Windows 8 and 8.1 Forums


Secure Boot - Confirm Enabled or Disabled in Windows 8

  1. #1
    Secure Boot - Confirm Enabled or Disabled in Windows 8

    Secure Boot - Confirm Enabled or Disabled in Windows 8
    How to Check if Secure Boot is Enabled or Disabled in Windows 8 and 8.1
    Published by Brink is online now
    12 Feb 2013
    Default Secure Boot - Confirm Enabled or Disabled in Windows 8

    Published by


    Brink's Avatar
    Administrator

    Join Date: Jul 2009
    Posts: 19,267

    How to Check if Secure Boot is Enabled or Disabled in Windows 8 and 8.1

    information   Information
    This tutorial will show you how to confirm if Secure Boot is enabled or disabled in your UEFI settings from inside Windows 8 and 8.1.

    You must be signed in as an administrator to be able to do the steps in this tutorial.

    Note   Note
    UEFI (replaces BIOS) has a firmware validation process, called secure boot, which is defined in Chapter 27 of the UEFI 2.3.1 specification. Secure boot defines how platform firmware manages security certificates, validation of firmware, and a definition of the interface (protocol) between firmware and the operating system. Secure boot prevents “unauthorized” operating systems and software from loading during the startup process.

    Quick summary

    • UEFI allows firmware to implement a security policy
    • Secure boot is a UEFI protocol not a Windows 8 feature
    • UEFI secure boot is part of Windows 8 secured boot architecture
    • Windows 8 utilizes secure boot to ensure that the pre-OS environment is secure
    • Secure boot doesn’t “lock out” operating system loaders, but is a policy that allows firmware to validate authenticity of components
    • OEMs have the ability to customize their firmware to meet the needs of their customers by customizing the level of certificate and policy management on their platform
    • Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows


    For more information about secure boot, see:




    EXAMPLE: Secure Boot in your UEFI firmware settings at boot

    Click image for larger version






    OPTION ONE
    To Check if Secure Boot is Enabled or Disabled in System Information

    1. Press the + R keys to open the Run dialog, type msinfo32, and press Enter.

    2. In the right pane of System Summary in System Information, see what the Secure Boot State value is. (see screenshot below)

    Value Description
    On PC supports Secure Boot and Secure Boot is enabled
    Off PC supports Secure Boot and Secure Boot is disabled
    Unsupported PC does not support Secure Boot or is a Legacy (BIOS) installed Windows


    Click image for larger version





    OPTION TWO
    To Check if Secure Boot is Enabled or Disabled in PowerShell

    1. Open an elevated PowerShell window from inside Windows 8 or 8.1.

    2. If prompted by UAC, then click/tap on Yes.

    3. In the elevated PowerShell window, copy and paste the command below, and press Enter.

    Confirm-SecureBootUEFI

    4. Based on what the cmdlet returns, this will let you know if Secure Boot is enabled or disabled in your UEFI settings.

    Cmdlet Return Description
    True PC supports Secure Boot and Secure Boot is enabled
    False PC supports Secure Boot and Secure Boot is disabled
    Cmdlet not supported on this platform PC does not support Secure Boot or is a Legacy (BIOS) installed Windows


    Click image for larger version

    Click image for larger version

    Click image for larger version



    That's it,
    Shawn


  2. #1




    Posts : 5,592
    ME, XP,Vista,Win7,Win8,Win8.1


    Nice one, Shawn.

      My System SpecsSystem Spec

  3. #2



    Posts : 19,267
    64-bit Windows 8.1 Enterprise (RTM)


    Thank you Ray.
      My System SpecsSystem Spec

  4. #3


    Posts : 16
    Windows 8 Pro x64


    If Secure Boot is on then Windows 8 is confirmed to be UEFI booted, right?

    I just updated the BIOS and the startup changed from the usual ASUS logo to the Windows 8 logo, but in msinfo32 the BIOS mode is UEFI and Secure Boot is on.
    And to add, my boot SSD is GPT.
      My System SpecsSystem Spec


  5. #4



    Posts : 19,267
    64-bit Windows 8.1 Enterprise (RTM)


    Hello iron,

    That's correct. When it says that "BIOS mode" is UEFI, then your Windows 8 was installed with UEFI. Secure Boot is a feature of UEFI.

