Good day.
Quite often, many users ask questions about Secure Boot (for example, this option sometimes needs to be disabled when Windows installation). If you do not disable it, then this protective function (developed by Microsoft in 2012) will check and search for special information. keys that are available only for Windows 8 (and higher). Accordingly, you will not be able to boot the laptop from any media...
In this short article I want to look at several popular brands of laptops (Acer, Asus, Dell, HP) and show with an example how to disable Secure Boot.
Important note! To disable Secure Boot, you need to go into the BIOS - and to do this you need to press the corresponding buttons immediately after turning on the laptop. One of my articles is devoted to this issue -. It lists buttons for different manufacturers and details how to enter the BIOS. Therefore, in this article I will not dwell on this issue...
Acer
(Screenshots from Laptop BIOS Aspire V3-111P)
After entering the BIOS, you need to open the “BOOT” tab and see if the “Secure Boot” tab is active. Most likely, it will not be active and cannot be changed. This happens because the administrator password is not set in BIOS section"Security".
To install it, you need to open this section and select “Set Supervisor Password” and press Enter.
Actually, after this you can open the “Boot” section - the “Secure Boot” tab will be active and can be switched to Disabled (i.e. turned off, see screenshot below).
After rebooting the laptop, it should boot from any* boot device (for example, from a USB flash drive with Windows 7).
Asus
Some models of Asus laptops (especially new ones) sometimes confuse novice users. In fact, how can you disable secure boot in them?
1. First, go to the BIOS and open the “Security” section. At the very bottom there will be an item “ Secure Boot Control" - it needs to be switched to disabled, i.e. switch off.
2. After rebooting, enter the BIOS again and then in the “Boot” section do the following:
- Fast Boot - switch to Disabled mode (i.e. turn off fast loading. The tab is not available everywhere! If you don’t have it, then just skip this recommendation);
- Launch CSM - switch to Enabled mode (i.e. enable support and compatibility with “old” OS and software);
- Then press again F10- save the settings and reboot the laptop.
3. After the reboot, enter the BIOS and open the “Boot” section - in the “ Boot Option» you can choose bootable media which is connected to USB port(For example). Screenshot below.
Then save BIOS settings and reboot the laptop (F10 button).
Dell
(Screenshots from laptop Dell Inspiron 15 3000 Series)
IN Dell laptops disabling Secure Boot is probably one of the simplest - just one entry into Bios is enough and no administrator passwords, etc. are needed.
After entering the BIOS, open the “Boot” section and set the following parameters:
- Boot List Option - Legacy (with this we enable support for older operating systems, i.e. compatibility);
- Security Boot - disabled (disable secure boot).
Actually, you can then edit the download queue. Most install a new Windows OS with Bootable USB flash drives - so below is a screenshot of which line needs to be moved to the very top so that you can boot from a flash drive ( USB Storage Device).
After the settings have been entered, press the button F10- this will save the entered settings, and then the button Esc- thanks to it you will exit the BIOS and reboot the laptop. Actually, with this, disabling secure boot on a Dell laptop is complete!
HP
After entering the BIOS, open the “System Configuration” section, and then go to the “Boot Option” tab (see screenshot below).
After the reboot, the text “A change to the operating system secure boot mode is pending...” appears.
We are warned about changes made to the settings and are asked to confirm them with a code. You just need to enter the code shown on the screen and press Enter.
After this change, the laptop will reboot and Secure Boot will be disabled.
To boot from a flash drive or disk: when you turn on the HP laptop, press ESC, and in the start menu select “F9 Boot Device Options”, then you can select the device from which you want to boot.
In principle, in laptops of other brands, disabling Secure Boot proceeds in the same way, there are no special differences. The only point: on some models, entering the BIOS is “complicated” (for example, in laptops Lenovo- you can read about this in this article:). I'll wrap this up, all the best to everyone!
In certain situations, users may need to start a computer or laptop with bootable flash drive. If it is created correctly, there should be no problems with this when Secure Boot is disabled on the computer. If this option is enabled, an unauthorized operating system cannot be started while the computer is booting. It may also cause problems with Windows installation.
What is Secure Boot
It is a mistake to think that Secure Boot is an option in the Windows operating system. This function refers to UEFI - an analogue of BIOS. operating room Windows system only uses this function to additionally protect the computer from unwanted third-party actions - hacking, spontaneous startup software or unlicensed applications.
