Check if Secure Boot is Enabled or Disabled in Windows 10  

    Check if Secure Boot is Enabled or Disabled in Windows 10

    Check if Secure Boot is Enabled or Disabled in Windows 10

    How to Check if Secure Boot is Enabled or Disabled in Windows 10
    Published by Category: Security System
    24 Jun 2021
    Designer Media Ltd



    How to Check if Secure Boot is Enabled or Disabled in Windows 10


    Secure Boot is a security standard developed by members of the PC industry to help make sure that your PC boots using only software that is trusted by the PC manufacturer. Support for Secure Boot was introduced in Windows 8, and also supported by Windows 10.

    When the PC starts, the firmware checks the signature of each piece of boot software, including firmware drivers (Option ROMs), EFI applications, and the operating system. If the signatures are good, the PC boots, and the firmware gives control to the operating system.

    Secure Boot prevents a sophisticated and dangerous type of malware—called a rootkit—from loading when you start your device. Rootkits use the same privileges as the operating system and start before it, which means they can completely hide themselves. Rootkits are often part of an entire suite of malware that can bypass local logins, record passwords and keystrokes, transfer private files, and capture cryptographic data.

    For more information about Secure Boot, see:

    This tutorial will show you how to check if Secure Boot is currently enabled, disabled, or unsupported in Windows 10.


    Contents

    • Option One: To Check if Secure Boot is Enabled or Disabled in Windows Security
    • Option Two: To Check if Secure Boot is Enabled or Disabled in System Information
    • Option Three: To Check if Secure Boot is Enabled or Disabled in PowerShell






    OPTION ONE

    To Check if Secure Boot is Enabled or Disabled in Windows Security


    1. Open Windows Security, and click/tap on the Device security icon. (see screenshot below)

    Check if Secure Boot is Enabled or Disabled in Windows 10-windows_security_secure_boot-1.jpg

    2. Under Secure boot (if supported), look to see if it Secure boot is on or Secure boot is off. (see screenshot below)

    Check if Secure Boot is Enabled or Disabled in Windows 10-windows_security_secure_boot-2.jpg

    3. When finished, you can close Windows Security if you like.






    OPTION TWO

    To Check if Secure Boot is Enabled or Disabled in System Information


    1. Press the Win+R keys to open Run, type msinfo32 into Run, and click/tap on OK to open System Information.

    2. In the right pane of System Summary in System Information, see if the Secure Boot State item has a value of On, Off, or Unsupported. (see screenshots below)

    Value Description
    On PC supports Secure Boot and Secure Boot is currently enabled
    Off PC supports Secure Boot and Secure Boot is currently disabled
    Unsupported PC does not support Secure Boot or Windows is installed with legacy BIOS.
    Check if Secure Boot is Enabled or Disabled in Windows 10-secure_boot_state_on_msinfo32.jpg
    Check if Secure Boot is Enabled or Disabled in Windows 10-secure_boot_state_off_msinfo32.png
    Check if Secure Boot is Enabled or Disabled in Windows 10-secure_boot_state__unsupported_msinfo32.png





    OPTION THREE

    To Check if Secure Boot is Enabled or Disabled in PowerShell


    1. Open an elevated PowerShell.

    2. Enter the command below into the elevated PowerShell, and press Enter.
    3. You will now know if Secure Boot is currently enabled, disabled, or unsupported based on what this cmdlet returns. (see screenshots below)

    Cmdlet Return Description
    True PC supports Secure Boot and Secure Boot is currently enabled
    False PC supports Secure Boot and Secure Boot is currently disabled
    "Cmdlet not supported on this platform" error PC does not support Secure Boot or Windows is installed with legacy BIOS.
    Check if Secure Boot is Enabled or Disabled in Windows 10-secure_boot_state_true_powershell.png
    Check if Secure Boot is Enabled or Disabled in Windows 10-secure_boot_state_false_powershell.png
    Check if Secure Boot is Enabled or Disabled in Windows 10-secure_boot_state_unsupported_powershell.jpg


    That's it,
    Shawn





  1. Posts : 56,064
    Multi-boot Windows 10/11 - RTM, RP, Beta, and Insider
       #1

    Shawn....

    This line from the beginning of your tut caught my eye:

    PC boots using only software that is trusted by the PC manufacturer

    If I take that literally, it may explain an oddball situation I have with this machine. Although the standards of what Secure Boot should do are the same for all, do different manufacturers have different criteria and/or "lists" of what they think is "secure"? Different methodologies? A recent BIOS update to my system now requires me to turn Secure Boot off in order to boot a Win install thumb. Previous BIOS did not. Same thumb boots fine with it on in my Surface Pro 3.

    I've seen many posts where different people have different experiences with Secure Boot. Works on HP with it on, but not Dell. Or vice versa. Lenovo is fine, but HP is not. Inconsistent, at best.

    I have brought all of this to the attention of the Alienware (Dell) engineers, and they agree their BIOS update from 1.04 > 1.05 may have been over-aggressive.

    I was simply wondering if different manufacturers do, in fact, think differently about what is or is not Secure.
      My Computers


  2. Posts : 61,585
    64-bit Windows 11 Pro for Workstations
    Thread Starter
       #2

    Hey Dick, :)

    Correct. It will depend on the firmware, so it can vary a bit for each manufacturer.
      My Computers


  3. Posts : 56,064
    Multi-boot Windows 10/11 - RTM, RP, Beta, and Insider
       #3

    Brink said:
    Hey Dick, :)

    Correct. It will depend on the firmware, so it can vary a bit for each manufacturer.
    Thanks, Shawn. I'll bet that's not a widely known thing. Confirms my thoughts. Very interesting.........
      My Computers


 

Tutorial Categories

Check if Secure Boot is Enabled or Disabled in Windows 10 Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Mixed Reality Phone


  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 03:51.
Find Us




Windows 10 Forums