Disabling Secure Boot in Windows 11 is done in your PC’s UEFI/BIOS menu, not inside normal Windows itself, and the exact wording/menus vary by manufacturer.

Important warnings

  • Secure Boot helps protect against low‑level malware and rootkits by only allowing trusted bootloaders. Turning it off lowers security.
  • Some games or anti‑cheat systems now require Secure Boot to be enabled; disabling it can cause issues with those titles.
  • On work or school laptops, firmware options may be locked by IT, and you might not be able to change Secure Boot at all.

Step 1 – Check Secure Boot status in Windows

  1. Press Windows key and type System Information , then open it.
  1. In the left pane, select System Summary.
  2. On the right, look for:
    • BIOS Mode → should say UEFI (required to have Secure Boot).
 * **Secure Boot State** → **On** , **Off** , or **Unsupported**.

If it says Unsupported , you cannot use or disable Secure Boot on that hardware.

Step 2 – Boot to UEFI firmware from Windows 11

  1. Open Settings → System → Recovery.
  1. Under Advanced startup , click Restart now , then confirm.
  1. After reboot, choose:
    • Troubleshoot → Advanced options → UEFI Firmware Settings → Restart.

Your PC will reboot into the UEFI/BIOS setup screen.

Step 3 – Find Secure Boot in BIOS/UEFI

Because every vendor is different (ASUS, MSI, Dell, HP, Lenovo, etc.), the setting may be under slightly different tabs, but common locations are:

  • Security tab
  • Boot tab
  • Authentication tab

Look for an entry like:

  • Secure Boot
  • Secure Boot Control
  • OS Type / Secure Boot Mode

On some ASUS‑style firmware, you may need an Advanced Mode (often by pressing F7) to see Secure Boot controls.

Step 4 – Actually disable Secure Boot

Once in the correct menu, you’ll usually have one of two patterns:

A. Direct toggle

  • Highlight Secure Boot or Secure Boot Control.
  • Change Enabled → Disabled.

B. Using key management

Some boards don’t show a simple toggle and instead use keys:

  • Enter Key Management or similar under the Secure Boot section.
  • Choose Clear Secure Boot keys (or Delete all Secure Boot Keys).
  • Confirm with Yes.
  • This will set Secure Boot to an effectively disabled/off state.

If you see Install Default Secure Boot Keys , that is for turning Secure Boot back on later.

Step 5 – Save and reboot

  • Press the firmware’s Save & Exit key (often F10 , or use the Exit tab → Save Changes and Exit).
  • The PC will reboot into Windows 11.

Back in System Information , Secure Boot State should now show Off or Disabled.

If the option is greyed out or locked

Users on forums and Q&A sites frequently run into greyed‑out Secure Boot options on laptops (especially some ASUS/consumer laptops).

Common things to check:

  • Admin/Supervisor password: Some firmware requires setting a supervisor or admin password in BIOS before changing Secure Boot.
  • Boot mode: Option may only be editable when boot mode is UEFI and not Legacy/CSM.
  • Platform mode: Some firmware shows Standard / User / Custom / Setup ; Secure Boot may only be changeable in a specific mode.
  • Managed device: On corporate machines, IT policies can lock Secure Boot permanently.

If your laptop model has special quirks, searching the exact model plus “disable Secure Boot” often leads to user threads describing model‑specific steps.

When you should re‑enable Secure Boot

Once you have finished installing Linux, modded drivers, or anything else that required disabling Secure Boot, it is safer to turn it back on if your setup supports it.

  • Go back into UEFI firmware.
  • Either set Secure Boot to Enabled , or Install Default Secure Boot Keys if your vendor uses the keys approach.
  • Save and exit, then verify in System Information that Secure Boot State is On.

Information gathered from public forums or data available on the internet and portrayed here.