Submit an edit

On newer Windows 8 PCs using the UEFI or EFI boot standard, many PC manufacturers use a feature known as "Secure Boot" which blocks computers and laptops from booting from external media such as bootable USB sticks or CDs and DVDs. This guide covers some of the common ways to disable "Secure Boot" on your PC, letting you boot into recovery media and setup CDs for other operating systems like Linux or older versions of Windows. Depending on your system configuration, you may also need to set up your <a href="https://neosmart.net/wiki/enable-legacy-boot-mode/">UEFI "BIOS" to enable legacy mode</a>.
<h2>Secure Boot</h2>
Originally designed as a security measure, Secure Boot is a feature of many newer EFI or UEFI machines (most common with Windows 8 PCs and laptops), which locks down the computer and prevents it from booting into anything but Windows 8. It is often necessary to disable Secure Boot to take full advantage of your PC.
<h3>Reasons to disable Secure Boot</h3>
There are several reasons why it might be necessary to disable Secure Boot on your workstation or laptop, that include
<ul>
	<li>Installing an older version of Windows</li>
	<li>Installing Linux, BSD, or another operating system</li>
	<li>Running system repair CDs or utilities (such as NeoSmart Technologies' <a href="http://neosmart.net/EasyRE/">Easy Recovery Essentials for Windows</a>)</li>
	<li>Performing advanced PC maintenance procedures, such as BIOS or firmware updates</li>
</ul>
<h2>Disabling Secure Boot</h2>
On PCs and laptops from most manufacturers, including Dell, HP, Asus, Acer, Toshiba, Lenovo, and more, Secure Boot can be disabled from the EFI setup/configuration feature, available immediately after turning on your PC. While some makes and models of laptops actually do not let you turn off Secure Boot, the following instructions should work for most users.

Below are instructions for turning off Secure Boot on most PCs and laptops, as well as specific instructions for certain brands of laptops. On most EFI computers, you'll need to access EFI setup immediately after turning on your PC in order to see the option of switching off Secure Boot, usually as an option under the boot options section of the BIOS configuration.
<h4>Entering the UEFI setup</h4>
[caption id="attachment_1419" align="alignright" width="300"]<a href="/wiki/wp-content/uploads/sites/5/2013/09/Dell-POST.jpg"><img class="size-medium wp-image-1419 " src="/wiki/wp-content/uploads/sites/5/2013/09/Dell-POST-300x224.jpg" alt="Dell BIOS screen showing special key options" width="300" height="224" /></a> Notice the key guide in the top-right corner.[/caption]

Immediately after powering up your PC, as soon as the manufacturer logo (e.g. Dell, Lenovo, HP, Toshiba, Samsung, ASUS, Acer, Gateway, etc.) shows up on your BIOS splash screen, you will have the option of pressing a special key. <strong>This key changes from PC to PC</strong>, it all depends on your PC's make and model.

Typically, you will see a brief note at the bottom or top of the screen indicating what the key is. One such screen is visible to the right, note the legend in the top-right corner indicating <kbd>F2</kbd> will start the BIOS setup and <kbd>F12</kbd> will present the boot selection menu.

Some common options include the <kbd>F2</kbd>, <kbd>F8</kbd>, <kbd>F12</kbd>, and <kbd>Del</kbd> keys. However, it could be any of the one hundred other keys on your keyboard.
<h4>Switching off Secure Boot</h4>
Once inside the UEFI setup and configuration section, you'll be presented with a number of options and parameters that can be configured for the firmware environment. You're looking for an option often called "Secure Boot" which can be set between "Enabled" or "Disabled".

Depending on the motherboard's BIOS/EFI firmware, the Secure Boot option will be found on the "Boot", "Security", or "Authentication" page. <strong>It must be set to "Disabled" or "Off" to allow you to boot from external media correctly.</strong>

[caption id="attachment_2049" align="alignleft" width="300"]<a href="/wiki/wp-content/uploads/sites/5/2014/05/HP-Secure-Boot.jpg"><img class="size-medium wp-image-2049" src="/wiki/wp-content/uploads/sites/5/2014/05/HP-Secure-Boot-300x225.jpg" alt="HP Secure Boot" width="300" height="225" /></a> HP Secure Boot[/caption]

[caption id="attachment_2051" align="alignleft" width="300"]<a href="/wiki/wp-content/uploads/sites/5/2014/05/ASRock-Secure-Boot.jpeg"><img class="size-medium wp-image-2051" src="/wiki/wp-content/uploads/sites/5/2014/05/ASRock-Secure-Boot-300x224.jpg" alt="ASRock Secure Boot" width="300" height="224" /></a> ASRock Secure Boot[/caption]

[caption id="attachment_2052" align="alignleft" width="300"]<a href="/wiki/wp-content/uploads/sites/5/2014/05/ASUS-Secure-Boot.png"><img class="wp-image-2052 size-medium" src="/wiki/wp-content/uploads/sites/5/2014/05/ASUS-Secure-Boot-300x225.png" alt="ASUS Secure Boot" width="300" height="225" /></a> ASUS Secure Boot[/caption]

[caption id="attachment_2050" align="alignnone" width="300"]<a href="/wiki/wp-content/uploads/sites/5/2014/05/Acer-Secure-Boot.jpg"><img class="wp-image-2050 size-medium" src="/wiki/wp-content/uploads/sites/5/2014/05/Acer-Secure-Boot-300x168.jpg" alt="Acer Secure Boot" width="300" height="168" /></a> Acer Secure Boot[/caption]
<h4>Saving Settings and Exiting</h4>
In order for the changes to the Secure Boot configuration to take effect, the BIOS/EFI/UEFI configuration options must be saved. The common keyboard shortcut to save and exit is <kbd>F10</kbd>.

After correctly giving priority to the CD/DVD over the local hard disk, you will need to save changes and exit. Again, the exact steps depend on your PCs make and model, but generally navigating with the <kbd>←</kbd> and <kbd>→</kbd> arrow keys will let you reach the options of "discard changes and exit" vs "save changes and exit," amongst others. It's important that you choose the "save changes and exit" option! The keyboard shortcut <kbd>F10</kbd> is often synonymous with "save and exit" but you should make sure before using it.