How to disable secure boot

Content on WhatAnswers is provided "as is" for informational purposes. While we strive for accuracy, we make no guarantees. Content is AI-assisted and should not be used as professional advice.

Last updated: April 4, 2026

Quick Answer: Disabling Secure Boot typically involves accessing your computer's UEFI/BIOS settings, usually during startup by pressing a specific key. You'll then navigate to the 'Security' or 'Boot' tab and find an option to disable Secure Boot. The exact steps can vary significantly depending on your motherboard manufacturer and firmware version.

Key Facts

Secure Boot is a security feature designed to ensure that your PC boots using only software that your PC manufacturer trusts.
It prevents malicious software like rootkits from loading during the boot process.
Disabling Secure Boot is often necessary for installing alternative operating systems (e.g., Linux distributions) or certain hardware.
Accessing UEFI/BIOS settings is usually done by pressing keys like Del, F2, F10, or F12 immediately after powering on your computer.
The specific menu option to disable Secure Boot might be labeled 'Secure Boot Control', 'Launch CSM', or similar, and disabling it may require setting a supervisor password first.

What is Secure Boot?

Secure Boot is a crucial security feature integrated into the Unified Extensible Firmware Interface (UEFI) standard. Its primary function is to protect the boot process of your computer from unauthorized or malicious software. When your computer starts up, before the operating system loads, Secure Boot verifies the digital signatures of all boot software, including the operating system loader, drivers, and firmware. If these signatures are not recognized as legitimate or have been tampered with, Secure Boot will prevent the software from loading, thereby stopping potential threats like rootkits and bootkits from compromising your system.

Why Might You Need to Disable Secure Boot?

While Secure Boot enhances security, there are several valid reasons why a user might need or want to disable it:

Installing Other Operating Systems: Many Linux distributions and older versions of Windows are not signed in a way that Secure Boot recognizes by default. To install these operating systems, you often need to disable Secure Boot.
Running Older Hardware or Drivers: Some older hardware components or their drivers might not have the necessary digital signatures for Secure Boot to approve them.
Dual Booting: When setting up a dual-boot system with an OS that requires Secure Boot to be disabled, this step becomes necessary.
Troubleshooting: In rare cases, Secure Boot might interfere with legitimate software or hardware, and disabling it can help in troubleshooting such issues.
Virtualization (Less Common): While modern virtualization software usually supports Secure Boot, older or specific configurations might require it to be off.

How to Disable Secure Boot

The process of disabling Secure Boot involves accessing your computer's UEFI/BIOS settings. The exact steps can vary widely depending on your motherboard manufacturer (e.g., ASUS, Gigabyte, MSI, ASRock) and the specific firmware version installed. However, the general procedure is as follows:

Access UEFI/BIOS: Restart your computer. As soon as it begins to power on, repeatedly press the designated key to enter the UEFI/BIOS setup. Common keys include Del, F2, F10, or F12. The correct key is often displayed briefly on the screen during startup or can be found in your computer or motherboard manual.
Navigate to Security or Boot Settings: Once inside the UEFI/BIOS interface, look for a menu option related to 'Security', 'Boot', 'Authentication', or 'System Configuration'. The exact naming convention differs between manufacturers.
Locate the Secure Boot Option: Within the relevant menu, find the setting for 'Secure Boot'. It might be labeled as 'Secure Boot Control', 'UEFI Secure Boot', 'OS Type', or similar.
Disable Secure Boot: Select the Secure Boot option and change its setting from 'Enabled' to 'Disabled'.
Potential Password Requirement: Some UEFI/BIOS systems require you to set a supervisor password before you can disable Secure Boot. If prompted, you will need to create and enter a password.
Enable Legacy Support/CSM (If Necessary): In some cases, particularly when installing older operating systems, you might also need to enable 'Launch CSM' (Compatibility Support Module) or 'Legacy Boot' to allow for non-UEFI booting. However, this is generally not recommended if you intend to install a modern UEFI-compatible operating system.
Save and Exit: After making the changes, navigate to the 'Exit' menu and select 'Save Changes and Exit' or a similar option. Your computer will then restart with Secure Boot disabled.

Important Considerations:

Re-enabling Secure Boot: It is highly recommended to re-enable Secure Boot after you have completed the task that required it to be disabled, especially if you are running Windows. This will restore the enhanced security to your system.
Manufacturer Variations: Always refer to your specific motherboard or computer manufacturer's documentation for the most accurate instructions, as the interface and option names can differ significantly. For example, HP and Dell often have slightly different pathways to access these settings compared to custom-built PCs using ASUS or Gigabyte motherboards.
Impact on Windows: While disabling Secure Boot is necessary for some tasks, it does reduce your system's protection against certain types of malware. Be cautious when booting from unknown or untrusted media.

By following these steps carefully and consulting your hardware documentation, you can successfully manage your computer's Secure Boot settings.