The problem is likely that the cryptographic keys secure boot needs to actually function haven't been installed or provisioned by the motherboard. Think of the "Secure Boot: Enabled" setting as flipping the main power switch, but the actual security system (the keys) isn't loaded yet. So, while the feature is technically turned on, it has no rules to follow, which is why Windows reports it as "Not Active." This often happens after a BIOS update, a CMOS clear, or sometimes even on a brand-new motherboard. The fix is almost always found in the exact same spot in your BIOS where you enabled Secure Boot. You need to reboot your PC and go back into that "Secure Boot" menu. Look for an option right near the main toggle that says something like "Restore Factory Keys," "Install default Secure Boot keys," or "Key Management." The exact wording will vary depending on your motherboard brand (ASUS, MSI, Gigabyte, etc.). Select that option to install the default keys. It should ask you to confirm. Once you do that, save your changes and exit the BIOS (usually by pressing F10). When your computer restarts, Windows should now (hopefully) correctly recognize Secure Boot as fully active. Answer from Equivalent_Cod_9705 on reddit.com
🌐
Reddit
reddit.com › r/msi_gaming › secure boot enabled but status is disabled
r/MSI_Gaming on Reddit: Secure boot enabled but status is disabled
March 23, 2025 -

Ive asked around in various places online but I can’t find a solution.

I’ve recently upgraded to windows 11, but to play some of my games i need to have secure boot and tpm2.0 enabled. I found secure boot in bios settings, enabled it.(i already have boot mode set to UEFI, not legacy) it is enabled in bios settings, but status is disabled, and in windows system information it also says it’s off. Please help me, I’ve been at this for multiple days.

🌐
Reddit
reddit.com › r/lenovolegion › secure boot status disabled
r/LenovoLegion on Reddit: Secure Boot status disabled
February 28, 2024 -

Hello everyone Since yesterday i'm trying to enable secure boot. But even if i select enabled in secure boot the status won't change. I tried everything i could find but can't change the status. For information this my specs : Windows 11 Lenovo IdeaPad Gaming 3 15ARH05 AMD Ryzen 5 All help is welcomed Thanks in advance

🌐
Reddit
reddit.com › r/easportsfc › [solution] secure boot disabled
r/EASportsFC on Reddit: [Solution] Secure Boot Disabled
September 27, 2022 -

I haven’t seen this solution posted before.

The answer to the “secure boot is disabled” is actually as simple as enabling secure boot. However if you just enabled it through BIOS, are on windows 11 and do not have a brand new motherboard model then windows will not allow you to enable secure boot even though it says enabled on the BIOS.

I followed the instructions from the website below ————————————————————— CHECK SECURE BOOT:

  1. Press Windows image + R keys to open the run command box.

  2. Type msinfo32 and click OK to open System Information.

  3. On the System Information page, check the BIOS Mode and the Secure Boot Status.

If BIOS mode is set to: UEFI Secure Boot status set to: Off

proceed to the steps below ———————————————-

Part 1. Enable Secure Boot in BIOS/UEFI. Activate Secure Boot in UEFI Firmware settings from Windows RE.

  1. Hold down the Shift key and from the Power icon image select Restart to boot your system in Windows Recovery Environment (WinRE).

  2. Then select Troubleshoot -> Advanced options -> UEFI Firmware Settings and select Restart.

  3. Navigate to the System Configuration tab, select Boot Options.

  4. In Boot options, Change Secure Boot and select Enabled.

  5. Save and Exit from BIOS Settings.

and while a bit technical it should end up working. https://www.wintips.org/fix-secure-boot-unsupported-or-unavailable/

🌐
Reddit
reddit.com › r/buildapc › secure boot enabled but not active?
r/buildapc on Reddit: Secure boot enabled but not active?
August 8, 2025 -

Secure boot is enabled but it says not active. My BIOS mode is UEFI. My drive is GPT. And CSM is off. Also secure boot was on by default I just checked everything I can’t find out why it won’t work.

I would like to get it working so I can play the BF6 beta

🌐
Reddit
reddit.com › r/techsupport › how do i disable secure boot?
r/techsupport on Reddit: How do I disable Secure Boot?
October 16, 2024 -

I have a gaming motherboard from Asus and I have entered the Advanced Mode and gone to the "Boot" section, and entered the Secure Boot menu where "Secure Boot state" is "Enabled".

Secure Boot state        Enabled
Platform Key (PK) state  Unloaded
OS Type                  Other OS
Key Management

According to tutorials I found online, I'm supposed to enter Key Management and then "Clear Secure Boot Keys". But what on Earth does this even do? Will I be able to boot into Windows after I do this? Do I need to save it before I do it?

The only reason I want Secure Boot disabled is so I can use Memtest86+ which warns after installation that I need to disable Secure Boot for it to operate correctly (I suppose). Here's the exact message:

Memtest86+ 7.00 installed on USB Drive.

The necessary files are installed on your USB drive and the drive is now bootable.

