I had the same problem on a Lenovo ThinkPad P52.
In the BIOS, Secure Boot was enabled, but Windows 11 showed "Secure Boot State" as "Off".
The cause was, that the Secure Boot Mode in my BIOS was set to "Setup Mode".
To change it to "User Mode", I had to select "Restore Factory Keys" on the Security Page in the BIOS.
After that, I could start the computer and Windows 11 displayed that the Secure Boot State is "On".
Maybe this helps someone.
Top answer 1 of 5
277
I had the same problem on a Lenovo ThinkPad P52.
In the BIOS, Secure Boot was enabled, but Windows 11 showed "Secure Boot State" as "Off".
The cause was, that the Secure Boot Mode in my BIOS was set to "Setup Mode".
To change it to "User Mode", I had to select "Restore Factory Keys" on the Security Page in the BIOS.
After that, I could start the computer and Windows 11 displayed that the Secure Boot State is "On".
Maybe this helps someone.
2 of 5
26
I’ve been searching for hours, I finally can play valorant again lol. Thank you!!
Reddit
reddit.com › r/gigabyte › secure boot enabled but not active for windows 11
r/gigabyte on Reddit: Secure boot enabled but not active for windows 11
November 2, 2021 -
Hey, I’m trying to get my pc to work with windows 11. I enabled tpm 2.0 and secure boot before installing it, Updated my bios and installed. However secure boot says it’s off on windows 11 and not active in bios even though it was on when I was running windows 10. I have an Aorus elite b550, r7 5800x and 3070. Any help with this would be great. Thanks in advance!
Top answer 1 of 5
139
As posted make sure its Secure Boot you need - not just UEFI boot. Make sure you are booting OK with CSM disabled before changing Secure Boot settings. People have bricked their system by following the wrong steps. I also had it saying enabled not Active - this is a BIOS glitch it's not really enabled On the secure boot settings if it says Mode:User you should be able to simply Enable Secure Boot Otherwise (if it says Mode:Setup) - Disable Secure Boot if it says Enabled - If it says Standard change to Custom - Change Custom to Standard accepting Factory Defaults - Enable Secure Boot
2 of 5
5
Go to BIOS and reset the keys. I enabled secure boot and it showed "off" in Windows. After I went into BIOS and reset the keys, it shows as "on" now. EDIT: Reset keys = reset factory defaults (I think that's what it's called).
I have a problem with my secure boot is off even though in BIOS is enable
Secure boot is legit off in windows but is on in BIOS I tried the tricks I saw the one changing the secure boot mode but I just don't have that option in my BIOS my manufacturers is biostars More on learn.microsoft.com
4
5
September 4, 2024Secure Boot Enabled in BIOS, but not Windows 11
I had the same problem on a Lenovo ThinkPad P52. In the BIOS, Secure Boot was enabled, but Windows 11 showed "Secure Boot State" as "Off". More on answers.microsoft.com
22
15
Enabling secure boot cause PC to not boot
After converting legacy to UEFI, I restarted into the UEFI menu, made sure CSM was disabled, I then enabled TPM and secure boot, after saving and exiting my pc will not display anything. The fans just ramp up and down without anything else happening. My mouse and keyboard don't receive power and... More on forums.tomshardware.com
7
0
March 7, 2022Is 'Secure Boot' Enabled or Disabled by Default ?
In a lot of cases that means its enabled Secure Boot by default, as well as adding ftpm support. So since you on 2806, its probably on in your bios. rog.asus.com Its off on my PC, even though I am on 11 and its meant to want it, Win 11 doesn't care if its on or not, just that PC can turn it on. I never enabled it. Click to expand... weirdly it is not on by default in my Bios. it's currently enabled on Windows UEFI Mode because I manually set it that way, but ... More on forums.tomshardware.com
16
0
November 12, 2023Videos
02:55
Fix Secure Boot Enabled in BIOS but OFF in Windows 11, 10 - YouTube
04:50
Secure Boot Enabled in BIOS but Windows Shows Off | Fix for Windows ...
04:43
Secure Boot Enabled but NOT Active in BIOS - Easy Fix! - YouTube
04:42
FIX Secure Boot State is OFF after Enabling in BIOS - YouTube
r/24hoursupport on Reddit: Computer will not boot in secure boot mode
r/gigabyte on Reddit: Not booting anymore after enabling Secure Boot
EA Help
help.ea.com › home › technical issues › how to use secure boot
How do I use Secure Boot on my PC?
2 weeks ago - From the System Information window that opens, select System Summary. ... Secure Boot State value should be On. If Secure Boot State is Off, we’ll need to check the BIOS Mode and then enable it.
