Many users reported an error. “Secure Boot State Unsupported” When trying to upgrade their computers to Windows 11, this post provides a series of fixes designed to remove the error from your system.
Tip: Have you just created a bootable USB driveHere's how to check if it works in Windows.
Why do you get the error?
Secure Boot is a security feature that prevents untrusted software from being installed during the boot process. By doing so, the tool keeps malware and other malicious software away from your computer during startup.
Most modern computers ship with Secure Boot enabled by default. However, if you disable it for any reason, you may encounter the "Secure Boot State Not Supported" error when upgrading your PC from Windows 10 to 11.
In addition to disabling Secure Boot, here are more reasons why this error might be occurring:
- Legacy BIOS Mode
- No Trusted Software Module (TPM) support or disabled TPM.
1. Check TPM support
TPM is a technology designed to improve computer security at the hardware level. Your computer needs to enable TPM 2.0 when upgrading to Windows 11.
- Click on Windows + R To open Run window.
- Type tpm. msc In the search bar, click on "OK" to open a window Trusted Platform Module.
- Restart your computer and check if the error is gone now.
2. Check your BIOS
If Secure Boot is disabled in the BIOS, you'll get the error discussed in this article. Here's how to enable it.
Note: Depending on your computer model, the steps to enable Secure Boot will vary. You should check with your computer manufacturer for instructions. For the purposes of this tutorial, we are using an HP Pavilion laptop.
- Click on Windows + R To open Run.
- Type msinfo32 In the search bar to go to the System Information window.
Tip: Upgraded to Windows 11 but still feeling nostalgic? Here's how. How to make your operating system look like Windows 10.
3. Make sure your BIOS mode is UEFI.
Your computer has two boot options—one is Legacy and the other is UEFI. You'll need to switch to the newer UEFI standard if you want to run Secure Boot.
- Go to List "System Configuration" On your computer again as described in the previous section.
- Locate "old support" And disable it.
- Save settings and exit.
4. Change the partition style to GPT
Switching to UEFI mode in the BIOS only solves half the problem. UEFI mode supports GUID Partition Table (GPT), but if you previously used your PC in Legacy mode, its partition style was set to Master Boot Record (MBR). This must be converted to GPT.
- Click on Windows + X and select Disk Management.
5. Clean install Windows 11
If the above steps do not fix the error, perform the following: Clean installation of Windows On your computer. You'll likely avoid the error if you do this.
A clean boot starts with minimal software and drivers. Therefore, if you clean install Windows 11, nothing from your Windows 10 installation will remain on your system. All your data will be deleted, so be mindful. Back up your data Before proceeding.
How to bypass secure boot requirements
When upgrading to Windows 11, it's possible to bypass the Secure Boot requirements. Here's how.
- Click on Windows + R To open Run.
- Type regedit and click "OK" To open Registry Editor.
Computer\HKEY_LOCAL_MACHINE\SYSTEM\Setup
- Now right click on “LabConfig” and select “New Value → DWORD (32-bit)”.
Good to know: Get the latest information about How to Safely Bypass TPM 2.0 Requirements in Windows 11.
Frequently Asked Questions
Q1: How do I disable Secure Boot on my computer?
answer. Yes, you can disable Secure Boot on your computer. However, disabling Secure Boot is not recommended because it protects your computer from malware while it's booting. If you must disable Secure Boot, go into your computer's BIOS and disable Secure Boot under the "Security" tab of the Boot Options menu. The process for disabling or enabling Secure Boot can vary, so you'll need to check with your computer manufacturer.
Q2: Are secure boot and trusted boot the same?
answer. No, secure boot and trusted boot are not the same. Secure boot allows your computer to load only trusted operating system loaders when you turn on your computer, while trusted boot ensures the integrity of every component of the startup process. Together, secure boot and trusted boot help your computer boot safely and securely.
Q3: What happens if I install Windows 11 without Secure Boot?
answer. You can install Windows 11 without Secure Boot, but doing so may make your computer unstable. It can also compromise your computer's security. You may also not receive updates from Microsoft. Secure Boot is officially required to install Windows 11 on a computer.
Q4: Will Secure Boot delete my files?
answer. No, Secure Boot will not delete your files. Secure Boot only prevents unwanted programs from loading when your computer starts. The process does not affect files saved on your computer.