I had the same problem on a Lenovo ThinkPad P52.
In the BIOS, Secure Boot was enabled, but Windows 11 showed "Secure Boot State" as "Off".
The cause was, that the Secure Boot Mode in my BIOS was set to "Setup Mode".
To change it to "User Mode", I had to select "Restore Factory Keys" on the Security Page in the BIOS.
After that, I could start the computer and Windows 11 displayed that the Secure Boot State is "On".
Maybe this helps someone.
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 5832355 › secure-boot-enabled-but-not-active
Secure boot enabled but not active? - Microsoft Q&A
March 22, 2026 - When Secure Boot shows as enabled in firmware but “not active” in Windows, it usually means the system is booting with a non‑signed or legacy bootloader.
Top answer 1 of 5
277
I had the same problem on a Lenovo ThinkPad P52.
In the BIOS, Secure Boot was enabled, but Windows 11 showed "Secure Boot State" as "Off".
The cause was, that the Secure Boot Mode in my BIOS was set to "Setup Mode".
To change it to "User Mode", I had to select "Restore Factory Keys" on the Security Page in the BIOS.
After that, I could start the computer and Windows 11 displayed that the Secure Boot State is "On".
Maybe this helps someone.
2 of 5
26
I’ve been searching for hours, I finally can play valorant again lol. Thank you!!
Secure boot enabled but not active for windows 11
As posted make sure its Secure Boot you need - not just UEFI boot. Make sure you are booting OK with CSM disabled before changing Secure Boot settings. People have bricked their system by following the wrong steps. I also had it saying enabled not Active - this is a BIOS glitch it's not really enabled On the secure boot settings if it says Mode:User you should be able to simply Enable Secure Boot Otherwise (if it says Mode:Setup) - Disable Secure Boot if it says Enabled - If it says Standard change to Custom - Change Custom to Standard accepting Factory Defaults - Enable Secure Boot More on reddit.com
1715
744
November 2, 2021Secure boot enabled but not active on gigabyte motherboard
I have a gigabyte B760m motherboard, secure boot is enabled but not active in bios, shows "off" in msinfo32. I've read certain threads that lead me to believe that secure boot mode - custom and then back to standard and "yes" when it… More on learn.microsoft.com
3
0
March 12, 2025Secure boot enabled but not active?
The problem is likely that the cryptographic keys secure boot needs to actually function haven't been installed or provisioned by the motherboard. Think of the "Secure Boot: Enabled" setting as flipping the main power switch, but the actual security system (the keys) isn't loaded yet. So, while the feature is technically turned on, it has no rules to follow, which is why Windows reports it as "Not Active." This often happens after a BIOS update, a CMOS clear, or sometimes even on a brand-new motherboard. The fix is almost always found in the exact same spot in your BIOS where you enabled Secure Boot. You need to reboot your PC and go back into that "Secure Boot" menu. Look for an option right near the main toggle that says something like "Restore Factory Keys," "Install default Secure Boot keys," or "Key Management." The exact wording will vary depending on your motherboard brand (ASUS, MSI, Gigabyte, etc.). Select that option to install the default keys. It should ask you to confirm. Once you do that, save your changes and exit the BIOS (usually by pressing F10). When your computer restarts, Windows should now (hopefully) correctly recognize Secure Boot as fully active. More on reddit.com
46
11
August 8, 2025I can't enable Secure Boot at all...
I go to my BIOS, enable Secure Boot (the BIOS option is to enable UEFI), save and restart, but when I go to my System Information, it says that it isn't enabled, and the BIOS mode is Legacy. I've heard that in order for it to properly work, I need to disable CSM, but here's another problem... When I do disable CSM, my windows won't boot, and instead go to BIOS mode... It's not ... More on learn.microsoft.com
5
6
August 7, 2025How do I enable Secure Boot without BIOS?
You can enable the secure boot option without BIOS through Windows. Here are the steps that you have to follow in this regard.
