I had the same problem on a Lenovo ThinkPad P52.
In the BIOS, Secure Boot was enabled, but Windows 11 showed "Secure Boot State" as "Off".
The cause was, that the Secure Boot Mode in my BIOS was set to "Setup Mode".
To change it to "User Mode", I had to select "Restore Factory Keys" on the Security Page in the BIOS.
After that, I could start the computer and Windows 11 displayed that the Secure Boot State is "On".
Maybe this helps someone.
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 5516790 › i-cant-enable-secure-boot-at-all
I can't enable Secure Boot at all... - Microsoft Q&A
August 7, 2025 - You can try to convert the drive form MBR to GPT using the mbr3gpt tool in Windows, Microsoft reports the drive can be converted without data loss, but you should backup your personal files before attempting this method · https://docs.microsoft.com/en-us/windows/deployment/mbr-to-gpt · Then, when the drive is converted, boot into BIOS and change to UEFI Mode, then enable Secure Boot and turn on TPM if necessary ... Backup all your files, then clean install Windows 10 in UEFI Mode by booting form a bootable USB, then re-install all your software.
Tom's Hardware Forum
forums.tomshardware.com › home › software › windows 11
[SOLVED] - Enabling secure boot cause PC to not boot | Tom's Hardware Forum
March 7, 2022 - After getting into BIOS, fTPM was auto-enabled, I then disabled CSM and successfully got the secure boot to show as enabled in windows. Sadly windows doesn't want me to upgrade to windows 11. Thank you for the support though I can now use my PC again. ... Click to expand... When going to Settings>Update and Recovery, Windows 10 was saying it couldn't upgrade to Windows 11.
Secure Boot Enabled in BIOS, but not Windows 11
Hello! I've recevently been trying to get Secure Boot enabled on my machine, and I am at a bit of a loss. This came about as I was getting error "PCR7 binding is not supported..." error for device encryption, and after some research it seems… More on learn.microsoft.com
22
15
Secure boot enabled but not active?
The problem is likely that the cryptographic keys secure boot needs to actually function haven't been installed or provisioned by the motherboard. Think of the "Secure Boot: Enabled" setting as flipping the main power switch, but the actual security system (the keys) isn't loaded yet. So, while the feature is technically turned on, it has no rules to follow, which is why Windows reports it as "Not Active." This often happens after a BIOS update, a CMOS clear, or sometimes even on a brand-new motherboard. The fix is almost always found in the exact same spot in your BIOS where you enabled Secure Boot. You need to reboot your PC and go back into that "Secure Boot" menu. Look for an option right near the main toggle that says something like "Restore Factory Keys," "Install default Secure Boot keys," or "Key Management." The exact wording will vary depending on your motherboard brand (ASUS, MSI, Gigabyte, etc.). Select that option to install the default keys. It should ask you to confirm. Once you do that, save your changes and exit the BIOS (usually by pressing F10). When your computer restarts, Windows should now (hopefully) correctly recognize Secure Boot as fully active. More on reddit.com
46
11
August 8, 2025Secure Boot Enabled in BIOS, but not Windows 10
All needed steps were taken. Disk was transfered from mbr to gpt and all steps were taken BIOS to enable Secure Boot, but System Information keeps showing Secure Boot as Off. *** Moved from Windows / Windows 10 / Windows update, recovery, and backup *** More on learn.microsoft.com
2
1
July 20, 2024Can't boot into Windows 10 while secure boot is enabled
Secure Boot only works in UEFI mode. Likely your installation was done by booting with CSM which is a BIOS emulation boot mode. Since CSM can't do Secure Boot when you turn on Secure Boot you can no longer boot. To test you can turn off Secue Boot, and turn off CSM and see if it boots; if it does not then it's not Secure Boot that is your problem, but rather that your installation is for legacy boot mode (CSM). The proper solution to 'fixing' this is to turn off CSM, and do a proper UEFI install of Windows. There are other ways to do it, but I've never cared for them so not looked into them too much; but if you google you'll probably find guides, many use something called mbr2gpt I think, or gpttool or something. You should back up all data before using these tools as they will modify the partition tables on the drive, and if somehing goes wrong your daa could become unaccessible. More on reddit.com
4
4
December 24, 2021Videos
03:20
How to Enable Secure Boot - YouTube
03:43
How to enable Secure Boot on your PC - YouTube
03:43
How To Enable Secure Boot On Windows 10/11 To Protect Your PC Against ...
02:33
How to Enable Secure Boot in Bios Menu Windows 10 or 11 (Settings ...
04:00
How To Enable Secure Boot & TPM 2.0 (100% Works) - YouTube
01:52
How to Enable Secure Boot in Bios on Windows 10 PC (100% Works!)