You can disable Secure Boot on any computer. As an exception, we can highlight tablets running under Windows control 10.
How to find out if Secure Boot is active on your computer
There are 3 main ways to determine whether the Secure Boot function is working on a computer:
How to disable Secure Boot
To disable Secure Boot, you need to go to UEFI settings, they are also BIOS settings. You can do this in two ways:
- When you turn on the computer, before the operating system starts loading, press the Del (or F2) button to go to the BIOS. It is worth noting that on some motherboards (often in laptops) you may need to press several buttons at once to enter the BIOS, for example, FN+F2. Most often, the screen indicates which buttons you need to press to go to the BIOS;
- If the operating system Windows 8 or 8.1 is installed on your computer, you can reach the panel on the right side of the screen and go through it to “Settings”. Next, select “Change computer settings.” Click “Update and Recovery” - “Recovery”, and then “Reboot”, configuring in the additional parameters that the reboot should occur in “UEFI Settings”.
The second method should be used in situations where the computer keyboard does not work until the operating system loads. This often happens with wireless keyboards.
After you manage to enter UEFI, you need to act depending on what version of UEFI is installed on the computer. Below we will give examples of how to disable Secure Boot in the most common UEFI options.
HP motherboards and laptops
To disable Secure Boot on HP laptops, you need to go into the BIOS. Next, go to the “System Configuration” menu and select the “Boot Options” option from the list. Scroll down the list of actions to about the middle, where the “Secure Boot” option will be located. Click on it and select Disable in the pop-up window to deactivate the feature.
Dell motherboards and laptops
Dell has provided a separate item in UEFI mode specifically for configuring Boot options. To disable Secure Boot, you need to go to this section, select “UEFI Boot” and switch the “Secure Boot” option to Disable mode.
Asus motherboards and laptops
To disable Secure Boot on Asus devices, you need to go to the “Boot” tab in UEFI, then select the “Secure Boot” option. Unlike many other BIOSes, here you will not need to disable the function, but set the “OS Type” option to “Other OS”.
Note: The above method is for new models of Asus laptops and motherboards. In some modifications, you will need to go to the “Security” tab in UEFI, and in it set the “Secure Boot” parameter to Disable.
Acer motherboards and laptops
Laptop. To Acer laptop To disable Secure Boot, you need to go to the “Security” tab and select the “Set Supervisor Password” option. Next you will need to come up with a password, after which they will become available. additional options, in particular, the ability to switch the “Secure Boot” function to the Disable position.
Motherboard. You can disable Secure Boot on an Acer motherboard in the “Authentication” section by selecting Disable for the corresponding option. If the motherboard is old enough, you should look for the option in the “Advanced” - “System Configuration” sections.
Gigabyte motherboards
The most modern version of UEFI is available on Gigabyte motherboards. To disable Secure Boot in this shell, you need to go to the “BIOS Features” tab and set the corresponding item to Disable or Disabled, depending on the localization.
On other motherboards and laptop models, the scheme for disabling Secure Boot is approximately similar. It is important to note that before exiting the BIOS, be sure to save the options so that the changes you make are not lost.
The security mode in UEFI, or security boot, provides startup protection on a laptop or desktop computer: it blocks access to changing the boot priority from a CD/DVD, USB drive (including the ability to use the OS from a bootable USB flash drive), prevents attempts installation of an unlicensed, unauthorized OS, unauthorized intervention in the boot shell. In such situations, when loading, the message “secure boot violation” appears on the display, indicating that it is impossible to modify the boot in the BIOS (in BIOS), UEFI.
To remove this blocking, you need to disable the corresponding options in UEFI. After disabling protection, you can change the boot priority from disks and USB flash drives, as well as install any OS distributions.
This article will tell you how to disable secure boot in boot shell options. It describes in detail how to turn off the protection mode on devices of popular brands, and how to find out using the system settings whether Secure Boot is enabled.