- Press ctrl + R;to open the Run;dialogue box
- Enter msinfo32;in that box
- If it reads off;enable the secure boot option from BIOS
easeus.com
easeus.com › computer instruction › (solved!) secure boot enabled but not active🔥
Secure Boot Enabled But Not Active - How to Fix?🔥
Why is Secure Boot not showing in BIOS?
Your system might be using outdated UEFI firmware that doesn't support a secure boot option. Also, it might be possible that this option isn't enabled in UEFI firmware settings. If any of these issues are there in your system, you will not be able to see the secure boot option in BIOS.
easeus.com
easeus.com › computer instruction › (solved!) secure boot enabled but not active🔥
Secure Boot Enabled But Not Active - How to Fix?🔥
What happens if I enable Secure Boot in BIOS?
It will keep your system safe from any unauthorized application installation. Every time you download and run a file, it will verify the digital signature before allowing you to go ahead. In turn, you can easily learn which program is safe and which can be corrupted.
easeus.com
easeus.com › computer instruction › (solved!) secure boot enabled but not active🔥
Secure Boot Enabled But Not Active - How to Fix?🔥
Videos
04:43
Secure Boot Enabled but NOT Active in BIOS - Easy Fix! - YouTube
02:12
Windows 11 - Fix Secure Boot Enabled but Not Active - Gigabyte...
04:01
Secure Boot Enabled but NOT Active in BIOS – Quick & Easy Fix!
05:39
How To Turn On Secure Boot | Step by Step Guide | Asus, Asrock, ...
04:42
FIX Secure Boot State is OFF after Enabling in BIOS - YouTube
11:03
How to Enable Secure Boot on Gigabyte Motherboards - AMD and Intel ...
EA Help
help.ea.com › home › technical issues › how to use secure boot
How do I use Secure Boot on my PC?
1 week ago - ... Navigate to the Boot tab, if you are having difficulty finding the correct option, many BIOS have a search function that you can use to find the correct tab and setting Pictured above the search can be accessed by hitting F9. ... Secure Boot state should be Enabled. If it’s set to Disabled, ...
Eleven Forum
elevenforum.com › windows support forums › antivirus, firewalls and system security
Secure boot enabled in BIOS but not on | Windows 11 Forum
July 25, 2025 - I had the same problem as your few months ago! What I did... I have restart Windows then go to my BIOS setting to disable Secure boot in my BIOS setting then boot up to Windows then restart Windows go back BIOS setting to re enable Secure boot to save the setting and boot up Windows.
AOMEI
aomeitech.com › aomei software › disk partition tips › how to fix secure boot enabled but not active in windows 11/10
How to Fix Secure Boot Enabled But Not Active in Windows 11/10
3 weeks ago - Make sure the Secure Boot setting is reactived and enabled, and save the changes before exiting BIOS. Secure Boot only works correctly when the system disk uses the GPT partition style instead of MBR.
ASUS
asus.com › support › faq › 1050047
How to Enable/Disable Secure Boot | Official Support | ASUS Global
3 weeks ago - For those utilizing Notebook, ... enter BIOS configuration. When the device is completely shut down, persistently hold the [F2] key on the keyboard and simultaneously press the [Power button] to boot up....
EaseUS
easeus.com › computer instruction › (solved!) secure boot enabled but not active🔥
Secure Boot Enabled But Not Active - How to Fix?🔥
August 11, 2025 - Many users have reported that they have resolved secure boot-related issues just by following this simple method. The most common result from a secure boot-enabled but not active problem is data loss.
Reddit
reddit.com › r/gigabyte › secure boot enabled but not active for windows 11
r/gigabyte on Reddit: Secure boot enabled but not active for windows 11
November 2, 2021 -
Hey, I’m trying to get my pc to work with windows 11. I enabled tpm 2.0 and secure boot before installing it, Updated my bios and installed. However secure boot says it’s off on windows 11 and not active in bios even though it was on when I was running windows 10. I have an Aorus elite b550, r7 5800x and 3070. Any help with this would be great. Thanks in advance!
Top answer 1 of 5
139
As posted make sure its Secure Boot you need - not just UEFI boot. Make sure you are booting OK with CSM disabled before changing Secure Boot settings. People have bricked their system by following the wrong steps. I also had it saying enabled not Active - this is a BIOS glitch it's not really enabled On the secure boot settings if it says Mode:User you should be able to simply Enable Secure Boot Otherwise (if it says Mode:Setup) - Disable Secure Boot if it says Enabled - If it says Standard change to Custom - Change Custom to Standard accepting Factory Defaults - Enable Secure Boot
2 of 5
5
Go to BIOS and reset the keys. I enabled secure boot and it showed "off" in Windows. After I went into BIOS and reset the keys, it shows as "on" now. EDIT: Reset keys = reset factory defaults (I think that's what it's called).
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 3887665 › secure-boot-enabled-but-not-active-on-gigabyte-mot
Secure boot enabled but not active on gigabyte motherboard - Microsoft Q&A
March 12, 2025 - Enter your BIOS and ensure that the "CSM Support" or "Compatibility Support Module" is disabled. CSM must be off for secure boot to function · Make sure your boot mode is set to UEFI. Legacy boot mode is incompatible with Secure Boot.
Reddit
reddit.com › r/buildapc › secure boot enabled but not active?
r/buildapc on Reddit: Secure boot enabled but not active?
August 8, 2025 -
Secure boot is enabled but it says not active. My BIOS mode is UEFI. My drive is GPT. And CSM is off. Also secure boot was on by default I just checked everything I can’t find out why it won’t work.
I would like to get it working so I can play the BF6 beta
Top answer 1 of 6
7
The problem is likely that the cryptographic keys secure boot needs to actually function haven't been installed or provisioned by the motherboard. Think of the "Secure Boot: Enabled" setting as flipping the main power switch, but the actual security system (the keys) isn't loaded yet. So, while the feature is technically turned on, it has no rules to follow, which is why Windows reports it as "Not Active." This often happens after a BIOS update, a CMOS clear, or sometimes even on a brand-new motherboard. The fix is almost always found in the exact same spot in your BIOS where you enabled Secure Boot. You need to reboot your PC and go back into that "Secure Boot" menu. Look for an option right near the main toggle that says something like "Restore Factory Keys," "Install default Secure Boot keys," or "Key Management." The exact wording will vary depending on your motherboard brand (ASUS, MSI, Gigabyte, etc.). Select that option to install the default keys. It should ask you to confirm. Once you do that, save your changes and exit the BIOS (usually by pressing F10). When your computer restarts, Windows should now (hopefully) correctly recognize Secure Boot as fully active.
2 of 6
1
Is there anybody here based in Toronto? I got the same problem with my New Asus. Pls contact me. I need help with this.
Microsoft Learn
learn.microsoft.com › en-us › answers › questions › 5516790 › i-cant-enable-secure-boot-at-all
I can't enable Secure Boot at all... - Microsoft Q&A
August 7, 2025 - Then, when the drive is converted, boot into BIOS and change to UEFI Mode, then enable Secure Boot and turn on TPM if necessary ... Backup all your files, then clean install Windows 10 in UEFI Mode by booting form a bootable USB, then re-install ...
FACEIT
support.faceit.com › hc › en-us › articles › 17258827497116-Secure-Boot-is-not-working-properly
Secure Boot is not working properly – FACEIT
Press F10 to save the changes and exit. Confirm by clicking Yes. For additional troubleshooting, please refer to this video from MSI. Restart your computer and press the DEL key during boot-up to enter the BIOS.
