🌐
Microsoft Learn
learn.microsoft.com › en-us › windows-hardware › design › device-experiences › oem-secure-boot
Secure boot | Microsoft Learn
Secure boot is a security standard developed by members of the PC industry to help make sure that a device boots using only software that is trusted by the Original Equipment Manufacturer (OEM).
People also ask

How does secure boot work?

When you power on your device, secure boot checks the digital signatures of the bootloader and operating system. If the signatures are valid and match the trusted keys stored in the system, the boot process continues. If not, secure boot halts the process to protect against tampering.

🌐
lenovo.com
lenovo.com › home
Maximize System Security with Secure Boot Technology | Lenovo US
Can I disable secure boot?

In most cases, you can disable secure boot in your system's unified extensible firmware interface/ basic input output system (UEFI/BIOS) settings. However, doing so is not recommended unless you have a specific reason, as it exposes your system to potential security risks. Disabling secure boot may allow unauthorized code to run during the boot process.

🌐
lenovo.com
lenovo.com › home
Maximize System Security with Secure Boot Technology | Lenovo US
Why are secure boots important?

Secure boots are crucial for protecting your system from malware and unauthorized software. By verifying the integrity of the boot process, it creates a secure foundation for the operating system, reducing the risk of attacks that could compromise your data and system stability.

🌐
lenovo.com
lenovo.com › home
Maximize System Security with Secure Boot Technology | Lenovo US
🌐
Reddit
reddit.com › r/windows › what is secure boot
r/windows on Reddit: What is secure boot
June 29, 2021 -

What is secure boot (trying to install windows 11) but will secure boot change the normal life of me gaming on my pc, will it change how I use my pc, is windows 11 okay for a gamer

Top answer
1 of 4
2
It is a security feature that prevents rootkits and malware from running before the operating system, gaining full control to the core system and potentially invisibility to antivirus software as a result. With secure boot on: the bootloader is verified at boot time and if it doesn't match up with what it expects it prevents the system from booting potential malware. With it off: potential malware can run without anyone knowing. The only way to prevent it with secure boot off is to do a full format and reinstall, assuming you even know it's there. Some Linux users claim that secure boot is a shady attempt from Microsoft at stopping any OS other than windows from booting. This is not true, you just need to do an extra step (add a custom boot verification key for your Linux distro and set it to Linux/third-party secure boot mode rather than Microsoft-only secure boot mode). MS-only secure boot mode is the most secure and easiest option if you only use Windows. When turning on secure boot, also remember to turn off CSM (Compatibility Support Module). This'll improve performance and ensure that secure boot is actually on and not bypassed by using legacy bios booting. If windows doesn't boot anymore after doing this, you'll need to reinstall windows with CSM off and secure boot on. For the technical peeps out there, make sure you're using GPT partitioning table for your windows installer memory stick. As a Windows gamer, it shouldn't break anything. In fact, it might actually improve performance when combined with enabling "resizable bar"/"smart access memory". :D Hope that helps! TLDR: it improves security and performance. Turn on secure boot and turn off CSM. If windows doesn't boot after doing this, you accidentally installed it in legacy/fallback/mbr mode so reinstall windows with secure boot on and CSM off and you should be good to go.
2 of 4
2
Secure boot helps/prevents unauthorized OS's (or any software) from booting. OS's that are signed with OEM, Microsoft (or even by us with custom keys) will only boot. Mostly secure boot is aimed at Linux. Only a few Linux support Secure boot out of box, it is still possible to install with our own custom keys (PK, KEK, and the DB's).
🌐
EA Help
help.ea.com › home › technical issues › how to use secure boot
How do I use Secure Boot on my PC?
2 weeks ago - Secure Boot needs to use GPT (GUID Partition Table) instead of MBR (Master Boot Record). Heads-up: This article is a general guide, but it might not follow the exact steps of your PC.If you’re not used to navigating to and updating your BIOS settings, you should contact a professional or your manufacturer’s customer support.
Top answer
1 of 3
4

The answer depends on how much of a conspiracy nut you are.

The technology is able to stop rootkits taking hold in critical parts of the filesystem, but the same technology can be used to prevent loading an "unapproved" Operating system - where Unapproved is defined by the maker of the system, not the owner of it.

I believe that (at the moment) Secureboot can be disabled in the BIOS and any system can be booted. It is, however, possible that a manufacturer could remove the functionality to disable Secureboot [ Maybe a big OS provider throws money at them ], which could limit what can be done with it.

To have a look at "What is possible", consider Smartphones. Some [ like Google and Samsung branded phones ] can load any version of Android - eg supported by Cyanogenmod, while others are locked into the OS which they came with and can't be upgraded - I believe LG do this, and Motorola used to do this (My wife had a Motorola which can't be upgraded from an ancient 2.x version of Android - forced obsolescence - I do note its possible Motorola have changed as they are now owned by Google). Anyway Locked bootloaders are commonplace in Cellphones, so if you are looking at the impacts, it might be a useful place to draw an analogy from.

