This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
Hello!
I've recevently been trying to get Secure Boot enabled on my machine, and I am at a bit of a loss. This came about as I was getting error "PCR7 binding is not supported..." error for device encryption, and after some research it seems like the likely culprit was that my Secure Boot State is off.
I have gone through the steps I could find to get Secure Boot setup: ensured my boot drive is GPT, TPM specification number is 2.0, and I have gone through my BIOS settings and have enabled Secure Boot. However, no matter what I do Windows reports back that Secure Boot State is Off. Has anyone had issues like this before?
I'm happy to provide any additional information about my computer as needed, and I appreciate any help anyone can provide!
Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.
I had the same problem on a Lenovo ThinkPad P52.
In the BIOS, Secure Boot was enabled, but Windows 11 showed "Secure Boot State" as "Off".
The cause was, that the Secure Boot Mode in my BIOS was set to "Setup Mode".
To change it to "User Mode", I had to select "Restore Factory Keys" on the Security Page in the BIOS.
After that, I could start the computer and Windows 11 displayed that the Secure Boot State is "On".
Maybe this helps someone.
I’ve been searching for hours, I finally can play valorant again lol. Thank you!!
Hi, I’m Nicole, I’ll be happy to help you out today.
It's possible that there may be a few reasons why Windows is reporting that Secure Boot is off, even though you've enabled it in your BIOS settings. Here are a few things you can try:
Verify that your computer's UEFI firmware is up-to-date. Check your motherboard manufacturer's website for any available BIOS updates.
Check that your operating system is configured to use Secure Boot. In Windows 11, you can check this by going to Settings > Update & Security > Recovery > Advanced Startup > Restart now. Once your computer restarts, select Troubleshoot > Advanced options > UEFI Firmware Settings. This will take you to your computer's BIOS settings. Make sure that Secure Boot is enabled here.
Verify that your boot configuration is set up to use Secure Boot. You can do this by going to the System Configuration settings in Windows 11. Press the Windows key + R and type "msconfig" in the Run dialog box. In the System Configuration window, click on the "Boot" tab, and make sure that the "Safe boot" and "No GUI boot" options are unchecked.
Check for any third-party software that may be interfering with Secure Boot. Antivirus software, system optimization utilities, and some other programs may interfere with Secure Boot. Try temporarily disabling any such software to see if that resolves the issue.
Finally, it's possible that your computer's hardware does not fully support Secure Boot, even if your BIOS settings are configured correctly. You may want to check with your computer's manufacturer to see if your particular model supports Secure Boot.
I hope this helps you get Secure Boot working on your machine.
Regards.
I have spend hours of my past month trying to figure this out I was at my wits end i have watched so many hours of youtube tutorials on bios settings clearing start up apps literally anything. This comment was the only thing that fixed the issue thank you so much. God bless you!
Thank you, you´ve saved my day!
