Configuring Secure Boot

Document ID: 4009213


Posted Date: 2016-06-29


Last Updated: 2016-06-29


Distribution: View Public Website




What do I do if I see "Secure Boot isn't configured correctly" on my Desktop?


Secure Boot is an option, introduced to most consumers in Windows 8, in the UEFI settings, which some people might call the BIOS. When enabled, your computer will only load drivers or operating system loads that have an acceptable digital signature. This means that Secure Boot ensures harmful software doesn't attempt to load during the boot process.

This may become disabled for a variety of reasons. The most likely is that it was disabled to allow the computer to boot from an external device or to boot a previous version of Windows. In the original version of Windows 8, Windows gave no indication that Secure Boot was disabled. Windows 8.1 changed this by displaying a watermark on the desktop.

If you intended Secure Boot to be disabled, there is no problem. The watermark can be safely ignored, but there is no setting to remove it.

If you did not intent Secure Boot to be disabled, you can enable it. Open the Charms by swiping in from the right, moving the mouse cursor to top-right or bottom-right corner, or pressing Windows+C, then select the following:

Settings > Power > Shift + Restart > Troubleshoot > UEFI Firmware Settings

In the UEFI Firmware Settings, navigate to the Security tab and set Secure Boot to Enabled.

For more information on the watermark, please see this article by Microsoft.

"Secure Boot isn't configured correctly" watermark on the desktop


Export Control and EULA
Use of any software made available for download from this system constitutes your acceptance of the Export Control Terms and the terms in the Dynabook end-user license agreement both of which you can view before downloading any such software.