FIX: Secure Boot Unsupported or Unavailable (Solved)

If you try to install Windows 11 and you can't because Secure Boot is Unsupported or Not Available, continue reading below. Microsoft, starting with Windows 8, supports a new security feature called Secure Boot. Secure boot is available on almost all modern computers and is built into the UEFI (Unified Extensible Firmware Interface), to prevent malware from taking over the computer during the boot process.

Windows 7, Vista and XP used to operate in Legacy boot mode (also known as "CSM" Mode), which uses the Master Boot Record (MBR) Partition table.

Windows 8, 8.1 & 10 are designed to operate also in UEFI boot mode, which uses the GUID Partition Table (GPT), in order to take advantage of the advanced features offered by the UEFI, such as the "Secure Boot" security feature.

Microsoft has made secure boot a prerequisite for users who want to upgrade to Windows 11. So, if you get the error "Secure boot is not supported" or "Secure boot is not available", then one of the following is probably happening:

1. 1. Your computer is set to UEFI boot mode but Secure Boot is OFF (Disabled).
   2. Your computer is set to Legacy boot mode, which does not support either Secure Boot or GPT partition style.
   3. Your computer is not UEFI & Secure Boot capable.

In this tutorial you'll find step-by-step instructions to fix the following problems when you try to install Windows 11:

• Secure Boot is unsupported
• Secure Boot is not available
• Secure Boot is Off

• Related article: How to Install Windows 11 without TPM on Unsupported CPUs.

How to FIX: Secure Boot Unsupported or Off (Disabled) & Cannot Install Windows 11.

Step 1. Check the state of Secure Boot & BIOS Mode.
To know if Secure Boot is On, OFF or Unsupported on your device, follow the instructions below:

1. Press Windows + R keys to open the run command box.
2. Type msinfo32 and click OK to open System Information.

3. On the System Information page, check the BIOS Mode and the Secure Boot Status.

4. Now according your case, proceed as follows:

• CASE A: If the BIOS Mode is UEFI & the Security Boot State is Off, means that your PC boot mode is set to UEFI, but the Secure Boot feature is disabled on your system. At this case skip to Part-1, to enable Secure Boot in BIOS/UEFI firmware settings.

• CASE B: If the BIOS mode is Legacy and the Secure Boot State is Unsupported or Unavailable, go to step-2 below because it means one of the following: *

1. 1. Your computer supports UEFI boot mode, but it is disabled because it is running in Legacy Boot mode, which does not support Secure Boot and GPT, or…
   2. …your computer does not support UEFI boot mode, and therefore does not support secure boot (and TPM 2.0, which is required for Windows 11 installation).

Step 2. Find Out if your Computer Supports UEFI.

At this point and before continuing further, you must ensure that your device supports UEFI & Secure Boot by doing one the following:

• Navigate to the support website of your computer or motherboard manufacturer and check the specifications to see if it supports UEFI boot mode. If yes, proceed to Part-2.
• Check if the UEFI boot mode is available in BIOS/UEFI settings. To do that:

1. 1. Shutdown your PC.
   2. Power On your PC and immediately press the DEL or F2, F10, F12 keys to get into the BIOS/UEFI Firmware Settings. (For more specific details on how to get into BIOS settings, visit your computer’s/motherboard's manufacturer support website).
   3. In the BIOS settings, check in Boot Options if you can enable the UEFI boot mode or if you can disable the Legacy support. If you can, then your computer supports UEFI. At this case exit from BIOS settings without saving and proceed to Part-2. If you cannot, then your computer/motherboard does not support UEFI and needs to be replaced. *

* Note: The safest way to check if your device supports UEFI is from the manufacturer's website. Especially for users who want to upgrade their system to Windows 11 the computer must support also TPM version 2.0.

Part 1. Enable Secure Boot in BIOS/UEFI.

If your computer is running in UEFI boot mode but Secure boot is disabled/OFF (Case A), proceed and activate Secure Boot in BIOS/UEFI settings, by using one of following methods:

Method 1: Change Secure Boot State in UEFI/BIOS Settings.

1. As soon as you turn ON the PC, press the DEL or F2, F10, F12 keys to get into the BIOS/UEFI Firmware Settings. (For more specific details on how to get into BIOS settings, visit your computer’s manufacturer support website).