Eleven Forum
elevenforum.com › windows support forums › antivirus, firewalls and system security
Secure boot enabled in BIOS but not on | Windows 11 Forum
July 25, 2025 - I had the same problem as your few months ago! What I did... I have restart Windows then go to my BIOS setting to disable Secure boot in my BIOS setting then boot up to Windows then restart Windows go back BIOS setting to re enable Secure boot to save the setting and boot up Windows.
Top answer 1 of 4
6
You need to set Platform in "User Mode", Secure Boot in "Standard Mode" and Load Setup Defaults.
You could do it by Restoring Factory Keys:
- BIOS - Security - Secure Boot - Restore Factory Keys - Enter
- BIOS - Restart - OS Optimized Defaults - Enabled
- BIOS - Restart - Load Setup Defaults - Enter
- Go to BIOS - Main and check if UEFI Secure Boot is ON.
2 of 4
3
You might be in Setup Mode because you have deleted the Platform Key in your BIOS. Enabling Secure Boot in this state enables your OS to write a new Platform Key (possibly useful for securing a Linux installation). But if you don't do that, you remain in Setup Mode and the Secure Boot State, indicating the Platform Key has been used to secure the system, will remain off.
Your BIOS might have an option to restore the default Platform Key, possibly called "Restore Default Secure Boot Keys", which restores the Microsoft Key. After doing that, your Secure Boot State will be On when booting Windows.
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 2188125 › i-have-a-problem-with-my-secure-boot-is-off-even-t
I have a problem with my secure boot is off even though in BIOS is enable - Microsoft Q&A
September 4, 2024 - In the System Information window, look for the "Secure Boot State" item. If it says "Off," then Secure Boot is indeed disabled. ... Secure Boot requires UEFI mode. Ensure your system is booting in UEFI mode rather than Legacy/CSM mode.
HP Support Community
h30434.www3.hp.com › t5 › Desktop-Operating-Systems-and-Recovery › Secure-Mode-shows-enabled-in-BIOS-but-in-system-information › td-p › 9431808
Secure Mode shows enabled in BIOS but in system information shows OFF
July 7, 2025 - Download HP Diagnostics for Windows. Run a full system test, especially on BIOS and security modules. If Secure Boot still shows OFF in msinfo32, even after all this, it may be worth resetting BIOS to defaults and reconfiguring from scratch.
The Windows Club
thewindowsclub.com › the windows club › secure boot state off in system information, but on in bios
Secure Boot state off in System Information, but on in BIOS
3 weeks ago - Add TheWindowsClub as a Preferred Source on Google Search · When you enable Secure Boot in the BIOS, but Windows System Information still shows it as off, the problem may be with the BIOS keys.
CalCom
calcomsoftware.com › home › blog › disable secure boot in windows: a step-by-step guide
Disable Secure Boot in Windows: A Step-by-Step Guide
March 22, 2026 - Usually, it is present in the “Security”, “Boot configuration”, or the “Authentication” To turn off Secure Boot, click on the “Disable” button or turn off the “On” option.
Tom's Hardware Forum
forums.tomshardware.com › home › software › windows 11
[SOLVED] - Enabling secure boot cause PC to not boot | Tom's Hardware Forum
March 7, 2022 - Make sure CSM is disabled. In Secure Boot, select custom under Secure Boot Mode, Select Restore Factory Keys, Say YES to reset without saving. When BIOS restarts, access BIOS and change Secure Boot Mode back to Standard and then Yes to restart without save. Let Windows boot fully.
Activision Support
support.activision.com › articles › trusted-platform-module-and-secure-boot
Trusted Platform Module (TPM) 2.0 and Secure Boot for Call of Duty
April 30, 2026 - Your BIOS settings and interface may vary depending on your hardware manufacturer. Consult your motherboard manufacturer’s manuals and support resources for more detailed information. Press Windows Key + R to open the Run dialog box. Type msinfo32 and hit Enter. In the System Information window (you can use the search bar to find each setting): ... Secure Boot State: Off Your system supports Secure Boot, but it’s currently disabled.
EaseUS
easeus.com › computer instruction › (solved!) secure boot enabled but not active🔥
Secure Boot Enabled But Not Active - How to Fix?🔥
August 11, 2025 - UEFI Boot Mode Enabled: Your BIOS/UEFI firmware must be set to UEFI mode, not Legacy/CSM. This is essential for Secure Boot to function. TPM 2.0 Enabled: Trusted Platform Module (TPM) version 2.0 must be active on your device.
