The Windows 11 Secure Boot is a security feature that protects the computer from malware and other attacks. This feature will verify the authenticity of software applications loaded on the system before running. Some users have complained they can’t enable Secure Boot, which is the case when it is greyed out.
Secure boot may be greyed out if your computer’s firmware does not support this feature. You may also face the problem if it’s disabled in the system BIOS or UEFI settings, you have a legacy boot device installed on your computer, or you use a third-party bootloader. Let’s show you how to fix it.
How Do I Know if Secure Boot is Enabled on Windows 11?
You may find the Secure Boot status on your computer using the Msinfo32 utility. It is a command-line tool that can present details about your computer hardware and software components.
Step 1: Press the Windows key + R to open the Run dialog.
Step 2: Type Msinfo32 and hit Enter.
Step 3: Look for the Secure Boot State value. If it is set tp On, that means this feature is activated.
What do I do if Secure Boot is Greyed Out?
1. Disable Fast Boot in BIOS
Fast boot stores some of the boot information in the computer memory, making the boot process faster. While this may be beneficial in most instances, it may interfere with the Secure Boot process and may be why it is greyed out.
Step 1: Restart your computer and start tapping the BIOS key when you see the manufacturer’s logo. The BIOS key is usually one of the function keys, and you may verify with your manufacturer.
Step 2: Navigate to the Advanced tab using the arrow keys.
Step 3: Choose Boot Options and hit the Enter key.
Step 4: Click Fast Boot and choose the Disable option, then hit the Enter key to save your changes.
Step 5: Save the changes and exit your BIOS. Then restart your computer, enter the BIOS again, and see if the Secure Boot option is still greyed out.
2. Set Your Administrator Password in the BIOS
When you set the admin password in BIOS, you ensure only authorized users can change high-level settings, which will fix the greyed-out Secure Boot problem. You may follow the steps below to set the admin password.
Step 1: Restart your computer and start tapping the BIOS key when you see the manufacturer’s logo. The BIOS key is usually one of the function keys, and you may verify with your manufacturer.
Step 2: Navigate to the Security tab using the arrow keys.
Step 3: Navigate to Administrator Password and hit Enter. Note that Administrator Password may be given a different name on other computers.
Step 4: Type your new Password, confirm the password, and hit Enter to save the password.
Step 5: Save the changes and exit your BIOS. Then restart your computer, enter the BIOS again, and see if the Secure Boot option is still greyed out.
3. Restore Your BIOS Security Settings to their Factory Defaults
When you take the settings back to their defaults, it will reset any incorrect or corrupted settings. Sometimes, these bad settings may be preventing Secure Boot from being enabled. Follow the steps below.
Step 1: Restart your computer and start tapping the BIOS key when you see the manufacturer’s logo. The BIOS key is usually one of the function keys, and you may verify with your manufacturer.
Step 2: Navigate to the Security tab and select Restore Security settings to factory defaults using the arrow keys.
Step 3: You may want to read the description before entering a passcode and hitting Enter.
Step 4: Save the changes and exit the BIOS.
Step 5: Re-enter your BIOS and verify Secure Boot is no longer greyed out.
4. Update your BIOS
A hardware issue is frequently to blame for the disabled Secure Boot functionality. After a BIOS update, your BIOS can upgrade Secure Boot firmware and address any problems preventing Secure Boot from working. The process will depend on your manufacturer, but we show you how to do it on HP.
Step 1: Type HP on the Start menu and select HP PC Hardware Diagnostics Windows.
Step 2: Under the BIOS-System Firmware section, click Check for BIOS updates.
Step 3: Click Agree.
5. Tweak the CSM Settings and Boot Features
The Compatibility Support Module or CMS mode BIOS setting allows you to boot a legacy operating system and device. These systems and devices do not support Secure Boot. You can enable CSM mode and disable any boot devices incompatible with Secure Boot by adjusting CSM settings and boot features.
Step 1: Restart your computer and start tapping the BIOS key when you see the manufacturer’s logo. The BIOS key is usually one of the function keys, and you may verify with your manufacturer.
Step 2: Navigate to the Boot Option properties of the BIOS and enable CSM.
Step 3: Update the Boot Device Control option to UEFI and Legacy.
Step 4: Ensure Boot from PCIe/PCI Expansion Devices is set to UEFI First.
FAQ on Greyed Out Secure Boot
1. Why can’t I turn on Secure Boot State?
A few possible reasons are the firmware does not support Secure Boot, or the feature is disabled in your computer’s BIOS or UEFI settings.
2. Why don’t I have Secure Boot in BIOS?
Your BIOS might not support the secure boot option or be hidden or locked by default if you can’t locate it in your BIOS options. If so, you might need to upgrade your BIOS or look up further information online from your manufacturer.
Closing Thoughts
Secure Boot is a useful feature on the Windows 11 OS. The feature protects your computer from malware and other attacks, and we recommend enabling it whenever the option is available. If the Secure Boot future is greyed out, use the solutions recommended in this guide.
You may read more about Secur Boot in our explainer guide.