Windows 8.1 - Secure boot isn't properly configured

Hello...
i have brought new laptop...when i install 8.1
it show the secure boot not correctly configure....
please give me solution
How To Enable secure boot in bios...?????

Dear Hiteshpadhara
Welcome in lenovo community
Have you tried to reset the BIOS using the F9 and F10 to save and exit ?
Let us know
Thanks
Alaa
Did someone help you today? Press the star on the left to thank them with a Kudo!
If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"! This will help the rest of the Community with similar issues identify the verified solution and benefit from it.
Follow @LenovoForums on Twitter!

Similar Messages

MSI Z87 G45 + MSI R9 280X + Windows 8.1 secure boot difficulties

After updating to Windows 8.1 Pro I had the "Secure Boot isn't configured properly" watermark as many others. I determined my disk is GPT partitioned, I enabled UEFI on the GPU by moving the physical switch from the 2 position to the 1 position, and enabled Windows 8 Feature + Secure Boot with standard settings in the G45 bios (ver 1.5). After doing save and reboot I'm presented with a blank screen with my monitor showing a "DVI no input" message. I reset the CMOS to allow me to boot again, but after a couple more tries with the secure boot settings such as enabling/disabling Fast Boot I have not been able to get it to work.
System:
MSI Z87 G45
8GB DDR3 1600mhz Crucial ram
I5-4670k
MSI R9 280X
Samsung 840 SSD 250gb
Asus cd/dvd drive

I want to know the same thing. I bought a MSI Z87-G45 Gaming motherboard this month and I can't activate Secure Boot on it because it's still in Setup Mode. I have no idea how to put the motherboard into User Mode and Google doesn't help me much further either. How to activate a key? I have a I5-5670K and GTX 770 by the way.

What do I do if I see "Secure Boot isn't configured correctly" on my Desktop?

QuestionWhat do I do if I see "Secure Boot isn't configured correctly" on my Desktop?
AnswerSecure Boot is an option, introduced to most consumers in Windows 8, in the UEFI settings, which some people might call the BIOS. When enabled, your computer will only load drivers or operating system loads that have an acceptable digital signature. This means that Secure Boot ensures harmful software doesn't attempt to load during the boot process.
This may become disabled for a variety of reasons. The most likely is that it was disabled to allow the computer to boot from an external device or to boot a previous version of Windows. In the original version of Windows 8, Windows gave no indication that Secure Boot was disabled. Windows 8.1 changed this by displaying a watermark on the desktop.
If you intended Secure Boot to be disabled, there is no problem. The watermark can be safely ignored, but there is no setting to remove it.
If you did not intent Secure Boot to be disabled, you can enable it. Open the Charms by swiping in from the right, moving the mouse cursor to top-right or bottom-right corner, or pressing Windows+C, then select the following:
Settings > Power > Shift + Restart > Troubleshoot > UEFI Firmware Settings
In the UEFI Firmware Settings, navigate to the Security tab and set Secure Boot to Enabled.
For more information on the watermark, please see this article by Microsoft.
"Secure Boot isn't configured correctly" watermark on the desktop

It is a very small battery inside which keeps settings, your clock, etc. going. They usually last 3 - 5 years and I don't believe they are user replaceable. I would make an appointment at your nearest Genius Bar and have them do it.

Z87's: Secure Boot isn't configured correctly" watermark on the desktop

If after installing windows 8.1 w/ win 8 features enabled and you still see the "Secure Boot not configured correctly" watermark, you must generate default keys.
To do this, You must set the secure boot option to custom and generate the default keys then set it back to standard and save.
Now Secure Boot should be enabled.
On Z87 the bios says you fist have to generate the keys, but on my Z77 this was not the case.
Keep in mind this is assuming a GPT formatted OS, GOP compatible VGA drivers and win 8 mode enabled already.

Can someone help me configure secure boot on z87 mpower + gtx650 ti boost? Whenewer im trying to turn this on i got this messwage about csm turned on. Another error that occurs is about graphic's card gop.
Should i upgrade graphic card uefi? I set boot option from leagacy+uefi to just uefi and csm error still ocurs. I dont know how to deal with configuring secure boot so please help me...

X220 BIOS/Firmware - does it support "Secure Boot" under Windows 8?