Checking whether a function is active
You can find out the boot protection activation status in two ways:
Method number 1: in options
1. Press the “Win” + “R” keys together on the keyboard.
2. In the Run panel, type msinfo32, press Enter.
3. Find the “Loading Status” option. View its value: "Off." - protection mode is disabled, “On” - included.
Method number 2: in the Powershell console
1. Run the utility:
- open the Start menu;
- V search bar set the name of the utility - powershell;
2. Click the utility line that appears in the Start panel list.
3. In the console, enter the command - Confirm-SecureBootUEFI.
4. Press "Enter".
5. The system will immediately display the protection status after entering the command: True - enabled, False - disabled.
How to open UEFI/BIOS settings
To deactivate Security Boot, you first need to open the UEFI or BIOS boot shell. This procedure can also be performed in different ways:
Method No. 1: using “hot keys”
Restart the OS. Press "Del". If login to the shell failed, it means that another " hotkey» to enter boot settings mode. This could be “F2” or the combination “FN+F2” (on a laptop).
Note. The BIOS button may be indicated on the monitor during system startup.
Method No. 2: standard OS option
(option for 8/8.1)
1. Activate the slide-out panel (on the right side of the screen).
2. Go to: Settings → Change settings... → Update and... → Recovery.
3. In additional add-ons, set the restart mode to “Settings via UEFI”.
4. Activate the "Reboot" command.
Disablement Guides
ASUS motherboard (PC)
1. Restart your PC. Press the "Del" or "F2" key (depending on specific model ASUS). When the shell is displayed, press "F7", "Advanced Mode" will be displayed.
2. In “Boot”, click on the “Secure Boot” line.
3. In the settings panel, set “Other OS”.
4. Go back to “Boot”, Compatibility Support Module (CSM).
5. Enable the Launch CSM option: set its line to Enabled.
6. In “Boot Device Control” set the value to “UEFI and Legacy …” or “Legacy OpROM …”.
7. Below in the list, in “Boot ... Devices”, select “Both, Legacy ... first” or “Legacy OpROM ...”.
All. The setup is complete. Protection is deactivated. Press “F10”, confirm the modification of the settings. Reboot your OS.
Asus laptop
1. In the boot shell, in Security - Secure Boot, set it to “Disabled”.
2. In “Boot” - Fast Boot, change the parameter to “Disabled”.
3. Save the options configuration (F10), reboot. Open BIOS.
4. In Boot - “Launch …” change the value to “Enabled”.
5. Save the changes and reboot the OS.
Asrock
1. In UEFI, open “Security” (the “Shield” icon in the top menu).
2. In “Secure Boot”, move the switch to “Disabled”.
3. Press "F10" to save the settings. Restart your PC.
Gigabyte
1. In UEFI, open the “... Features” menu.
2. Set options:
- Windows 8 Features - Other OS;
- Boot Mode Selection" - "Legacy only" / "UEFI and Legacy" (possible options);
- Other PCI Device ROM Priority - Legacy OpROM.
3. Save the modifications made using the “F10” key.
MSI
1. In the shell menu, go to: SETTINGS → Boot.
2. In Boot Mode Select, change the parameter to “Legacy+UEFI”.
3. Press F10 to save changes to options.
Toshiba
1. In Security - “Secure Boot” set the position to “Disabled”.
2. Go to the shell: Advanced → System Configuration.
3. Find “Boot Mode” (it may also be called OS Mode Selection) and set its switch to the “CSM Boot” position ( alternative names parameter - CMS OS, UEFI and Legacy OS).
4. Activate the command to save settings using the “F10” key. Restart the system. Now you can use boot disks and flash drives, as well as install any OS.
HP
In HP Pavillion laptops, to deactivate you need to perform a few additional settings:
1. To enter the UEFI-BIOS during the reboot process, press the “F10” key (in some models: ESC → F10).
2. In the shell, go to: System Configuration → Boot Options.
3. Change the position of the following options:
- Secure Boot - Disabled (disabling protective mode);
- Legacy support - Enabled (enable compatibility with other OS).
5. For the new settings to take effect, activate saving the parameters using the F10 key.
6. Reboot the OS. Once the system restart is complete, a warning will appear and a request to enter the specified code (displayed in the line ... to complete the change). Type it and press "Enter". The laptop will automatically reboot.
To change the boot priority in order to use the installation USB flash drive when turning on the laptop, go to start menu(ESC key) and execute necessary settings in the “Boot Device Options” section (F9 key).