2. Go to Security Options or to Boot Options & Change the Secure Boot to Enabled. *

* Note: If you want to install/upgrade to Windows 11, you must enable also the TPM in BIOS Settings. The TPM can be called (depending on the manufacturer) as: Intel Platform Trusted Module, Intel TPM, Intel Platform Trust Technology, Intel PTT, Security Device, Security Device Support, TPM State, AMD fTPM switch, AMD PSP fTPM.

3. Save and Exit from BIOS settings.

Method 2. Activate Secure Boot in UEFI Firmware settings from Windows RE.

To second way to get into the BIOS/UEFI settings, is by using the Windows Recovery Environment (WinRE) options:

1. Hold down the Shift key and from the Power icon select Restart to boot your system in Windows Recovery Environment (WinRE).

2. Then select Troubleshoot -> Advanced options -> UEFI Firmware Settings and select Restart.

3. Navigate to the System Configuration tab, select Boot Options.

4. In Boot options, Change Secure Boot and select Enabled. *

* Note: If you can't find the Secure Boot option here, go to the manufacturer's support website for guidance. (The BIOS/UEFI firmware settings varies among difference computer manufacturers)

5. Save and Exit from BIOS Settings.

6. Restart the PC and open System Information (msinfo.exe), to verify that Secure Boot is On now.

Part 2. Convert DISK to GPT & Enable UEFI and Secure Boot.

As mentioned at the beginning of this article, secure boot is only supported on modern computers where the boot mode of the computer is set to UEFI and the partition table is GPT.

So, if your computer's boot mode is set to Legacy and the partition table is MBR (Case B), then to enable secure boot, you must first convert the partition schema from MBR to GPT, and then switch from Legacy boot mode to UEFI boot mode.*

* Warning: Before you continue to the steps below, backup your data, to avoid data loss if something goes wrong, and ensure that your device supports UEFI (see step-2 above).

Step 1. Ensure that the current Partition Style is MBR.

Before you convert the partition scheme, first ensure that the partition style on your main disk is MBR and NOT GPT.

1. Press the Windows   + R keys to load the Run dialog box.
2. Type diskmgmt.msc and press Enter.

3. Right-click the drive with Windows OS and select Properties.

4. Select the Volumes tab.

5. Now look at the "Partition style" and make sure it is Master Boot Record (MBR). *

* Note: If the Partition style states GUID Partition Table (GPT), you don’t need to proceed to further. Just follow the instructions on Part-1 above to enable the Secure Boot in BIOS.

6. Once you confirm that the partition style is "MBR", proceed to step-2 below to convert the partition style to GPT.

Step 2. Convert MBR partition style to GPT.

Windows Creator Update (1703) or later allows you to convert the partition scheme without losing data. Microsoft designed the MBR2GPT.exe tool for easy conversion and data retention. However, it is safer to convert the partition scheme when Windows is Offline (not running). To do that:

1. Hold down the Shift key and from the Power icon select Restart to boot your system in Windows Recovery Environment (WinRE).

2. Then go to Troubleshoot -> Advanced options -> Command Prompt. (If asked choose an administrator account and type its password to proceed).

3. Type the command below to convert the disk from MBR to GPT and hit Enter:

• mbr2gpt /convert

4. When the process completes, close command prompt and shut down the PC.
5. Proceed to step-3 below.

Step 3. Enable UEFI and Secure Boot in BIOS/UEFI firmware settings.

After converting the partition style from MBR to GPT, the computer will not be able to boot normally until the PC boot mode is changed from Legacy to UEFI. So, proceed as follows before booting to Windows.

1. As soon as you turn ON the PC, press the DEL or F2, F10, F12 keys to get into the BIOS/UEFI Firmware Settings. (For more specific details on how to get into BIOS settings, visit your computer’s manufacturer support website).

2. Navigate to the System Configuration tab and select Boot Options.

3. In Boot options, apply the follow actions:

a. Set the Legacy Support to UEFI or Disabled (This will automatically enable UEFI)

b. Change the Secure Boot to Enabled. *

* Note: If you can't find the Secure Boot option here, go to the manufacturer's support website for guidance. (The BIOS/UEFI firmware settings varies among difference computer manufacturers)

4. Save and Exit from BIOS Settings.

5. Boot to Windows and check in System Information to be sure that secure boot is ON. You will also notice that BIOS Mode is UEFI.

6. At this point you can proceed to upgrade your device to Windows 11, if that was the goal you wanted to achieve with these changes.

That's it! Let me know if this guide has helped you by leaving your comment about your experience. Please like and share this guide to help others.