I am getting ready to install W8x64 Pro. I have a X220 with the latest BIOS (1.36 if I recall correctly) using Windows 7x64 currently. I have run the Upgrade Assistant and it says: "Secure Boot isn't compatible with your PC." "Your firmware doesn't support Secure Boot so you won't be able to use it in Windows 8."
Assuming when I install W8x64 bit I have "Boot to UEFI First" and "UEFI BIOS Only" set in the BIOS - and the SSD formatted as a GPT SSD - should Secure Boot work?
The 1.36 BIOS is not listed as Windows 8 compatible. I see there is a BIOS for the X230 that is W8 compatible but I am not going to install it.
At any rate - for any of you X220 users - you can click on "System Information" in W8 or type in "msinfo32" in the run script and it will say whether "Secure Boot" is Unsupported or On.
Here is a Lenovo link for installing W7 using UEFI but it does not mention whether you would be able to be in "Secure Mode" at the end.
http://support.lenovo.com/en_US/downloads/detail.page?DocID=HT051844
Kent

Latest firmware is supposed to support Windows 8. But I don't know what support is supposed to mean... I'd say that if you've installed under UEFI and still doesn't enable, it doesn't.
Thou now that I think of... After I installed using UEFI, I had to go back to the BIOS and change some setting. Reset-some-key or something. I can't restart the computer now but whenever I restart it I'll let you know which setting it was. (it can be several days)
Good luck.
If I helped you, please give me some kudos! ^^

Secure boot?

Hello,
I have a question regarding the secure boot option in the BIOS. I have a Satellite C855D with Windows 8.1. I was trying to boot to a USB thumb drive that has a bootable Ultimate Boot CD on it. I changed the boot mode from UEFI to CSM but cannot find where to disable "secure boot." I have done it before but it's like it isn't there now.
I reformatted my drive about two months ago and it may be a coincidence but I don't think I've seen the option since then.

"Secure Boot" isn't needed to install Windows 8.
"Secure Boot" is merely a feature of newer UEFI BIOSes that allow the system to maintain control of the installation of certain rogue software. It locks down the system and only hands over execution to "white listed" program and operating systems.
Please send KUDOs
Frank
{------------ Please click the "White Kudos" Thumbs Up to say THANKS for helping.
Please click the "Accept As Solution" on my post, if my assistance has solved your issue. ------------V
This is a user supported forum. I am a volunteer and I don't work for HP.
HP 15t-j100 (on loan from HP)
HP 13 Split x2 (on loan from HP)
HP Slate8 Pro (on loan from HP)
HP a1632x - Windows 7, 4GB RAM, AMD Radeon HD 6450
HP p6130y - Windows 7, 8GB RAM, AMD Radeon HD 6450
HP p6320y - Windows 7, 8GB RAM, NVIDIA GT 240
HP p7-1026 - Windows 7, 6GB RAM, AMD Radeon HD 6450
HP p6787c - Windows 7, 8GB RAM, NVIDIA GT 240

MJG's signed Shim for UEFI Secure Boot now available

There have been a number of posts about EFI and Secure Boot recently, so I thought some people might be interested in this:
http://mjg59.dreamwidth.org/20303.html
That's Matthew Garrett's announcement of a signed binary version of his Shim boot loader. Basically, this program will boot on a computer with Secure Boot active in its default mode (with Microsoft's keys in the firmware) and then launch another boot loader (called grubx64.efi, although it could be something other than GRUB in that filename) that you sign with your keys. The end result is something that's more secure than disabling Secure Boot entirely and easier than installing your own Secure Boot keys. I haven't yet tried this version of the binary, so I can't provide help beyond pointing you to MJG's own blog, but I thought some people might want to know about it.
FWIW, although you could sign and launch my rEFInd boot manager with this version of Shim, the current version (0.4.7) won't be very useful when signed in this way, since it doesn't yet "talk" to Shim. I'm working on changing that, so that rEFInd will launch binaries signed in a way that Shim supports.

