This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(137.6, 27%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
I have a laptop HP elitebook 840 g5 it does have 16 gb of ram intel core i5 8th gen tpm 2.0 and secure boot but does secure boot has to be enabled to install windows 11?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 2%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ELV%3C/text%3E%3C/svg%3E)
Hi Mustang1990,
To clarify your question, the AI answer is correct.
Windows 11 requires that the device be Secure Boot capable, but Secure Boot does not have to be enabled to install. It means you can install Windows with Secure Boot disabled.
If you have further questions, please feel free to let me know.
Hi Mustang1990,
I hope everything is going well on your end. Just wanted to check in and see how things are going for you lately, anything you'd like to share or discuss?
Test answer
Hi, I'm Rodrigo, and I will help you.
Yes, Secure Boot is a requirement to install Windows 11.
If you plan to clean install Windows 11, it is easy to fix, if you need to upgrade, the process is more complex.
test comment
I know that it's required but will windows 11 install if secure boot is disabled? That AI here says "Windows 11 requires that the device be Secure Boot capable, but Secure Boot does not have to be enabled to install or upgrade to Windows 11." so i dont know
AI answer
Windows 11 requires that the device be Secure Boot capable, but Secure Boot does not have to be enabled to install or upgrade to Windows 11.
The documented minimum system requirement is:
However, enabling Secure Boot is recommended because it provides additional protection by creating a hardware-backed root of trust and blocking untrusted boot-time code. Many newer systems ship with Secure Boot enabled by default, and guidance suggests enabling it where possible for better security.
So on an HP EliteBook 840 G5 that supports UEFI, TPM 2.0, and Secure Boot, Windows 11 can be installed as long as the device is Secure Boot capable, even if Secure Boot is currently disabled. Secure Boot can be enabled later in firmware/BIOS if desired.
References:
