You need to set Platform in "User Mode", Secure Boot in "Standard Mode" and Load Setup Defaults.
You could do it by Restoring Factory Keys:
- BIOS - Security - Secure Boot - Restore Factory Keys - Enter
- BIOS - Restart - OS Optimized Defaults - Enabled
- BIOS - Restart - Load Setup Defaults - Enter
- Go to BIOS - Main and check if UEFI Secure Boot is ON.
You need to set Platform in "User Mode", Secure Boot in "Standard Mode" and Load Setup Defaults.
You could do it by Restoring Factory Keys:
- BIOS - Security - Secure Boot - Restore Factory Keys - Enter
- BIOS - Restart - OS Optimized Defaults - Enabled
- BIOS - Restart - Load Setup Defaults - Enter
- Go to BIOS - Main and check if UEFI Secure Boot is ON.
You might be in Setup Mode because you have deleted the Platform Key in your BIOS. Enabling Secure Boot in this state enables your OS to write a new Platform Key (possibly useful for securing a Linux installation). But if you don't do that, you remain in Setup Mode and the Secure Boot State, indicating the Platform Key has been used to secure the system, will remain off.
Your BIOS might have an option to restore the default Platform Key, possibly called "Restore Default Secure Boot Keys", which restores the Microsoft Key. After doing that, your Secure Boot State will be On when booting Windows.
No secure boot option in uefi
No Secure Boot Option
I can't enable Secure Boot at all...
How to fix the UEFI for secure boot in the BIOS
Videos
I can’t enable Secure Boot on my pc, I’m Windows 11 and MSI click 5 (X299 Tomahawk Ac Motherboard) and in videos I found it seems to be in Windows Os Configuration, but I don’t see it there, it shows up when I search it but it says I need to do something with Pk keys, an option I also don’t see anywhere and it doesn’t come up when I search for it, every video I ever found talking about secure boot has options I don’t have, also in case it’s important, I get to my bios setting from windows troubleshooting settings, pressing Del/F11 does nothing on startup
I had the same problem on a Lenovo ThinkPad P52.
In the BIOS, Secure Boot was enabled, but Windows 11 showed "Secure Boot State" as "Off".
The cause was, that the Secure Boot Mode in my BIOS was set to "Setup Mode".
To change it to "User Mode", I had to select "Restore Factory Keys" on the Security Page in the BIOS.
After that, I could start the computer and Windows 11 displayed that the Secure Boot State is "On".
Maybe this helps someone.
I’ve been searching for hours, I finally can play valorant again lol. Thank you!!
If using a distribution such as Arch, which does not have support for Secure Boot out of the box, are there are advantages to using UEFI over Legacy BIOS, assuming no dual booting?