2 of 3
3

The entire point is the "chain of trust" it creates. If I have a piece of software that I need to make sure that nothing malicious can intercept what I am doing and put their own code in I need to trust the program launching my program. To trust that program that launched my program, you need to trust the program that launched the program that launched my program, and so on and so on.

What Secure boot provides is a anchor for that first "trusted program". It allows the hardware on the computer to assert "No one has modified this bootloader and it will behave exactly like the original programmers programed". The boot-loader can then check "No one has modified this OS and it will behave exactly like the original programmers programmed". Then the OS can go "No one has modified this program and it will behave exactly like the original programmers programmed" and now you have a "trusted path" from your program all the way down to the physical hardware running the machine all verifying that nothing got in the way that could intercept or modify the behavior of your code.

Now what the Bootloader, OS, or program itself does with that chain of trust is entirely up to the company. The Bootloader could chose to only boot OS's from a specific vendor and you could not prevent that. The OS could choose to only allow software to run that was authorized to run (this is what Windows 8 RT does via the App Store) and you could not. The program could implement some from of DRM and you would not have a way to bypass it.

It is all up to the vendor of the software on how to use Secure Boot.

🌐
Framework
knowledgebase.frame.work › secure-boot-explained-H1LAQtzzyx
Secure Boot explained
November 13, 2024 - Secure Boot is a feature of modern UEFI firmware that ensures only trusted software, signed by a recognized authority, can execute during the boot process.
Find elsewhere
🌐
Lenovo
lenovo.com › home
Maximize System Security with Secure Boot Technology | Lenovo US
Secure boot is a fundamental security feature in Windows that ensures the integrity of your system's boot process. It functions by verifying the digital signatures of the bootloader and operating system, allowing only trusted and signed code to be executed during startup.
🌐
YouTube
youtube.com › watch
How to enable Secure Boot on your PC - YouTube
In this video, we walk you through how to enable Secure Boot. Secure Boot safeguards your system by verifying the integrity of your software during boot-up, ...
Published   May 23, 2025
🌐
NSFOCUS
nsfocusglobal.com › home › blog › secure boot 101: getting started with secure boot
Secure Boot 101: Getting Started with Secure Boot - NSFOCUS
April 17, 2026 - Secure Boot is the UEFI feature on Windows 8 preinstalled computers that came out in 2012. All current Ubuntu 64-bit (not 32-bit) versions support this feature. In short, the secure boot principle is to enable a trust source mechanism in firmware.
🌐
GeeksforGeeks
geeksforgeeks.org › computer networks › what-is-secure-boot
What is Secure Boot? - GeeksforGeeks
July 23, 2025 - Secure boot is a security standard that ensures that only trusted software executed on the system has been approved by the PC manufacturers. PC manufacturers make it to secure the system from malicious software execution.
🌐
Corsair
corsair.com › explorer › gamer › gaming pcs › what is secure boot?
What is Secure Boot? | CORSAIR
August 16, 2025 - Depending on the specific system, motherboard, and OS, secure boot does not necessarily require TPM 2.0. TPM 2.0, by the way, stands for Trusted Platform Module Two Point Zero, and is a physical chip that wasn’t always present on all motherboards in the past, but is now basically ubiquitous due to TPM 2.0 being required for Windows 11.
🌐
XDA Developers
xda-developers.com › home › windows › what is secure boot, and should you keep it on?
What is Secure Boot, and should you keep it on?
July 12, 2024 - While you mostly hear about Secure ... Secure Boot is a process in which the computer, upon being powered on, checks the signature of all the software installed on the computer to ensure that it can be trusted....
🌐
Windows Forum
windowsforum.com › forums › windows help and support forums › windows news
Secure Boot Explained: How to Enable and Why It’s Vital for Windows 11 Security | Windows Forum
April 20, 2025 - Beneath its unassuming checkbox, Secure Boot is a bouncer at the club, meticulously checking the credentials of every piece of software clamoring to load at startup. It relies on digital signatures: cryptographic stamps proving a program’s designer is recognized, trustworthy, and presumably not working out of a dimly-lit basement.
🌐
HP
support.hp.com › us-en › document › ish_6930187-6931079-16
HP PCs - Secure Boot (Windows 11) | HP® Support
When the Startup Menu is displayed, press f9 to select Boot Device Options. When Boot Manager opens, use the down arrow key to select a boot device, and then press enter to start the computer from the selected device. Use the BIOS settings to enable or disable Secure Boot on an HP commercial notebook or workstation computer.
🌐
Hexnode
hexnode.com › home › what is secure boot?
What is Secure Boot? - Hexnode Blogs
May 20, 2026 - Secure Boot is a firmware-level security feature that verifies whether trusted software is allowed to load during device startup.