Microsoft Support
support.microsoft.com › en-us › windows › windows-11-and-secure-boot-a8ff1202-c0d9-42f5-940f-843abef64fad
Windows 11 and Secure Boot - Microsoft Support
While the requirement to upgrade a Windows 10 device to Windows 11 is only that the PC be Secure Boot capable by having UEFI/BIOS enabled, you may also consider enabling or turning Secure Boot on for better security. Note: In some cases, you may need to temporarily disable Secure Boot to address an issue. The instructions on this page can be used to disable Secure Boot.
MiniTool Partition Wizard
partitionwizard.com › home › partition magic › secure boot is unsupported or off in windows 11/10? [fixed]
Secure Boot Is Unsupported or Off in Windows 11/10? [Fixed]
November 29, 2024 - ... After analyzing all possible causes, we summarize 6 feasible ways to fix the “Secure Boot is not available” issue. Let’s try them in order until you get the problem solved. First of all, you need to enable Secure Boot in BIOS settings if ...
Top answer 1 of 5
277
I had the same problem on a Lenovo ThinkPad P52.
In the BIOS, Secure Boot was enabled, but Windows 11 showed "Secure Boot State" as "Off".
The cause was, that the Secure Boot Mode in my BIOS was set to "Setup Mode".
To change it to "User Mode", I had to select "Restore Factory Keys" on the Security Page in the BIOS.
After that, I could start the computer and Windows 11 displayed that the Secure Boot State is "On".
Maybe this helps someone.
2 of 5
26
I’ve been searching for hours, I finally can play valorant again lol. Thank you!!
Top answer 1 of 4
6
You need to set Platform in "User Mode", Secure Boot in "Standard Mode" and Load Setup Defaults.
You could do it by Restoring Factory Keys:
- BIOS - Security - Secure Boot - Restore Factory Keys - Enter
- BIOS - Restart - OS Optimized Defaults - Enabled
- BIOS - Restart - Load Setup Defaults - Enter
- Go to BIOS - Main and check if UEFI Secure Boot is ON.
2 of 4
3
You might be in Setup Mode because you have deleted the Platform Key in your BIOS. Enabling Secure Boot in this state enables your OS to write a new Platform Key (possibly useful for securing a Linux installation). But if you don't do that, you remain in Setup Mode and the Secure Boot State, indicating the Platform Key has been used to secure the system, will remain off.
Your BIOS might have an option to restore the default Platform Key, possibly called "Restore Default Secure Boot Keys", which restores the Microsoft Key. After doing that, your Secure Boot State will be On when booting Windows.
Reddit
reddit.com › r/buildapc › secure boot enabled but not active?
r/buildapc on Reddit: Secure boot enabled but not active?
August 8, 2025 -
Secure boot is enabled but it says not active. My BIOS mode is UEFI. My drive is GPT. And CSM is off. Also secure boot was on by default I just checked everything I can’t find out why it won’t work.
I would like to get it working so I can play the BF6 beta
Top answer 1 of 6
7
The problem is likely that the cryptographic keys secure boot needs to actually function haven't been installed or provisioned by the motherboard. Think of the "Secure Boot: Enabled" setting as flipping the main power switch, but the actual security system (the keys) isn't loaded yet. So, while the feature is technically turned on, it has no rules to follow, which is why Windows reports it as "Not Active." This often happens after a BIOS update, a CMOS clear, or sometimes even on a brand-new motherboard. The fix is almost always found in the exact same spot in your BIOS where you enabled Secure Boot. You need to reboot your PC and go back into that "Secure Boot" menu. Look for an option right near the main toggle that says something like "Restore Factory Keys," "Install default Secure Boot keys," or "Key Management." The exact wording will vary depending on your motherboard brand (ASUS, MSI, Gigabyte, etc.). Select that option to install the default keys. It should ask you to confirm. Once you do that, save your changes and exit the BIOS (usually by pressing F10). When your computer restarts, Windows should now (hopefully) correctly recognize Secure Boot as fully active.
2 of 6
1
Is there anybody here based in Toronto? I got the same problem with my New Asus. Pls contact me. I need help with this.
IObit
iobit.com › en › knowledge-how-to-enable-secure-boot-on-windows--355.php
How to Enable Secure Boot on Windows?
If it reads On, it means that Secure Boot is enabled and if it reads Off, it's disabled.
EA Help
help.ea.com › home › technical issues › how to use secure boot
How do I use Secure Boot on my PC?
1 week ago - If BIOS Mode is UEFI, then you can move on to how to enable Secure Boot. If BIOS Mode is Legacy, you’ll need to check if your Windows disk is MBR or GPT. Heads up: your Windows install drive must be set up correctly to support Secure Boot. Secure Boot needs to use GPT (GUID Partition Table) instead of MBR (Master Boot Record). Heads-up: This article is a general guide, but it might not follow the exact steps of your PC.If you’re not used to navigating to and updating your BIOS settings, you should contact a professional or your manufacturer’s customer support.
uBackup
ubackup.com › aomei software › articles › top fixes to secure boot is not enabled on this machine
Top Fixes to Secure Boot is Not Enabled on This Machine
November 14, 2024 - Before all the action starts, you could check whether the Secure Boot option is enabled or disabled in System information. 1. Go to Windows search bar, type msinfo32 and press Enter.
