How to fix "The PC must support secure boot" error during windows 11 install

For average users, follow the simple steps listed in this tutorial to install windows 11 without secure boot:

https://www.techmodos.com/install-windows-11-without-tpm-secure-boot

You got "The PC must support secure boot" error during Windows 11 install. Supporting Secure Boot on a PC is generally beneficial for security, but there are some potential risks or limitations if not managed properly. Without Secure Boot, malicious actors can attempt to infect or tamper with the bootloader, kernel, or early system files, potentially leading to rootkits or persistent malware infections that are harder to detect and remove.

Certain hardware components or drivers may rely on Secure Boot being enabled to ensure they are trusted. Conversely, some legacy hardware or unsigned drivers might not work with Secure Boot enabled, creating potential boot or stability issues if not configured correctly. Without Secure Boot, attackers or malicious software may modify or replace firmware, bootloaders, or OS components, compromising the entire system security chain.

How to fix the PC must support secure boot error? Running alternative OSes or custom configurations without Secure Boot support can be more complex and potentially less secure if not managed carefully, but this is more about compatibility than danger.

Windows 11 officially requires Secure Boot, but if your PC doesn’t support it or you can’t enable it, you can bypass the check using one of these methods.

Boot into Windows 10/11 Setup (USB/DVD). At the "This PC can't run Windows 11" screen, press Shift + F10 to open Command Prompt. Type these commands to skip The PC must support secure boot issue.

regedit

Navigate to HKEY_LOCAL_MACHINE\SYSTEM\Setup. 

Right-click → New → Key → Name it LabConfig.

Inside LabConfig, create these DWORD (32-bit) Values:

BypassSecureBootCheck → Set value to 1

Close Registry Editor and Command Prompt, then proceed with installation. At this time, Windows 11 setup wizard will skip secure boot check and let you install Windows 11 without secure boot. 

Important Considerations and Troubleshooting:

• UEFI Mode: Ensure your boot mode is set to UEFI in the BIOS/UEFI settings. If it's set to Legacy, you won't be able to install Windows 11.
• Trusted Platform Module (TPM): Windows 11 requires a TPM (Trusted Platform Module) 2.0 chip to function correctly. If you don't have TPM enabled, Windows 11 installation may fail even if Secure Boot is enabled. Check your motherboard's documentation for TPM information, and you can use the BIOS to enable it if supported.
• Driver issues: Sometimes, even if Secure Boot is enabled, a faulty or missing driver could be the cause of the issue. If you've already tried the above steps and are still having problems, try to install the latest drivers for your motherboard and other hardware components.
• Specific Firmware Versions: Some motherboards have issues with older firmware versions. Check your manufacturer's website for the latest BIOS update and install it (this is crucial). Follow your motherboard manufacturer's instructions carefully.

If the "The PC must support Secure Boot" error persists after all these steps:

• Reinstall Windows 10: If you can't get Windows 11 to install, reinstalling Windows 10 might fix underlying issues that are preventing the upgrade.
• Check the Windows 11 compatibility: Verify your hardware components (especially the graphics card) are fully compatible with Windows 11. Using the Microsoft website, you can check if your components are known to work well with Windows 11.
• Contact Support: If none of these steps work, contact your motherboard manufacturer for further assistance. They may have specific instructions or troubleshooting advice for your model.

If you encounter the error"The PC must support Secure Boot". Enabling Secure Boot can sometimes affect other boot options.  If you have a dual-boot system or use any other specialized boot options, double-check the BIOS/UEFI settings to ensure you have the correct options in place.  If something is not working as expected, reverting back to the previous BIOS settings is possible.  However, ensure you understand the risks involved before making any changes. Always create a backup of your important data before making significant changes to your system.

Secure Boot is a hard requirement for Windows 11. Your PC must support and have Secure Boot enabled in UEFI/BIOS to install or upgrade to Windows 11.

How to Enable Secure Boot in BIOS/UEFI

Step 1: Restart your PC.

Step 2: During startup, press the BIOS key (common keys: Del, F2, F10, F12, or Esc). The exact key depends on your manufacturer (e.g., F2 for Dell, Esc for HP, Del for ASUS/MSI).

Step 3: Navigate to the "Boot", "Security", or "Authentication" tab (varies by motherboard).

Step 4: Look for "Secure Boot" and set it to "Enabled".

Step 5: If prompted, confirm changes and save settings (usually F10).

After rebooting, open Command Prompt and run:

Confirm-SecureBootUEFI

If it returns "True", Secure Boot is enabled. This is a free and effect way to help you fix The PC must support Secure Boot error when upgrading from Windows 10 to Windows 11.

The error "This PC doesn't currently meet Windows 11 system requirements. The PC must support Secure Boot" means your motherboard's firmware (BIOS/UEFI) doesn't have Secure Boot enabled.  You cannot install Windows 11 without enabling it.  Don't try to disable it or work around it.  It's a critical security feature.

Here's how to troubleshoot and fix "The PC must support Secure Boot" error:

1. Check your motherboard's documentation:  The best place to find information about enabling Secure Boot in your specific BIOS/UEFI is your motherboard manufacturer's support website.  Search for your motherboard model (e.g., "ASUS ROG STRIX Z690-A BIOS Secure Boot").  The documentation will tell you precisely how to enable it within the BIOS setup menu.
2. Enter the BIOS/UEFI setup:  You usually need to press a key (e.g., Delete, F2, F10, F12) during the boot process before Windows 10 loads to enter the BIOS setup.  The specific key varies by motherboard.  Look for a message on the screen during the startup process.
3. Enable Secure Boot:  Once in the BIOS/UEFI setup, navigate to the section related to security, boot options, or similar.  Look for an option called "Secure Boot" or a similar name.  Enable it.  You may also need to enable "Boot Mode" and set it to UEFI.  Crucially, look for any additional options related to Secure Boot such as a selection of boot options (e.g., "Legacy" or "UEFI").  Choose UEFI.
4. Save changes and exit:  After enabling Secure Boot, save the changes and exit the BIOS/UEFI setup.  Your computer will reboot.
5. Try installing Windows 11 again:  Now, try the Windows 11 installation again.  If the error still appears, it's likely a different problem.

Secure Boot is a security feature in modern computers that ensures only trusted software (like the operating system or firmware) can load during the boot process. It is part of the UEFI standard and helps prevent malware or unauthorized software from running at startup. And it is required by Windows 11!

How to Check if Your PC Has Secure Boot Enabled

1. Press Win + R, type 'msinfo32', and hit Enter.

2. Look for "Secure Boot State" in the right panel.

3. If it says "On", Secure Boot is enabled.

4. If it says "Off" or "Unsupported", your PC either doesn’t support it or it’s disabled in BIOS/UEFI.

Why Secure Boot Matters for Windows 11

• Prevents rootkits and bootkits from infecting the boot process.
• Required for Windows 11 (must be enabled to install).
• Enhances security against low-level malware.

Troubleshooting

1. If Secure Boot is unsupported, your PC may be using Legacy BIOS instead of UEFI.
2. Some Linux distributions may need additional steps to work with Secure Boot.

To fix "The PC must support secure boot" error, you need to turn on Secure Boot or apply some trick to skip Windows 11 system check as the PC has a very powerful CPU and a lot of RAM.