Microsoft Support
support.microsoft.com › en-us › windows › windows-11-and-secure-boot-a8ff1202-c0d9-42f5-940f-843abef64fad
Windows 11 and Secure Boot - Microsoft Support
Most modern PCs support Secure Boot, but certain firmware settings can make a device appear as if Secure Boot isn’t available. These settings can be changed in the device firmware. Firmware—commonly referred to as UEFI (and sometimes called BIOS)—is the software that runs before Windows when you turn on your PC.
DiskPart
diskpart.com › aomei software › free partition software › 3 ways to fix secure boot enabled but not active in windows 11/10
3 Ways to Fix Secure Boot Enabled But Not Active in Windows 11/10
March 14, 2025 - Step 1. Disable CSM using a specific key to enter the BIOS; usually DEL, F2, F10, or F12. Step 2. Navigate to the Boot or Security tab, find the Secure Boot menu, and then find the CSM option.
Tom's Hardware Forum
forums.tomshardware.com › home › software › windows 10
Question - Is 'Secure Boot' Enabled or Disabled by Default ? | Tom's Hardware Forum
November 12, 2023 - It can alter them while its running but it can't change them in bios settings (Programs like armoury crate can change settings while they are running but the settings reset to what they are in bios when windows isn't running). So if you hadn't reset the BIOS at some stage, it would still be how it was. OEM PC/laptops may have it enabled by maker, but most PC with win 10 on them that are not OEM made, probably have it off. New WIn 11 installs probably have it on. I think it is required on a clean install. Click to expand... well my worst case scenario brain got worried that a rootkit had changed the Secure Boot settings, that's why I was so worried in the first place, even after doing several MalwareBytes Rootkit scans I didn't perform the System Restore to try an rollback the Bios changes (if there were any), I might've made it sound like I did.
Top answer 1 of 3
1
Step 1: Enter the "BIOS" in your system. Step 2: Look for "System Mode." Step 3: If it is set to "Setup", change it to "User." Step 4: Open "Secure Boot Mode" & switch it to "Custom" from "Standard."
————————If this answers your question and solved your query please "Click on Yes" or "Click on Like" if you find my answer useful.
2 of 3
0
Thank you, friends, for your help. Unfortunately, we couldn’t solve the issue. I followed all the steps you mentioned, but it still doesn’t work. The customer support says they will only provide information in exchange for payment. All my friends are able to play the game, but I can’t play on FACEIT.
itten. It doesn't work.
Reddit
reddit.com › r/buildapc › secure boot enabled but not active?
r/buildapc on Reddit: Secure boot enabled but not active?
August 8, 2025 -
Secure boot is enabled but it says not active. My BIOS mode is UEFI. My drive is GPT. And CSM is off. Also secure boot was on by default I just checked everything I can’t find out why it won’t work.
I would like to get it working so I can play the BF6 beta
Top answer 1 of 6
7
The problem is likely that the cryptographic keys secure boot needs to actually function haven't been installed or provisioned by the motherboard. Think of the "Secure Boot: Enabled" setting as flipping the main power switch, but the actual security system (the keys) isn't loaded yet. So, while the feature is technically turned on, it has no rules to follow, which is why Windows reports it as "Not Active." This often happens after a BIOS update, a CMOS clear, or sometimes even on a brand-new motherboard. The fix is almost always found in the exact same spot in your BIOS where you enabled Secure Boot. You need to reboot your PC and go back into that "Secure Boot" menu. Look for an option right near the main toggle that says something like "Restore Factory Keys," "Install default Secure Boot keys," or "Key Management." The exact wording will vary depending on your motherboard brand (ASUS, MSI, Gigabyte, etc.). Select that option to install the default keys. It should ask you to confirm. Once you do that, save your changes and exit the BIOS (usually by pressing F10). When your computer restarts, Windows should now (hopefully) correctly recognize Secure Boot as fully active.
2 of 6
1
Is there anybody here based in Toronto? I got the same problem with my New Asus. Pls contact me. I need help with this.
Windows Report
windowsreport.com › how to › secure boot enabled but not active in windows 10: 5 solutions
Secure Boot Enabled But Not Active in Windows 10: 5 Solutions
August 7, 2025 - To fix the secure boot enabled but not active in Windows 10, you need to change the platform module and enable secure boot once again.
Stellar Info
stellarinfo.com › home › [solved] – secure boot is greyed out on windows 11
How to Fix the Greyed Out Secure Boot option on Windows 11?
If the Secure Boot is greyed out in BIOS, it could be due to improper boot drive partition style or incompatible hardware. You can fix the greyed-out Secure Boot option by restoring the BIOS security settings or changing the boot drive’s partition ...
Published 2 weeks ago