEFI you can even view the contents of connected drives, which would be considered an incredible innovation for BIOS.

    The creators of UEFI were not guided by aesthetic motives alone. One of the important design goals was to detect and limit the impact of malware. It was assumed that the technology would prevent it from loading along with the operating system (OS), as well as execution at the OS kernel level after it was launched. The honor of fulfilling this important mission fell to the Secure Boot protocol. The technical implementation was as follows: a cryptographic scheme with open and closed signatures (electronic digital signatures, EDS) was used. IN general view the goals were achieved, but in practice this required certain and correct actions not only on the part of users, but also on the part of computer equipment manufacturers. Describing the entire process will take a lot of time, so let’s focus on the key features:

    • software components (drivers, OS loaders) have special digital signatures, they are also in the motherboard firmware, but the characteristics of these digital signatures are different;
    • when using computer resources, components must prove using a digital signature that they are not viruses;
    • The key security factor is the private key, which ideally should be unique for each PC.

    Difficulties with the technology began at the implementation stage, when Microsoft announced that using the protocol it would limit the installation of other operating systems on computers with pre-installed Windows. Such plans were then abandoned under pressure from the public, but the aftertaste remained. Today, the main difficulty is that motherboard manufacturers use the same private keys for all their products or for individual lines. In any case, good intentions led to a dead end.

    In the vast majority of cases, disabling Secure Boot is worth solving two problems:

    1. If the OS does not install or load.
    2. If it is impossible to boot from a bootable USB flash drive.

    Secure Boot itself does not load the system in any way, since it works at a lower software level. Disabling the protocol will definitely not improve system responsiveness or increase processor speed.

    How to disable Secure Boot protection in BIOS?

    Note that some users mistakenly think that the Secure Boot protocol is disabled in the BIOS. This rather primitive firmware does not, did not, and cannot have SecureBut support. This security protocol works exclusively on UEFI and must be disabled there. The nature of this error is quite simple. Over the years, users have become accustomed to the fact that everything that appears on the screen before loading the OS is the BIOS. In reality, the days of this software add-on are fading and it is already obsolete in any respect.

    Examples of disabling Secure Boot on different laptops and motherboards

    The general algorithm is always the same:

    1. Login to UEFI.
    2. Search for the required option.
    3. Disabling SecureBoot.
    4. Recording changes.

    It is important that this security protocol is only supported on Windows 8 and later. Therefore, if you have Secure Boot enabled in your motherboard firmware, but Windows 7 is installed on your PC, then you do not need to disable anything. The secure boot option still doesn't work, and possible problems With the launch of the OS you need to look in other places.

    How to disable Secure Boot and UEFI on Acer Aspire laptop?

    There are many models of laptops from this manufacturer, but the specifics are that you first need to create your own password. The general algorithm of action is as follows:

    • go to BIOS-UEFI by pressing the F2 or Delete key;
    • go to the “Security” tab, select the “Set Supervisor Password” option;
    • In the special window, enter the password 2 times. Don't get fancy, use a simple combination;
    • success will be confirmed with the message “Changes have been saved”;
    • go to the “Boot” tab and in the “Boot Mode” line specify the value “Legacy”;
    • press F10 and record modifications to the settings;
    • upon subsequent reboot, log into UEFI again;
    • go to the “Security” tab, select the “Set Supervisor Password” option, enter the previously specified password;
    • go to the “Boot” tab and in the “Secure Boot” line specify the value “Disabled”;
    • save the changes again.

    Disabling Secure Boot on Pavilion and other HP laptops?

    1. To enter the BIOS, press ESC or ESC => F10 before starting Windows.
    2. Go to the “System Configuration” tab, and in it look for the “Boot Options” line.
    3. Set the “Secure Boot” criterion to “Disabled” and the “Legacy support” criterion to “Enabled”.
    4. The system will ask if you are really ready to change the settings - confirm this by clicking “Yes”.
    5. At the end, you need to save the changes made by pressing F10 and confirming “Yes”.

    Be careful when rebooting. The system will play it safe and turn on “fool protection.” You need to look at what comes after the inscription “ Operating System Boot Mode Change (021)” - the digital sequence will be indicated there. Type it and press Enter. If you just need to disable Secure Boot, then you don't need to do anything further. If initially everything was done for the sake of being able to boot from a USB drive, then immediately after passing the “fool proof” press ESC, and then F9. Set the required flash drive to maximum priority so that it loads first onto the hard drive.