kristof wrote:A signed bootloader is nice, but unless the Arch developers start distributing a version of the kernel that's also signed with a MOK, secure boot isn't being fully utilized.
Largely true, but:
Secure Boot is here, and seems likely to stay. Given this fact, all Linux distributions (including Arch) need a way to cope with it. There are basically two choices: Provide instructions on how to deal with it (difficult because of system-to-system differences) or provide signed binaries (a boot loader at a minimum, or preferably a boot loader and kernel).
It's possible to "provide" a signed binary by generating the key locally and signing it locally. This could be done by scripts in the installation process, for example. Of course, that still leaves a need to get the installer booted on a Secure Boot system, but that could be handled with the Linux Foundation's pre-bootloader.
To be truly effective, Secure Boot really requires support all the way up the software chain. Signing a kernel does no good if the kernel can load unsigned modules, for instance. Fedora's taking steps to provide such security, but Ubuntu seems to be going with a more relaxed approach. In truth, Linux isn't as bothered by malware as is Linux, so it's unclear that going with a Fedora-esque approach is really helpful; but OTOH, it's conceivable that malware authors will start using Linux as a vector to install boot-time malware if Windows becomes sufficiently locked down, so maybe some paranoia is in order.
At the moment and as a practical matter, technical Linux users (including most Arch users) will find it quicker and easier to disable Secure Boot than to use shim. As shim and various support tools (signing utilities, boot managers, etc.) mature, though, this may not be the case. It may also be desirable or even necessary to leave Secure Boot enabled, in which case adopting shim now may make sense. Likewise if you want to learn about it now so that you can use it in the future.

Can't activate secure boot after upgrading from Win 7 to Win 8 on a Spectre XT

Hi everybody,
my first post here, so please forgive me if the topic has already been discussed
I did search before posting anyway, but I couldn't found anything addressing this specific point.
My (small, I must admit) problem is as follows:
I recently purchased a Spectre XT 13-2005tu (i7 processor, 4Gb RAM, 256Gb SSD) with Windows 7 pre-installed.
After installing my favourite applications and using it for a few weeks without any trouble, I thought to take the opportunity of the $14.99 upgrade to Win 8, so I downloaded Windows 8 Pro and installed it (as an upgrade, rather than a fresh installation, because I didn't want to loose the customizations I already made).
I also installed all the updates available on HP website (sp59158 for updated BIOS, sp58404 for UEFI support, ecc.)
The whole upgrade worked nicely, and the PC is now up and running with Win 8.
Now, I'm trying to use at best all the possibilities Win 8 has to offer, and among them, the UEFI secure boot.
I found the "legacy support" option in the BIOS settings, which as I understand must be disabled to activate the UEFI secure boot, but if I do that the PC tells that there's no operating system on the disk and doesn't boot anymore.
Which was a bit scary by the way, but eventually I could re-enable the legacy support in the BIOS and have the PC working again, but of course with no secure boot.
I suppose there must be some other re-configuration that should be done before changing the BIOS parameter, but I couldn't find any instruction for that anywhere on the web.
On the other hand, it would be indeed weird if the secure boot could not be configured AFTER the OS upgrade, and a new fresh installation would be necessary.
I'd rather part with the secure boot than re-install everything, but that would be a shame... :-(
I hope someone can explain what should be done, many thanks in advance!

Thanks for your feedback, but I don't think your issue is the same as the one I previously explained.
The UEFI/secure boot setting is a basic configuration affecting the way the PC boots, regardless of whether it is connected to a network or not.
By the way, in the meantime I've seen in a shop exactly the same PC model which I'm using, now sold with Win 8 pre-installed, and it was working with the UEFI enabled (= BIOS "legacy support" disabled).
Therefore, the configuration I'm interested in has to be feasible, one way or another...!

Secure Boot Platform Key?

I am stumped on how to enable Secure Boot on my MSI Z87-G43 Gaming motherboard..
I have a MSI GTX770 flashed to gop, I have my solid state drive set to GPT and uefi with windows 8.1 pro installed, Windows 8 Boot, Fast Boot, etc all work, except When I try to enable Secure Boot, it says:
"secure boot can be changed only in user mode, try installing Platform Key (PK)"
What is the platform key and how can i enable it or how can I get in usermode?
I thought maybe it meant set up a bios password, one for Administrator, and one for User, so i did that, and tried logging in under User, and no luck, instead everything is greyed out.
I tried googling that message's keywords but no luck...
Any ideas or help would be appreciated.

Thank you very much for the reply, just as you replied, I was about to write a follow up. I ended up stumbling upon a guide at Intel: https://communities.intel.com/community/vproexpert/blog/2012/06/26/microsoft-windows-8--enabling-secure-boot
Worked like a charm.
Set the mode from Standard to Custom, had it generate the factory keys, went back, set it back to standard and it allowed me to Enable Secure Boot
Thanks!