DiskPart
diskpart.com › aomei software › free partition software › 3 ways to fix secure boot enabled but not active in windows 11/10
3 Ways to Fix Secure Boot Enabled But Not Active in Windows 11/10
March 14, 2025 - Activation of Secure Boot can be broken down into three distinct parts. Before changing Secure Boot settings, ensure a successful boot with CSM disabled. Step 1. Disable CSM using a specific key to enter the BIOS; usually DEL, F2, F10, or F12. Step 2. Navigate to the Boot or Security tab, find the Secure Boot menu, and then find the CSM option.
AllThings
allthings.how › all things how › windows › how to fix secure boot enabled but not active on windows 11
How to Fix Secure Boot Enabled But Not Active on Windows 11
August 11, 2025 - Temporarily disable such software if you continue to experience issues. If your BIOS is missing Secure Boot options, check for firmware updates or consult your manufacturer’s documentation to confirm hardware support.
uBackup
ubackup.com › aomei software › windows 11 › [solved] secure boot enabled but not active in windows 11
[Solved] Secure Boot Enabled But Not Active in Windows 11
August 28, 2025 - The task of how to active Secure Boot can be divided into 3 parts. Before change Secure Boot settings, make sure you are booting OK with CSM disabled. 1. Disabling CSM is different for each of the motherboard brands. Press the specific key to enter BIOS. Normally, it should be DEL, F2, F10, F12. 2. Navigate to the Boot or Security tab.
Steam Community
steamcommunity.com › app › 2807960 › discussions › 0 › 614304582404779567
secure boot enabled but NOT active in BIOS :: Battlefield™ 6 General Discussions
have you turned off csm(compatibility ... edited by Cryptic.416; Oct 30, 2025 @ 10:57am ... Originally posted by LonexGER:Install latest BIOS Update....
MiniTool Partition Wizard
partitionwizard.com › home › news › [solved] secure boot is enabled but not active in windows 11
5 Ways for Secure Boot Enabled But Not Active in Windows ...
July 5, 2023 - How to Update BIOS Windows 10 | How to Check BIOS Version · If you have CSM (Compatibility Support Module) enabled in your UEFI settings, you may find that Secure Boot is not an active issue. It’s best to disable it for secure boot options.
Tom's Hardware Forum
forums.tomshardware.com › home › software › windows 11
[SOLVED] - Enabling secure boot cause PC to not boot | Tom's Hardware Forum
March 7, 2022 - Make sure fTPM is enabled. Make sure CSM is disabled. In Secure Boot, select custom under Secure Boot Mode, Select Restore Factory Keys, Say YES to reset without saving. When BIOS restarts, access BIOS and change Secure Boot Mode back to Standard and then Yes to restart without save.
Top answer 1 of 4
6
You need to set Platform in "User Mode", Secure Boot in "Standard Mode" and Load Setup Defaults.
You could do it by Restoring Factory Keys:
- BIOS - Security - Secure Boot - Restore Factory Keys - Enter
- BIOS - Restart - OS Optimized Defaults - Enabled
- BIOS - Restart - Load Setup Defaults - Enter
- Go to BIOS - Main and check if UEFI Secure Boot is ON.
2 of 4
3
You might be in Setup Mode because you have deleted the Platform Key in your BIOS. Enabling Secure Boot in this state enables your OS to write a new Platform Key (possibly useful for securing a Linux installation). But if you don't do that, you remain in Setup Mode and the Secure Boot State, indicating the Platform Key has been used to secure the system, will remain off.
Your BIOS might have an option to restore the default Platform Key, possibly called "Restore Default Secure Boot Keys", which restores the Microsoft Key. After doing that, your Secure Boot State will be On when booting Windows.
AOMEI
aomeitech.com › aomei software › enterprise backup tips › understanding secure boot enabled but not active in windows 11
Understanding Secure Boot Enabled but Not Active in Windows 11
December 10, 2024 - Check Secure Boot Status: Navigate to the Secure Boot settings in the BIOS menu and verify the status of Secure Boot. Ensure that Secure Boot is enabled and set to "Active" or "Enabled."