    On Dell laptops

    1. F12 immediately after turning on the computer and before starting the OS.
    2. In the top panel, go to the Boot tab and go to the UEFI BOOT subsection.
    3. Set the “Secure Boot” criterion to “Disabled”.
    4. Save the changes (F10 => “Yes”) and restart the laptop.

    Secure Boot on Lenovo and Toshiba laptops

    To enter UEFI on these devices, you need to press F12, and then perform the following steps:

    • set the “Secure Boot” criterion to “Disabled”;
    • go to the “Advanced” tab, and in it go to the “System Configuration” menu;
    • set the “Boot Mode (OS Mode Selection)” criterion to the “CSM Boot (CMS OS), (UEFI and Legacy OS)” option;
    • save everything by pressing F10 => “Yes”.

    Disabling Secure Boot on motherboards

    The desktop motherboard market is quite conservative and the clear leaders are 2 companies: Asus and Gigabyte. They supply more than half of all equipment, so it is most rational to consider methods for deactivating Secure Boot in the context of these manufacturers. In any case, the third and fourth places have long been occupied by MSI and ASRock - the first four are entirely made up of Taiwanese companies. Bottom line: there will still be no fundamental differences in the disabling instructions and most users will find below exactly what they are looking for.

    Note that you can switch directly to UEFI in some cases directly from Windows (from version 8 and later). To do this, try the following:

    • On the desktop on the right, call up the sliding panel.
    • Then follow the path: “Settings” => “Changing settings...” => “Update and...” => “Recovery”;
    • In the window that appears, find the option to reboot the system and set this line to “UEFI Settings” or “UEFI Firmware Settings”;
    • Then click on “Reboot” and UEFI should start automatically.

    How to disable Secure Boot on Gigabyte motherboard?

    After logging into UEFI (by pressing F12 before starting the OS), proceed as follows:

    • go to the “BIOS Features” tab;
    • set the “Windows 8 Features” criterion to “Other OS”;
    • for the “Boot Mode Selection” criterion - “Legacy only” or “UEFI and Legacy” (there is not much difference between them);
    • for the criterion “Other PCI Device ROM Priority” - “Legacy OpROM”.

    After all, you need to record the changes, that is, press F10 => “OK”.

    Asus motherboards and laptops

    Let us immediately note that most often on motherboards of this particular manufacturer an error appears when loading the OS: Invalid signature detected. Check Secure Boot Policy in Setup. In most cases, to fix the problem you should turn off Secure Boot, and to do this you need to:

    • go to UEFI - press F2, Delete or the Fn+F2 key combination before loading the OS;
    • on home screen press F7 (Advanced Mode), and then go to the “Boot” menu => “Secure Boot Menu”;
    • specify the value “Enabled” in the “Secure Boot State” line, and “Other OS” in the “OS Type” line;
    • go back one level to the “Boot” menu => “Compatibility Support Module (CSM)”;
    • set the “Launch CSM” line to “Enabled”, and the “Boot Device Control” line to “UEFI and Legacy...” or “Legacy OpROM...”, and the “Boot” line to From Storage Devices" - "Both Legacy opROM first", or "Legacy opROM first";
    • after that, click on F10 and save all changes, and then check the correctness of the settings made.

    Specifically for Asus laptops, the algorithm will be as follows:

    • go to UEFI;
    • go to the “Security” tab;
    • find the line “Secure Boot Control”, specify the value “Disabled” in it;
    • go to the “Boot” tab;
    • Find the line “Fast Boot”, set it to “Disabled”, and in the line “Launch CSM” to “Enabled”.

    How to find out if Secure Boot is activated on Windows?

    This protocol is easy to activate and deactivate, and there are several proven approaches to understand the current status:

    1. Using system information. Launch the Run utility. To do this, you need to hold down the Win+R key combination, enter msinfo32 in the line that appears and press Enter. A new window will appear. Make sure that the “System Information” line is selected in its left panel. In the right pane, look for the line “Secure Boot Status”, which has only 2 values ​​“Enable” and “Disable”.
    2. At PowerShell help. In the Run utility, run the powershell command. A new window will open, into which copy the following: Confirm-SecureBootUEFI. If the response to this request is “True”, then the option is active, and if “False”, then it is deactivated. If a notification of a different nature appears, it means the motherboard does not support the Secure Boot function.
    3. Empirically. Create bootable USB flash drive with Windows and try booting from it after restarting the computer. If everything turns out successfully, then the option is disabled; in other circumstances, a corresponding message will be displayed indicating that it is impossible to download for security reasons.