After Security updation of Windows 7 in Boot Camp (Mac Book Pro with Retina Display) on 13-Nov-2013, Windows 7 Desktop Gadgets are not working properly.

After Security updation of Windows 7 in Boot Camp (Mac Book Pro with Retina Display) on 13-Nov-2013, Windows 7 Desktop Gadgets are not working properly.
This is boot camp problem, because in other normal notebooks (e.g. SONY VAIO, Lenovo with Windows 7) the gadgets are working normally.
I am attaching the screen shot of Desktop Gadgets and Security updates of Windows 7.
Kindly solve this issue ASAP.
Shailendra Gupta
<edited by host>

You are not addressing Apple, but a community of unpaid volunteers. So ASAP won't cut it. Also, you should refrain from posting personal information (like your email address) in the body of your comments, as this is part of the community usage guidelines.
Have you reinstalled the latest Boot Camp Windows 7 drivers, just in case Microsoft overwrote some of them during the Windows 7 security update?
If you want to communicate issues with Apple about Boot Camp and OS X, click on the link. Just don't hold your breath on receiving a response.

[X79A-GD45 Plus] Secure boot without Windows 8

I'm having trouble using secure boot with the GD45 Plus. I can only get related settings to show up in the bios when enabling Windows 8 mode. This might not be a problem except for it complaining that my graphics card isn't Windows 8 compatible, and then aborting.
I don't care about Windows 8, I just want to boot my own signed bootloader. So my question is, how can I get the firmware to use secure boot without Windows 8 mode, or at least ignore hardware compatibility?

Secure boot could only be use for pure UEFI mode so that means if you want to use this function then you will need to enable the Windows 8 feature,
For your VGA, you either check with your vendor if they got UEFI VGA bios for you to update or you will need to use a new VGA card...

How can I force mount a dvd that isn't even seen by Disk Utility? I can see it on the Mac when using my Windows 7 partition via Boot Camp, but not in Lion, which is how I would rather be running.

How can I force mount a dvd that isn't even seen by Disk Utility? I can see it on the Mac when using my Windows 7 partition via Boot Camp, but not in Lion, which is how I would rather be running.

Well if there is a EFI block, then running a program in OS X isn't going to do a lick of good.
After all EFI was designed for Trusted Computing and Digital Rights Management, to act between the OS and hardware, can read drives, contact the Internet and everything.
Windows doesn't use EFI, will have UEFI in Windows 8 though.

Windows 8 Installation Disc Won't Load UEFI-only (T420s). Also does T420S support Secure Boot?

Question 1:
I am unable to load the Windows 8 Installation DVD in UEFI (only) mode on my T420s. As a result, I can only run the installer in Legacy mode (or both UEFI/Legacy which effectively means the same thing). This in turn means Windows 8 is installed in Legacy BIOS mode. Any idea how to install it in UEFI mode?
I am using a DVD burned using the Windows utility from the Windows 8 64-bit ISO and have followed the instructions in HT073269, however I am unable to get to step 1 of the Windows 8 install after updating the BIOS, resetting to defaults, and switching to UEFI-only. On boot, after switching to UEFI-only, I am presented with a bootloader and prompted to select which drive to boot (DVDRAM or SSD). Selecting either makes the screen go blank for a moment and then returns back to the same screen with no result.
Since then I have searched these forums extensively and Googled Technet, Notebook Review, and other sites to no avail. I've tried several several ideas, including using diskpart > clean to get the SSD in raw status (per HT051844). That did not make a difference. I also tried converting a Legacy-BIOS install of Windows 8 to UEFI using CharlyAR's instructions on TechNet (linked from another thread here). That seemed to get me to a Windows Boot Loader but still errored out and Windows Repair was unable to fix it.
Any suggestions?
Also, question 2: Does anyone know if the T420S support secure boot? If not, any idea if it's slated for a future firmware update?

nuncio wrote:
pleon wrote:
I use Win8 on my T420s in UEFI mode. [...] I do not understand, what do you mean that secure boot does not work? In BIOS there is no special switch for that, but "UEFI only" works without any problems.
Secure Boot is a certificate-based approach to preventing rootkits, not the same thing as UEFI. Although Secure Boot requires UEFI, having UEFI does not mean having the additional Secure Boot feature. If Secure Boot is available, typically there will be an option to enable it in the firmware configuration. Since the latest firmware for the T420S (ver. 1.35) does not have such an option, I suspect ThorsHammer is correct that Secure Boot is not (yet) supported on the T420S. I'm keeping my fingers crossed that Lenovo will tell us that a firmware update is on its way though.
My understanding is that it will never support secure boot. The secure boot support starts at Ivy Bridge and the T430s.

Upgrading Windows 7 (Legacy BIOS/MBR Disk) to Windows 8 (UEFI/GPT/Secure Boot)

Hi there,
I've recently purchased a W530 with Windows 7 pre-installed. Ultimately, I'd like to replace this with Window 8 + Secure Boot. I believe I can get Windows 8 via the Microsoft Upgrade offer for a reasonable price, since this was a recent purchase.
What's the best way to reach my goal?
The Windows 7 install uses Legacy BIOS to boot with an MBR disk.
I had a quick look at Acronis, and I can see that it's possible that the "OS will be automatically converted to support UEFI booting" (http://www.acronis.com/support/documentation/ABR11/index.html#14021.html) when using it's tool.
If I don't use this approach, what can I do? Can I:
1. Use Rescue and Recovery in Windows 7 (Legacy BIOS/MBR disk)
2. Wipe the drive and reformat it with GPT?
3. Install Windows 7 with UEFI enabled using the Rescue and Recovery made in step 1?
4. At this point, I would now have UEFI and GPT.
5. Perform an Upgrade from Windows 7 to Windows 8 and enable Secure Boot?
Any thoughts as to whether this would work?
Richard.

Hi richii,
The Acronis approach ends up in failure. Didn't give it a second look at the reason, since the tool it's not necessary. I also tried several other "automatic" tools without success.
The recovery approach will fail because it's tied up to BIOS boot.
But I've performed the conversion from BIOS to UEFI two times successfully. After some digging, is not SO hard. It's just... "undocumented". Very, very undocumented, hehe. I made a step-by-step guide: http://social.technet.microsoft.com/wiki/contents/articles/14286.converting-windows-bios-installatio...
Let me know if it helps you...
Anyway, if you don't have data/software, I would go for the clean install approach.
Cheers.
If I helped you, please give me some kudos! ^^

Windows 8.1 Ent eval enabled Secure Boot I think

I want to get my laptop back to its original format.
Currently dual booting Windows7/8.1
During the installation of Windows 8.1 Enterprise evaluation it paused to say it was going to enable secure boot. I did'nt think much of it I thought I could change it back from the bios. Did it flash my firmware? I checked the system status
with msinfo32.exe; was legacy mode and with powershell; secure boot not supported. I don't have any options to disable secure boot in the bios nor from within Windows -"I know how to disable it in windows 8.1". I can't boot a foreign
operating system, but I can boot a Microsoft OS which sounds like secure boot to me. I want to get it back to running Windows 7 dual booting with Linux. I use both at work and need both. I made the mistake by loading the Eval on my primary
laptop. I read I need to revert back to Windows 7 completely, formating and re-installing the OS. Will this clear my secure boot simulation issue? I have not changed the partitions or removed any O/S's. What's the best way
to proceed?

Hi,
I want to explain that, Secure Boot is indepent with system, you can disable it in UEFI interface.
To disable Secure Boot, you can follow the steps below:
1.Before disabling Secure Boot, consider whether it is necessary. From time to time, your manufacturer may update the list of trusted hardware, drivers, and operating systems for your PC. To check for updates, go to Windows Update, or check your manufacturer's
website.
2.Open the PC BIOS menu. You can often access this menu by pressing a key during the bootup sequence, such as F1, F2, F12, or Esc.
Or, from Windows, hold the Shift key while selecting Restart. Go to Troubleshoot > Advanced Options: UEFI Firmware Settings.
3.Find the Secure Boot setting, and if possible, set it to Disabled. This option is usually in either the Security tab, the Boot tab, or the Authentication tab.
4.Save changes and exit. The PC reboots.
I found an aticle that teach how to install dual-boot Windows 7 and Ubuntu 12.04 on a PC with UEFI hardware:
http://www.linuxbsdos.com/2012/10/11/dual-boot-windows-7-and-ubuntu-12-04-on-a-pc-with-uefi-hardware/
Hope this helps.
Roger Lu
TechNet Community Support

Windows 8.1 - Secure boot isn't properly configured

Similar Messages

Maybe you are looking for