How to Enable or Disable Secure Boot in UEFI
InformationUEFI (replaces BIOS) has a firmware validation process, called secure boot, which is defined in Chapter 27 of the UEFI 2.3.1 specification. Secure boot defines how platform firmware manages security certificates, validation of firmware, and a definition of the interface (protocol) between firmware and the operating system. Secure boot prevents “unauthorized” operating systems and software from loading during the startup process.
Quick summary
- UEFI allows firmware to implement a security policy
- Secure boot is a UEFI protocol not a Windows 8 feature
- UEFI secure boot is part of Windows 8 secured boot architecture
- Windows 8 utilizes secure boot to ensure that the pre-OS environment is secure
- Secure boot doesn’t “lock out” operating system loaders, but is a policy that allows firmware to validate authenticity of components
- OEMs have the ability to customize their firmware to meet the needs of their customers by customizing the level of certificate and policy management on their platform
- Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows
For more information about secure boot, see:
Protecting the pre-OS environment with UEFI - Building Windows 8 - Site Home - MSDN Blogs
and
Secure Boot Overview
Note
This tutorial will show you how to enable or disable secure boot in your PC's UEFI settings.
Any PC with a Windows 8 logo sticker has secure boot enabled by default. Secure boot can make Windows 8 very resistant to low-level malware such as rootkits.
If you would like to post screenshots of your motherboard's secure boot settings, then please do. Here are some others posted so far:
Warning
Arm based Windows RT PCs and devices will have a locked boot loader, so you will not be able to disabled secure boot on them.
Do not enable secure boot with Windows 7, Vista, or XP installed. If you do, these OSs will not boot until secure boot is disabled.
EXAMPLE: "SecureBoot isn't configured correctly" watermark in Windows 8.1
NOTE: You will see this watermark on the bottom right corner of your desktop if you have Windows 8.1 installed with UEFI and secure boot is not configured correctly even when enabled. To remove this watermark, you will just need to enable and configure secure boot correctly.
OPTION ONE
Enable or Disable Secure Boot on "ASRock" Motherboards
Note
This steps below are for how to enable or disable secure boot on an ASRock X79 Extreme11 UEFI motherboard.
These steps will vary depending on what brand and model number your PC or UEFI motherboard is, so please read it's manual to compare with the steps below for how to do so with your specific PC and motherboard.
1. Do step 2 or 3 below depending on how you would like to boot to the UEFI firmware settings.
2. Boot to UEFI Firmware Settings in Windows 8/8.1 "Advanced Options" UI
A) Boot to the UEFI Firmware Settings[/url], then go to step 4 below. (see screenshot below)
3. Boot to UEFI Firmware Settings at Boot
NOTE: This step can be used with any 32-bit or 64-bit Windows installed.
A) During the initial stages at boot, press the DELETE key to enter UEFI firmware settings, and go tostep 4 below.
NOTE: Your PC may use another key to press instead, so be sure to read your PC's manual and/or the boot screen to see what key to press.
4. In the motherboard's UEFI firmware settings, click/tap on the Security menu, select the Secure Bootoption, and click/tap/press Enter to enable or disable it. (see screenshots below)
5. If you enabled secure boot, then click/tap on the "Install default Secure Boot keys" option. (see screenshot below)
NOTE: This is to configure secure boot.
A) Click/tap on Yes to approve. (see screenshot below)
B) Secure boot has now been enabled and configured. (see screenshot below)
8. Click/tap on the Exit menu, and click/tap on Save Changes and Exit (reboot). (see screenshot below)
NOTE: You can usually also press the F10 to save changes and exit.
9. The computer will now restart to startup Windows.
OPTION TWO
Enable or Disable Secure Boot on "Acer" PCs
1. See also: How to Enable or Disable Secure Boot
Nguồn : www.eightforums.com
Được sửa bởi ܨܓ★KUSHY ღ™ ngày Wed Oct 23, 2013 10:40 pm; sửa lần 3.