    Conclusion

    1. Secure Boot appeared in the computer world relatively recently and this security protocol is a component of UEFI - a modern and current type of motherboard firmware.
    2. The security protocol prevents malware from running at a lower level than conventional antiviruses do. Therefore, if configured correctly, this technology can significantly increase the PC's resistance to viruses.

    Hello, dear readers! Today we will talk about one seemingly complex topic, which will sound like this: UEFI Boot - what is it? and how to disable UEFI in BIOS.

    Of course for simple user All these names and abbreviations do not mean anything, but nevertheless, when buying modern desktop computers and laptops, you will still come face to face with these concepts.

    Yes, friends, this is the same settings section on a blue background, which you can enter at the very beginning when you turn on the computer. Here's a picture to refresh your memory:

    Many more enthusiasts here have tried to play with the voltage and frequency of the main processor in order to increase the power of their machine. So, the BIOS microprogram was replaced by another, more modern one.

    And as you already understood, it is called UEFI. Among the new innovations in it, we can note support high resolutions screen, very large disks and working with a mouse.

    If you read all the lines above and did not understand anything at all, then watch a short video to reinforce the topic:

    So, it should definitely be said that a full-fledged UEFI system is not yet implemented in all modern computers. But some of its new functions, hitherto unseen, have been successfully implemented into the old BIOS shell.

    And one of them is the so-called UEFI Boot (full name Secure Boot). The purpose of its work is to prevent substitution of the system boot source, thereby reducing the use of unlicensed software.

    That is, the picture turns out to be such that now we will not be able to boot, for example, from a flash drive or a third-party drive. Indeed, in this situation, they simply will not be in the list of available devices:

    But really, decide this problem it is possible and very easy. To do this you need to make a couple of settings and that’s it. So let's get to work. So to speak, enough theory.

    And in order to disable UEFI functions in the BIOS, you must immediately enter it. As mentioned above, to do this you need to press a certain key combination immediately after turning on the computer.

    Thus, we disabled the main UEFI protection function from third-party bootloaders. Then you should go to the “Boot” section and set the parameters as in the screenshot below:

    After this, we should have a list of available devices. Now, by changing their position in the list, you can manipulate download sources. Again, using the author’s example, this can be done with a keyboard shortcut Fn+F5/F6:

    Well, after all the parameters have been entered, all that remains is to save the changes. This is done in the "Exit" menu by selecting "Exit Saving Changes":

    That's all, my friends, now you know exactly the answer to the question: UEFI Boot - what is it and how to disable UEFI in the BIOS. If you have any questions, feel free to ask them in the comments.

    Well, if you suddenly want to learn more about UEFI BIOS, then watch a short video where this topic opened more widely.

    Although in the vast majority of cases the user does not need to disable Secure Boot (this is the part of the computer that it is better not to mess with unnecessarily), sometimes it is still necessary to disable this protocol. Most often due to the need to install an old operating system (Windows 7, for example, or various Linux distributions), run the application from boot disk or install Windows from a distribution created for Legacy BIOS (the image does not match the operating mode of the motherboard may be the reason why).

    How to disable Secure Boot in Windows 10

    Note that Secure Boot is not part of the operating system. This is a protocol that is part of UEFI (UEFI itself can be called an operating system that lives in small memory chips on the motherboard and is responsible for running your PC), and is used to verify the authenticity of the system.

    Before disabling Secure Boot on your computer, check whether this protocol is activated on your computer and whether it is supported at all. And yes, don't do it just like that. Disable this feature only if you know why you need to disable it, and also fully trust the software that activated Secure Boot is swearing at.

    Warning: On some computers, disabling Secure Boot may prevent Windows from starting. You can restore Secure Boot in the same way as disabling it. If after trying to turn Secure Boot back on you do not achieve the desired result, try back to factory settings. By default, Secure Boot is always enabled, so a reset may help, but you will have to reconfigure the BIOS, including overclocking the processor, memory, or bridge.

    Click Win + R and enter msinfo32 . On the main tab System Information find the item Secure Boot State. It should be able On. If your motherboard does not support Secure Boot, it will say “Not available” or “Not supported”. You can also check the Secure Boot status in Security Center Windows Defender. Click on the built-in icon Windows antivirus at the bottom right of the screen and then go to the tab Device Security. Secure Boot will be listed in the list of security mechanisms (if supported).

    For reference: If your computer does not support Secure Boot, but you want to take advantage of this technology, you will have to buy yourself a newer motherboard.

