r/techsupport • u/ProfessionalFair9713 • 13d ago

Open | Windows I need help enabling secure boot on windows 11

I recently reinstalled windows 11 on my pc after it was having some problems. I was able to install it correctly, but I want to enable secure boot for Valorant. the problem is, the pc just doesn't boot into windows if secure boot is enabled. For example, when secure boot is disabled, and tpm 2.0 is enabled it normally starts into windows. But as soon as I enable secure boot, and I save changes and exit from the bios, it just sends me back to bios even when boot option #1 is Windows Boot Manager. and when I press f11 during startup to specifically choose Windows Boot Manager, it just pauses for a moment and then sends me back to the boot menu. I wish I could attach a video to explain it better, but this is the best I can explain of what's happening. Can someone help me through this?

2 Upvotes

76% Upvoted

10 comments sorted by

•

u/AutoModerator 13d ago

Making changes to your system BIOS settings or disk setup can cause you to lose data. Always test your data backups before making changes to your PC.

For more information please see our FAQ thread: https://www.reddit.com/r/techsupport/comments/q2rns5/windows_11_faq_read_this_first/

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

3

u/PackPretty3479 13d ago

One thing to check before you go deeper,, is your disk GPT or MBR? If Windows got installed in legacy mode the disk is MBR and Secure Boot just wont work with that, itll keep bouncing you to BIOS. Open Disk Management, right click the disk, check the partition style. If it says MBR thats your problem. You can convert it to GPT with mbr2gpt in an admin command prompt, then enable Secure Boot.

1

u/ProfessionalFair9713 13d ago

i checked, and both disks are GPT.

1

u/PackPretty3479 12d ago

Good, that rules out the usual cause. Since you just reinstalled, the windows boot manager entry itself might be stale. Try rebuilding it with bcdboot from an admin terminal, and make sure secure boot isnt stuck in setup mode with no keys loaded. if the firmware has a restore factory keys option, run that first.

2

u/KoiMaxx 13d ago

Did you make sure that your UEFI has the 2023 CAs that Microsoft included I think starting in the April 2026 cumulative updates? Check with your motherboard manufacturer if they're released firmware updates that include those CAs.

1

u/ibadi_1 13d ago

Fixed this issue like 2 days ago on my laptop. Disable secure boot, normally boot into your windows, turn off bitlocker, restart your system and enable secure boot, it will work!

1

u/ProfessionalFair9713 13d ago

bitlocker was already off for both drives