Samsung
1. To go to the UEFI-BIOS shell, press the “F2” key while starting the laptop.
2. Go to the “Boot” panel, place the cursor in the “Secure Boot” line.
3. In the submenu, change its parameter to “Disabled”.
4. At the warning message, select OK (confirm the change).
5. After disabling the protection, the “OS Mode Selection” item will appear in the same list. Set the CMS OS (or UEFI and Legacy OS) parameter in it.
6. Save your settings changes (F10).
7. Restart the laptop and go into the UEFI-BIOS again.
8. Go to: Security → Set Supervisor Password. Press "Enter", enter earlier set password. In subsequent fields, press “Enter” without entering any data.
At the "Changes...saved" message, use the Enter key again. Now the password has been reset and you have access to activate/deactivate Secure Boot protection.
Lenovo
- Enter the UEFI console using the F2 key or the Fn+F2 combination (depending on the model).
- Open: “Security” section → “Secure Boot” option. In its column, put the value “Disabled”.
- Save the option value (press F10).
Dell
In Dell laptops equipped with the InsydeH2O shell, deactivation of protection is performed as follows:
- The menu opens: Boot tab → UEFI Boot subsection.
- The “Secure Boot” line is set to “Enabled”.
- The settings are saved and the laptop restarts.
Bottom line
As you can see, the principle of disabling Secure Boot protection is different models almost the same except for some nuances related to the location of the menu and additional add-ons. Even if your PC or laptop model is not included in this review, use the secure boot option to deactivate basic algorithm. Namely: entering the UEFI shell → disabling Secure Boot (+ on some computers, enabling compatibility with other OSes) → saving the created shell configuration → rebooting the system.
Successful and quick computer setup! Be extremely careful when changing the value of options in the UEFI console.
Safe mode (English - Safe Mode) – diagnostic mode, in which all unnecessary drivers and Windows functions are disabled. Used to troubleshoot problems that arise in PC operation. You just need to launch safe mode and fix the errors, after which the PC will work as it should again.
In what cases might you need to enter safe mode? For example, to solve the problem when .
Also, in this way you can remove viruses, reset your password, fix errors (incl. blue screen death), restore the system, etc.
There are several ways. Plus, they differ somewhat depending on what operating system you have. Therefore, below we will look at everything available methods how to login securely Windows mode.
There are 2 universal methods that work for everyone Windows versions– XP, 7, 8 and 10. Moreover, they are the simplest. Perhaps we'll start with them.
Login via msconfig utility
The first way is through special utility. To do this you need to follow simple instructions:
- Press Win + R (the button between “Ctrl” and “Alt”) and enter the word “msconfig”.
- In the new window, select the “Boot” tab, indicate the desired OS and check the “Safe Mode” checkbox. There are a couple of sub-items here – it is recommended to select either “minimal” ( standard option) or “network” (in this case there will be access to the Internet).
- Click “OK” and restart your PC - now it will turn on in safe mode.
When you fix the errors, don't forget to return normal mode start the computer! This is done in exactly the same way - using the msconfig utility (only now you need to uncheck the box).
There is a small nuance here: in this way you can enable safe mode in Windows only if your OS boots normally. If you can’t even load the desktop, then use the second method.
Login using F8
This method is suitable for those whose PC or laptop does not turn on (the desktop does not load, the monitor goes dark, etc.). In this case, do the following:
- Turn on your PC (or laptop) and immediately press the F8 key repeatedly until a menu appears (in some cases you need to press Shift + F8).
- If the Windows logo appears or the screen goes dark, you failed. Wait until the system boots completely, then restart your PC and try again.
- When you do everything correctly, a menu will open where you use the arrows to select “Safe Mode” (the best option).
P.S. This method does not work on Windows 10! This feature has been disabled by the developers.
Special download options for Windows 10
If Windows starts, then you need to do the following:
What to do if Windows 10 does not start? If the PC boots before the login screen, then “Special boot options” can be opened in another way. To do this, click on the power button icon (in the lower right corner), hold down Shift and select “Restart”.
We use a disk or flash drive
This is the most reliable way to boot Windows 10 in Safe Mode. But in this case, you need a DVD or (they can be recorded on any PC or laptop).
Connect a USB drive or insert a disk, load them (), and then do the following:
- After loading, press Shift + F10.