    If Secure Boot is supported and enabled, you can try disabling it. To do this, restart your computer and go to the BIOS (it would be correct to say “go to UEFI,” but “BIOS” has become a universal concept that includes both Legacy BIOS and UEFI).

    U different manufacturers Secure Boot settings are located in different sections. You need to look for a page with computer boot (Boot) or security settings. For example, on maternal Asus boards you need to go to the section Boot – Secure Boot – OS Type and install Other OS instead of Windows UEFI. For other models, the Secure Boot option will be implemented more simply and will offer only two clear parameters - on or off. On Gigabyte motherboards, look for the Bios Features section and the Secure Boot item. There are also computers (Acer, for example), on which changing Secure Boot will be available only after setting the Administrator password inside the BIOS. This option is available on the Authentication tab. On some motherboards, the Secure Boot setting is signed as OS Type. In this case, Secure Boot will be enabled when choosing Windows 8 (10) and disabled when selecting Windows 7 or Other OS.

    Settings for Secure Boot on an HP computer.

    To boot from drives created for Legacy BIOS and MBR disks, you will also have to activate CSM (Compatibility Support Mode) support.

    Because every year, every UEFI update and every new motherboard developers change something in UEFI interfaces and improve them, it is difficult to indicate in the article all the paths to the option to disable Secure Boot on all existing motherboards. For our part, we can only suggest which BIOS tabs you should look into when searching. Search in sections System Configuration, Security, Authentication, BIOS Features, Boot and so on.

    If you bought a PC or laptop with a pre-installed operating system Windows system 8, and then wanted to remove it, change it, for example, “seven” or any version of the Linux OS in general, then you will have problems with this, due to the “Secure Boot” secure boot system.

    Microsoft developers during development latest version Windows 8 has completely abandoned support for sixteen-bit BIOS versions. Instead, the system became 100% compatible with the so-called UEFI BIOS, which has a secure boot system “Secure Boot”.

    The Secure Boot system is designed to prevent startup malware before loading the operating system and antivirus software, respectively.

    It would seem like a very wonderful system, but due to Secure Boot it is simply impossible to install another operating system or software, not having digital signature. Let's give a simple example. You bought a new computer with Windows 8 pre-installed and decided to install Windows 7 or some Unix-like system on it additionally or instead of G8. You can forget about it, the secure boot feature will not allow you to do this. If you do not agree with this state of affairs, then you will need to disable Secure Boot in the UEFI BIOS, that is, go into the I/O system and disable this annoying system.

    Manufacturers of modern motherboards, for the most part, deactivate this function even before they package the devices or put them on sale. If Unix developers similar systems have already solved this problem in their OS by adding support for secure UEFI boot BIOS, then their colleagues from Microsoft do not intend to make changes to Windows Vista and Windows 7. And given that these systems are used by many millions of people, knowing how to disable Secure Boot is simply necessary in order to fully use the PC.

    Disabling Secure Boot is very simple; to do this, you need to restart the PC and at the very beginning of its boot, press the “Del” key on the keyboard several times (other key options are possible, for example, F8 or F2) to launch the BIOS (input-output system).

    We will not describe the process of disabling Secure Boot for all BIOSes (meaning software developers). Since this is simply not realistic, and we do not yet have such an opportunity to have desktop and mobile PCs of all manufacturers at hand. Let's use the Pheonix SecureCore Tiano as an example; this BIOS is used on almost all laptops manufactured by Samsung, as well as for the UEFI BIOS Utility Asus.

    • Disabling Secure Boot in Samsung laptops. Go to BIOS to the Boot section. Find the Secure Boot option and set it to “Disabled”, then set the OS Mode Selection to “UEFI and CSM OS”. Ready. Now you can remove Windows 8 from your Samsung laptop and install another OS.
    • Disable Secure Boot in Asus laptops. Open the UEFI “Boot” section, then “Secure Boot”, then go to the “Key Management” option and change its value to “Crear Secure Boot Keys”. Done, the intrusive feature is disabled.

    CSM is a compatibility support module for the operating system. If your motherboard is equipped with a BIOS (UEFI) different from those described above, then in addition to the steps described, try activating the Legacy BIOS function.

    CSM stands for Compatibility Support Module for Operating System. In other BIOS (UEFI), you may need to enable the compatibility option: Legacy BIOS. If you have problems with the installation, you can try switching the SATA controller to AHCI mode. How this is done is written in the article “Enable ACHI support for SATA drives”