    Hope this helps.
      My System SpecsSystem Spec

  6. #5



    Posts : 1,453
    Windows 8 x64


    So is the $64,000 question.. if W8 has secure boot on, then gets hosed... are all your bootable rescue CDs and USB keys useless? Or is there a basic strategy that still provides rootkit resistance while allowing system rescue?
      My System SpecsSystem Spec

  7. #6



    Posts : 19,267
    64-bit Windows 8.1 Enterprise (RTM)


    Hey Miles,

    If needed, you could boot into your UEFI settings, and just disable Secure Boot as needed, then enable again when finished.

    Secure Boot - Enable or Disable in UEFI
    Last edited by Brink; 02 Nov 2013 at 15:16.
      My System SpecsSystem Spec

  8. #7



    Posts : 1,453
    Windows 8 x64


    Ah, sounds good. Thanks.
      My System SpecsSystem Spec

  9. #8




    Posts : 5,592
    ME, XP,Vista,Win7,Win8,Win8.1


    All bootable software using WinRE4 x64 will boot with Secure Boot ENABLED.
    Last edited by theog; 03 Nov 2013 at 10:43.
      My System SpecsSystem Spec

  10. #9



    Posts : 1,453
    Windows 8 x64


    @theog Thanks, that's good to know.
      My System SpecsSystem Spec

Page 1 of 2 12 LastLast
Secure Boot - Confirm Enabled or Disabled in Windows 8

Similar Threads
Tutorial Forum
i can't seem to get my windows to go back into secure boot
So i installed my new MSI Z77A-G45 motherboard i tried to put my windows in secure boot i been all threw click bios 2 and i have everything set windows 8 mode is on in the bios, secure boot is enabled and set to standard, boot mode is set to legacy+UEFI makes no difference whether i set it to uefi...
General Support
Cannot Downgrade to 7 Legacy Enabled, Secure boot disabled
Hello, I am having an issue with downgrading to Windows 7 and It's not nearly as easy as normally installing an OS. I get to the expanding files screen, and once the system reboots it goes back to the Windows 7 install screen. This is an issue, because it should continue with the installation. Does...
Installation & Setup
Windows 8.1 Secure boot
I have a new laptop (HP G7-2292NR) with Windows 8 and today I turned on the laptop for the 3rd time and I see in the bottom right corner Windows 8.1 Secure boot isn’t configured correctly build 9600, what does that mean? I am so new to Window 8 that I cannot find a thing, bear with me I need...
System Security
SURFACE pro 3 - Secure boot CAN be disabled
Hi there. Great news for those wanting to run other OS'es on the new Surface 3 Pro - or simply access the firmware. http://winsupersite.com/mobile-devices/surface-pro-3-tip-access-firmware This also means that when you disable protected boot you can also install Linux or other OS'es on the...
Tablet and Touch
Fast Boot enabled on UEFI blocks access to Windows
Hi, I restored UEFI to default settings and after that I couldn't get into Windows anymore, I just get into UEFI all the time after every reboot. No Windows. So I started to try and change things and finally found out that Fast Boot enabled is the culprit. If I disable it, I can get into...
General Support
Freeze with wlan-card disabled/enabled
Computer: Samsung 530U, NP530U3C-A07SE So we got this computer brand new with Windows 7. We wanted Windows 8, and performed an clean install of Windows 8, manually formatting the partitions, meaning deleting of every recovery partitions and so on. W8 booted fine, and everything worked fine,...
Network & Sharing
Help, Secure boot won't work with Windows 8
I am new to this forum so I apologize if I sound foolish. I have a Gateway desktop which came with Vista and now I run Windows 7. Anyway I ran a test to see if my computer can run Windows 8. I am good except it says my secure boot wont work. Can I still run Windows 8. What do I need to do so I can...
Drivers & Hardware

Eight Forums Android App Eight Forums IOS App Follow us on Facebook