Secure Boot enabled but not active in Windows 11: Causes and solutions

Are you tired of dealing with the frustrating “Secure Boot enabled but not active” issue in Windows 11? This problem can prevent you from updating your operating system or running certain applications, leaving you feeling stuck and vulnerable to security risks. But don’t worry, we’ve got you covered In this article, we’ll delve into the causes of this issue, provide step-by-step solutions to fix it, and offer tips on how to prevent it from happening in the future.

Causes of Secure Boot enabled but not active

Several reasons contribute to the Secure Boot enabled but not active issue in Windows 11:

1. Secure Boot disabled in UEFI firmware settings: If Secure Boot is disabled in the UEFI (Unified Extensible Firmware Interface) firmware settings, it may not be active even if it is enabled in the BIOS settings.
2. CSM (Compatibility Support Module) enabled: CSM is a feature that allows legacy BIOS compatibility. However, it can interfere with Secure Boot and cause it to be inactive.
3. Outdated BIOS: An outdated BIOS can cause compatibility issues with Secure Boot, leading to it being inactive.
4. Virus or malware interference: Malware or viruses can interfere with Secure Boot and cause it to be inactive.
5. BIOS Mode Set to Legacy instead of UEFI: If the BIOS mode is set to Legacy instead of UEFI, Secure Boot may not be active.

Solutions to fix Secure Boot enabled but not active

To fix the Secure Boot enabled but not active issue in Windows 11, follow these step-by-step solutions:

Solution 1: Update BIOS

1. Check the motherboard manufacturer’s website for any available BIOS updates.
2. Download and install the latest BIOS update.
3. Restart your computer and enter the BIOS settings (usually by pressing DEL, F2, F10, or F12).
4. Save the changes and exit the BIOS settings.

Updating the BIOS may resolve the issue and activate Secure Boot.

Solution 2: Disable CSM

1. Enter the BIOS settings (usually by pressing DEL, F2, F10, or F12).
2. Navigate to the Boot or Security tab.
3. Find the Secure Boot menu and disable CSM.
4. Save the changes and exit the BIOS settings.

Disabling CSM may resolve the issue and activate Secure Boot.

Solution 3: Change platform

1. Enter the BIOS settings (usually by pressing DEL, F2, F10, or F12).
2. Navigate to the Boot or Security tab.
3. Find the Secure Boot menu and change the Secure Boot mode from “Standard” to “Custom”.
4. Save the changes and exit the BIOS settings.
5. Restart your computer and enter the BIOS settings again.
6. Change the Secure Boot mode back to “Standard” with factory defaults.

Changing the platform may resolve the issue and activate Secure Boot.

Solution 4: Enable Secure Boot properly

1. Go to Settings > Update & Security > Recovery > Advanced Startup > Restart now.
2. Select Troubleshoot > Advanced options > UEFI Firmware Settings.
3. Ensure Secure Boot is enabled.

Enabling Secure Boot properly may resolve the issue and activate it.

Solution 5: Scan for malware

1. Temporarily disable antivirus software and system optimization utilities.
2. Scan your computer for malware using a reputable antivirus software. Microsoft PC Manager is a good start.   
3. Remove any detected malware.
4. Re-enable the antivirus software and system optimization utilities.

Scanning for malware may resolve the issue and activate Secure Boot.

Prevention tips

To prevent the Secure Boot enabled but not active issue in Windows 11, follow these tips:

1. Regularly update your BIOS to ensure you have the latest security patches and features.
2. Disable CSM if you don’t need it.
3. Use a reputable antivirus software to scan for malware regularly. Microsoft PC Manager is one option.
4. Ensure Secure Boot is enabled properly.

The “Secure Boot enabled but not active” issue in Windows 11 can be frustrating and concerning, but it’s not impossible to fix. By understanding the causes of this issue and following the step-by-step solutions provided in this article, you can resolve the problem and ensure your system is secure and up-to-date. Remember to also follow the prevention tips to avoid this issue in the future. With these solutions and tips, you’ll be able to enjoy a secure and seamless Windows 11 experience.

About The Author

Dave W. Shanahan

I’m Dave W. Shanahan, a Microsoft enthusiast with a passion for Windows, Xbox, Microsoft 365 Copilot, Azure, and more. I started MSFTNewsNow.com to keep the world updated on Microsoft news. Based in Massachusetts, you can email me at davewshanahan@gmail.com.

See author's posts