Windows Report
windowsreport.com › how to › secure boot enabled but not active in windows 10: 5 solutions
Secure Boot Enabled But Not Active in Windows 10: 5 Solutions
August 7, 2025 - Secure Boot feature disabled – Check if the Secure Boot option in UEFI firmware settings is set to Disabled; the feature won’t work, even if it is technically enabled. So, double-check the settings in BIOS to be sure.
MiniTool Partition Wizard
partitionwizard.com › home › clone disk › how to fix windows 10/11 not booting after enabling secure boot
Windows Won't Boot After Enabling Secure Boot? 12 Proven Fixes
2 weeks ago - Once done, restart your PC and check if the “Windows 10 won’t boot with Secure Boot enabled” error gets fixed. Microsoft recently fixed startup issues caused by outdated Windows updates. You need to install every pending Windows update before you can apply the patch that fixes this “Windows does not start after enabling Secure Boot” issue.
Microsoft Support
support.microsoft.com › en-us › topic › secure-boot-troubleshooting-guide-5d1bf6b4-7972-455a-a421-0184f1e1ed7d
Secure Boot troubleshooting guide - Microsoft Support
If this task is disabled or missing, Secure Boot certificate updates cannot be applied. The Secure‑Boot‑Update task must remain enabled for Secure Boot servicing to function. ... Secure Boot certificate updates require coordination between Windows and UEFI firmware, including writing UEFI variables that store Secure Boot keys and certificates.
Activision Support
support.activision.com › articles › trusted-platform-module-and-secure-boot
Trusted Platform Module (TPM) 2.0 and Secure Boot for Call of Duty
April 30, 2026 - If you are having difficulty finding ... motherboard’s official documentation for detailed instructions. Secure Boot (or Secure Boot State) should be set to Enabled....
DiskPart
diskpart.com › aomei software › free partition software › 3 ways to fix secure boot enabled but not active in windows 11/10
3 Ways to Fix Secure Boot Enabled But Not Active in Windows 11/10
March 14, 2025 - A common culprit is the "Secure Boot Disabled" status in the UEFI firmware settings. Although it appears enabled in the Windows interface, if this option is disabled in the firmware settings, the feature remains inactive, resulting in the above ...
Microsoft Learn
learn.microsoft.com › en-us › mem › intune › user-help › you-need-to-enable-secure-boot-windows
Company Portal device setting requirements for Windows - Microsoft Intune | Microsoft Learn
April 30, 2024 - This error could be a result of poor network connectivity, low battery, battery saver mode, or a Company Portal error. To resolve, verify that you have a strong network reception.
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 2199187 › secure-boot-enabled-in-bios-but-not-windows-10
Secure Boot Enabled in BIOS, but not Windows 10 - Microsoft Q&A
July 20, 2024 - Secure Boot requires the Windows Boot Manager to be set as the primary boot device. Check your BIOS/UEFI boot order settings and ensure that "Windows Boot Manager" is listed first. ... Ensure that your disk is indeed using the GPT partition scheme.
Wikihow
wikihow.com › computers and electronics › operating systems › windows › how to turn on secure boot on windows 10 & 11: simple guide
How to Turn on Secure Boot on Windows 10 & 11: Simple Guide
March 10, 2026 - It will say On (which means Secure Boot is enabled) or Off (which means Secure Boot is disabled). ... Open Windows settings. To do this, click the Windows (Start) button in the lower-left corner of the screen, then click the cogwheel icon.
Microsoft Learn
learn.microsoft.com › en-us › troubleshoot › mem › intune › device-protection › secure-boot-enabled-device-shows-not-compliant
Secure boot enabled Windows 10 device shows Not Compliant in Intune - Intune | Microsoft Learn
March 30, 2026 - You create a compliance policy for Windows 10 devices in Intune. You set the Require Secure Boot to be enabled on the device setting to Require. In this scenario, a Windows 10 device that meets the requirement is marked as Not Compliant.
EaseUS
easeus.com › computer instruction › (solved!) secure boot enabled but not active🔥
Secure Boot Enabled But Not Active - How to Fix?🔥
August 11, 2025 - UEFI Boot Mode Enabled: Your BIOS/UEFI firmware must be set to UEFI mode, not Legacy/CSM. This is essential for Secure Boot to function. TPM 2.0 Enabled: Trusted Platform Module (TPM) version 2.0 must be active on your device.