WARNING: Memtest86+ 7.00 is not signed by Microsoft for Secure Boot. Disable it from your BIOS options before trying to boot this USB Drive.

So I'm having issues with Windows (corrupted DISM component store and unable to restore health or connect to Windows Update to fetch needed files, or use alternate WIM source), issues with RAM, issues with my SSD disk, and the last thing I need is Secure Boot to put the final nail in the coffin and render my computer completely unbootable. Just saying... I have a lot on my plate right now. Now this... Secure Boot mumbo jumbo! Please advise! Thanks.

Top answer
1 of 3
2
I know you've managed to resolve it anyway, but I'm not entirely certain why they recommend you do that anyway. I know Memtest86 and Memtest86+ aren't exactly the same thing, but I ran v10.6 of the former earlier this year with secure boot enabled and didn't have to tamper with anything
2 of 3
1
I still have no clue what these keys and stuff are all about. All I know is that Secure Boot is a royal PITA. That's why I usually don't go near those settings. But more often than not, whenever I want to run some kind of utility like in this case Memtest86+ or something that's not Windows, it asks that I disable Secure Boot. I know it has something to do with certificates and stuff like that, or in other words chain of trust, and since Linux is not made by Microsoft and Microsoft owns the computer world, they get to dictate what kind of keys go on new motherboards. It' something along those lines. Right? Basically, Linux doesn't trust Microsoft, Microsoft doesn't trust Linux, everyone trusts Microsoft, and I don't trust anyone! Anyway! This is what I did. I saved those keys to my USB drive that I have Memtest86+ on already, just in case. Then I cleared the Secure Boot keys. Then the Secure Boot state changed to Disabled. I hit F10 to save. The stupid thing said I didn't make any changes, I said save it anyway. Then I entered BIOS/UEFI again to check if it sticks, and it does. Now I have 0 keys in Key Management! Enter BIOS/UEFI with F2 key or DEL key (I think this works too on Asus boards). Switch to Advanced Mode by pressing F7 key if it's in EZ Mode, otherwize skip to step 3. Go to Boot section/menu (no, not "boot menu" menu, hence my preference of the word "section" rather) by pressing right arrow key four times. Select "Secure Boot" and press Enter. Select "Key Mangement" and press Enter. Select "Clear Secure Boot Keys" and press Enter. You will get a prompt as stated below. Clear Secure Boot Keys Do you really want to delete the current Secure Boot keys? 7. Select Yes (it should be selected already) and press Enter. All your keys (PK, KEK, DB and DBX) should now be zero. 8. Press F10 to save changes. You will get stupid prompt as stated below. Save & reset Save configuration and reset? You have not made any changes to the BIOS settings. 9. Select OK and press Enter. 10. Done. Secure Boot is disabled. Official source from Asus can be found here: https://www.asus.com/support/faq/1049829/ I still don't understand the table that Asus is showing on that page. By that I mean this table that I stole from them: Secure Boot OS Type Secure Boot Key Management Secure Boot State in BIOS Mode State in operating system User Other OS Customer Default Off User Other OS Standard N/A Off Setup Other OS Customer Clear Secure Boot Keys Off Setup Windows UEFI mode Customer Clear Secure Boot Keys Off User Windows UEFI mode Customer Default On User Windows UEFI mode Standard N/A On If anyone knows what all this nonsense is, please explain it to me like I'm five. Or at least link in a good article or a video that explains it well. Right now I have bigger issues to attend to. Now that I have Memtest86+ going, I almost immediately received a nice big "FAIL" splash in the log with nothing but pure ASCII art. I have left it to count up the errors. It was up at 2800 errors by the time I left it unattended to jot this down on another computer.
🌐
Reddit
reddit.com › r/techsupport › secure boot status
r/techsupport on Reddit: SECURE BOOT STATUS
July 10, 2025 -

Can somebody help me enable the secure boot status in my laptop. I already tried all the videos in YouTube but none of that work. I tried already to reset factory keys still didn't work. I cant play League of Legends because of this.

🌐
Reddit
reddit.com › r/computers › getting secure boot error but can't change any setting im basically locked out of my computer
r/computers on Reddit: Getting secure boot error but can't change any setting im basically locked out of my computer
April 15, 2026 -

I've tried setting up a user administrator password, I've tried using optimized defaults with F3 but after saving changes and restarting the bottom process it gives the error again and default to standard secure boot enabled

FIXED: https://www.youtube.com/watch?v=BinSriPqyKU

If the error persists but you can at least access the previously greyed out area do this: (My case:
SECURE BOOT - Disabled(Custom or Standard doesnt matter) - Windows is loading properly
SECURE BOOT - Enabled(Custom or Standard also doesnt matter) - error "invalid signature detected"
But i need secure boot working properly(FOR FACEIT AND VALORANT)
I tried everything from this thread and nothing was helpful

(SOLUTION)

