I recently reinstalled Windows 11 on my PC and the installation completed normally. TPM 2.0 is enabled, but I need Secure Boot enabled for Valorant. When Secure Boot is disabled, Windows starts normally. As soon as I enable it in the firmware settings and save the changes, the computer returns to the firmware screen instead of loading Windows. Windows Boot Manager is already set as the first boot option, and manually selecting it from the startup boot menu briefly pauses before returning to the menu. What should I check to get Windows booting with Secure Boot enabled?
3 Answers
If BitLocker or device encryption is enabled, temporarily suspend or turn it off before changing Secure Boot. Boot into Windows with Secure Boot disabled, handle the BitLocker setting, restart, and then enable Secure Boot again. Make sure you have your recovery key before changing firmware or encryption settings.
First check whether the Windows drive uses GPT or MBR. Open Disk Management, right-click the drive, choose Properties, then check the partition style. Secure Boot requires Windows to boot in UEFI mode from a GPT disk. If the drive is MBR, back up your files and use the mbr2gpt tool from an administrator Command Prompt to convert it, then switch the firmware to UEFI mode and enable Secure Boot.
Also check for a firmware update from the motherboard or laptop manufacturer. Some systems need updated Secure Boot certificates or default Secure Boot keys before they can recognize the Windows bootloader. After updating, load the factory UEFI keys if that option is available, confirm UEFI mode is enabled, and select Windows Boot Manager.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures