Computer and Software Support


 Things to know about Secure Boot UEFI

Windows 8

What is Secure Boot UEFI? Each device that is UEFI certified has a code built into it and the UEFI checks it when the system boots up. If the UEFI doesn't detect the code on a device, the windows will boot into a protected mode to give you a chance to fix the issue but nothing will run till you do. This is to prevent a virus from infecting the system. A virus can infect the boot sector. The boot sector is used before you get into windows. If it is infected, your anti-virus will not see it because the anti-virus doesn't get turned on till you enter windows and then it will be too late. The Secure Boot UEFI protects against that.

If you are planning to install Windows 8 and want to use Secure Boot UEFI. There is a couple things you need to be aware of. You have to make sure all your hardware is UEFI certified. This includes the following (You may not have all of these or other devices not listed)

  • Motherboard (be sure the bios is up to date)

  • CD-ROM

  • Video card (may be part of the motherboard. If that is the case and the motherboard is UEFI, then it is certified also)

  • Sound card (may be part of the motherboard. If that is the case and the motherboard is UEFI, then it is certified also)

  • network card (may be part of the motherboard. If that is the case and the motherboard is UEFI, then it is certified also)

As mentioned above this is not the entire list due to various configurations.

If you decide to use secure boot, make sure all your devices are certified for it.

If you have a device that is not certified, you won't be told during the install. Before you install, the bios will state UEFI is enabled. You will start the install of windows and windows will finish the install. When you are done, you will think Secure Boot UEFI is setup. However it is not. When you look at MSINFO, it will tell you it is not.

Once Windows is installed, you cannot enable Secure Boot UEFI. To enable it, you have to update the device that is not certified for it and then you have to delete and reinstall windows (not just the data). If you delete and reinstall, you will need to back up your files or you will lose them.

 

ANOTHER NOTE: When you are setting the bios to boot to secure boot and you are planning on booting with the CD-ROM drive to install windows, on some systems, you will see the CD-ROM listed twice. Make sure you select the correct one because one will be UEFI and the other won't. If you select the wrong one, Secure Boot will not be enabled.

To find out if Secure Boot is enabled, click here.