Bios - Security- Secure Boot - Enroll EFI IMAGE - and then we need to choose right partition(DO NOT CHOOSE PARTITION WHERE U SEE YOUR WINDOWS FILES), in my case it was 3 options
I choose option where was EFI folder, then we choose inside this folder Microsoft , then Boot, and then from this bootmgfw.efi
So the right folder is EFI - Microsoft - Boot - bootmgfw.efi
AND IN THIS CASE my secure boot was worked properly and i could finally play faceit)

Find elsewhere
🌐
Reddit
reddit.com › r/lenovo › secure boot support enabled but secure boot status disabled?
r/Lenovo on Reddit: Secure boot support enabled but secure boot status disabled?
February 20, 2022 - I needed to do that to for valorant, just enable secure boot in bios go back to factory settings do it again and save changes. ... This was a weird thing I had in my laptop after upgrading it to W11.
🌐
Reddit
reddit.com › r/sysadmin › secure boot issue - lenovo's
r/sysadmin on Reddit: Secure boot issue - Lenovo's
April 27, 2026 -

Hi all,

out of our fleet of 2k i have noticed around 100 of them are reporting secure boot is off. Look a bit deeper into a few devices it seems they are stuck in "Setup mode" in the bios. The only fix seems to be going into the bios of each device going Secure Boot > Restore Factory Keys. Once this has been done the device changes to user mode and secure boot turns on and shows "on" in the OS. Has anyone else come across this? I am at a bit of a lose as to what is causing this behaviour and i cant see anyway to automate a fix. Going forward i will create some reporting for it but i don't really understand what is causing it. Any ideas?

🌐
Reddit
reddit.com › r/windowshelp › secure boot enabled, but secure boot status says its disabled?
r/WindowsHelp on Reddit: Secure boot enabled, but secure boot status says its disabled?
June 17, 2024 -

I am trying to enable secure boot for safety (and because of vanguard) but I don't think I have enabled it correctly.

🌐
Reddit
reddit.com › r/techsupport › can i disable secure boot and enable it again without hassle?
r/techsupport on Reddit: Can I disable secure boot and enable it again without hassle?
July 25, 2025 -

Hey there!

I'd like to test my hardware under Linux. My laptop (ASUS Strix) doesn't even boot if I have a USB connected that has another bootable partition.

So I guess I need to disable Secure Boot. When doing this, my UEFI warns me that all the Secure Boot stuff will be reset to factory defaults.

So then I'd like to install Linux, test the hardware stuff and return to Windows again by re-enabling Secure Boot.

Will everything be fine again? Is it even possible to resume my Secure Boot state?

I'm especially asking for gaming support (like Riot Games, which need this enabled).

Thanks in advance for your help!

🌐
Reddit
reddit.com › r/windowshelp › secure boot disabled after upgrading
r/WindowsHelp on Reddit: Secure Boot disabled after Upgrading
December 28, 2023 -

Hello,

A few months ago i decided to upgrade to windows 11 and at the time was not playing valorant but i now want to but am unable due to secure boot being disabled? This is not something ive done manually. I had no issues with this on Windows 10 but after the upgrade it is an issue. Is this something microsoft has done on purpose and if i enable it will there be any further issues?

Would it be a good idea to backup my files before going into BIOs as I am not too confident in BIOs.

I use a PRIME B550-PLUS motherrrrboard from ASUSTek if that helps for anything.

Many Thanks

🌐
Reddit
reddit.com › r/lenovo › secure boot statu disabled
r/Lenovo on Reddit: Secure Boot statu disabled
February 28, 2024 -

Hello everyone Since yesterday i'm trying to enable secure boot. But even if i select enabled in secure boot the status won't change. I tried everything i could find but can't change the status. For information this my specs : Windows 11 Lenovo IdeaPad Gaming 3 15ARH05 AMD Ryzen 5 All help is welcomed Thanks in advance

🌐
Reddit
reddit.com › r/windows11 › can secure boot be disabled safely?
Can Secure Boot be disabled safely? : r/Windows11
March 18, 2025 - Yeah, after you install, you can go back to not using secure boot, or even enabling CSM if you need it. ... Oh that's a good thing to know, thank you! ... Windows 11 does not support booting in legacy BIOS mode, so CSM must be disabled to install Windows 11.
🌐
Reddit
reddit.com › r/techsupport › problem trying to enable secure boot
r/techsupport on Reddit: Problem trying to enable secure boot
November 5, 2021 -

I have a z390 Aorus elite and i am trying to upgrade to windows 11 and so need to enable secure boot. I enter the bios and follow a video i am watching and disable CSM and then go into secure boot and i cant enable it because it says to disable CSM in setup and repeat operation after reboot to make sure UEFI video driver is operational. So in the video he save and exits and loads into windows 10 like normal but when i save and exit i end up back at the bios screen. The only way i found to get back to normal windows is to enable CSM support. But i need it disabled so that i can enable secure boot. Bios version is F3 i think it said How do i fix this?

Edit: i kept doing the same thing and then secure boot enabled but now after save and exiting my screen is just black and no input to monitor. How do i fix this now? Did i fuck it up even more?