UEFI with secure boot disabled

It is not essential to enable it but you increase risk of malware hijacking pc. Windows 7 cannot be installed in uefi mode if enabled if secure boot is on.

However, good idea to turn it on.

KB1240 said:

Will someone please tell me the details of how to enable the UEFI secure boot?I will appreciate it very much.

Go there:

Settings/Updates & Security/Recovery/Advanced Startup/Restart/Troubleshoot/Advanced Options/UEFI Firmware Settings/Not the same for all machines (hardware vendor).

That will bring you to BIOS settings, for HP it is pretty easy in the Security Boot Configuration menu.

Legacy Support: Disable
Secure Boot: Enable
Key management: Don't Clear (set to Clear if disable/false)
Key Ownership: HP Keys
Fast Boot: Enable

Apply changes and exit. To confirm, open Powershell in admin mode and run:

Code:

Confirm-SecureBootUEFI

False = disable
True = enable
or not supported or ressource not available.

Code:

Windows PowerShell
Copyright (C) 2016 Microsoft Corporation. All rights reserved.

PS C:\Windows\system32> Confirm-SecureBootUEFI
True
PS C:\Windows\system32>

Hi.
Reading on the Lenovo site:
How to boot to Legacy device or system configured with Microsoft Windows 7 (32-bit or 64-bit) or Windows 8 (32-bit) - ThinkPad, ThinkCentre, ThinkStation, IdeaCentre

Microsoft requires Lenovo to configure all Microsoft Windows 8 and 10 PCs with the following UEFI firmware (BIOS) settings:

• UEFI only
• Secure Boot

With these settings, it is not possible to boot a Legacy operating system such as DOS or Microsoft Windows XP. Also, it is not possible to boot an operating system that is not enabled for Secure Boot, such as Microsoft Windows 7 and certain Linux distributions.

For these reasons, it is not possible to boot many existing diagnostic or backup/restore tools on a Microsoft Windows 8 or 10 PC with default UEFI firmware (BIOS) settings.

So my question would be, what have you done to the system, that has disabled Secure Boot?

EDIT: Perhaps you could just go into the BIOS and set it to defaults. But if you have installed a Legacy (MBR) version of W10, or upgraded a version of W7 to W10, you will not be able to boot the OS with Secure Boot turned on.

KB1240 said:

Many thanks Mike for your reply.I am using Windows 10 Home/64 bit on a year old Lenovo 90ED desktop pc.Do you think the settings will be pretty much the same?Thanks again!!!

No, it won't!

You must find the parameter(s) combination that enables secure boot. You may want to try disabling legacy mode or BIOS mode in the boot menu first.

The given parameters in post # 6 are an indication, but Fast Boot can be set to Disable and it would also work (true). You must find the way KB If you keep on getting false in Powershell (Secure Boot is available and you may try reset to default). The owner manual of your laptop may also be helpful...

Edit: In system information under system summary, SMBIOS Version is 2.8.