- After opening the command line, enter – bcdedit /set (default) safeboot minimal.
- Then close it and restart your PC. It will turn on.
To return the PC to normal startup, write in command line the following: bcdedit /deletevalue (default) safeboot.
You can do this in the same way (or as an administrator ) .
You can also enable the mode in Windows 8 in 4 different ways
The first two are described in detail at the beginning of the article. The other two are quite similar to the options that are suitable for Windows 10, but we will still look at them in more detail to make it easier for you to navigate.
Diagnostic tools
So, the first method is to activate the buffer format (only suitable if the OS is working normally). To do this we do the following:
The PC will start in Safe Mode, and you can carry out the necessary manipulations.
And another simple option for starting safe mode in Windows 8 is using a bootable USB flash drive or DVD with Windows files. The procedure is as follows:
What to do on Windows 7 and XP
You can enter safe mode in Windows 7 or XP using one of the universal methods described at the beginning of this article. The first option is suitable in cases where the OS is working normally, and the second option is suitable if the PC or laptop does not turn on.
It is worth noting that the operating system is in no way related to the BIOS. It also doesn’t matter what brand of laptop you have – Samsung, Asus, Lenovo, HP, Acer, LG, etc.
What to do if Safe Mode does not start?
Sometimes a PC or laptop stubbornly refuses to enable safe mode. The reason is trivial - viruses damaged the Windows registry. In such situations, there are only 2 options:
- restoring PC operation (system rollback to a checkpoint);
- installation of special programs.
The optimal method, of course, would be the first one - restoring the computer from a checkpoint. If you do not have them saved (for example, disabled), then the only option left is to install recovery programs Windows registry. In this case, you can use the free Safe Mode Repair or SafeBootKeyRepair.
Today we’ll talk about what Secure Boot is. Most users using modern computers they don’t think about protecting it. It's full now malware, which strive to disable some components of the system or computer. As soon as the main components of the system start, the viruses begin to carry out their evil deeds. For example, quite dangerous viruses There are so-called bootkits - malicious software that changes the boot sector on the hard drive. The most interesting thing is that it is not always possible to simply detect a bootkit using standard antivirus software.
Still, there is protection against bootkits. There is a technology that is included in the BIOS UEFI 2.2 specification called Secure Boot, which protects your computer from various malware. The principle of operation of this function is that if uncertified software tries to load, it blocks it. For example, some program or even an OS starts loading, then Secure Boot looks at the boot code and checks it with the keys that are built into the BIOS; if, therefore, when checking the code, the signature verification does not pass, then the program is blocked from loading.
The emergence of Secure Boot technology contributed to heated discussion and many controversies arose. For example, the introduction of this technology in Windows 8 in 2012. There was talk that with Secure Boot it would not be possible to install another operating system, except the one that is already preinstalled. But this is not a problem, since most devices, like computers and laptops, have the ability to disable Secure Boot, this is done. Disabling Secure Boot cannot be done only on tablets or other devices with ARM architecture.
I bring to your attention high-quality hard drive recovery in Moscow, the company providing these services does its job with a bang.
Let's now look at the issue of disabling Secure Boot
Secure Boot, how to disable it
Depending on which laptop model or motherboard you have, the Secure Boot function can be located anywhere. Most often, it can be located in the tab Boot or tab Security. There is an option that it is located along the following path: Boot Then Secure Boot Further OS Type and choose Other OS. If you have a laptop from HP, then this option is in System Configuration and point Boot Options. On Dell laptops settings Boot Options found in the tab Boot And UEFI Boot.
If you have a laptop from Lenovo or Toshiba, then in BIOSe you need to go to the section Security. IN Samsung laptops the situation is a little more complicated, firstly, Secure Boot is located in the section Boot, as soon as you try to disable the function, a warning will appear that errors may occur when loading the computer, then you need to select the option OS Mode Selection and switch to CMS OS, or to mode UEFI and Legacy OS. If you managed to turn off this function, then now you need to enable compatibility mode Legacy, this can be done on any device.
To make sure that Secure Boot is disabled, you can go to standard means "System Information", already there go to the section "Secure Boot State", it must be in position "OFF".
To access system information, open the Run window using the Win+R keys and enter the phrase msinfo32. That's all, now you have disabled Secure Boot.
Loading...
