Step 1: Enter BIOS/UEFI Setup

To disable Secure Boot, you need to access your PC’s UEFI/BIOS setup menu. The most straightforward way to do that is to restart your PC and then hit the appropriate key during the boot sequence. For example, the BIOS setup key is Del on MSI motherboards (the motherboard brand found in my PC).

However, other motherboard and laptop manufacturers have different BIOS setup keys. Depending on the manufacturer, they’re usually set to F1, F2, F9, F10, F12, or Del. Some manufacturers use unique keys or key combinations; on Microsoft Surface laptops you have to hold the volume up button, and on Lenovo ThinkPad devices you need to first press Enter and then hit the F1 key.

If you don’t want to experiment and restart your PC multiple times before discovering the BIOS/UEFI setup key, simply hold Shift and restart your PC —Start Menu > Power button > Restart. Hold Shift until you’re presented with the “Advanced Startup” menu, like in the screenshot below. Once there, click the “Troubleshoot” button.

Next, click the “Advanced Options” button

Then click the “UEFI Firmware Settings” button

Finally, hit the “Restart” button, and you’ll be greeted with the BIOS setup menu once your PC restarts. Another way to access the BIOS setup is to open Windows search, type “Advanced Startup,” and then open the “Advanced Startup” menu.

Once there, click the “Restart Now” button. After your PC restarts, you’ll be greeted with the same options as when you restart your PC while holding the Shift button, so follow the steps we listed above.

Note that you can also access the BIOS/UEFI setup on most PCs by holding the F2 key and pressing the power button while the device is powered off. Just keep holding the F2 key after your device turns on until you enter the BIOS setup.

Step 2: Disable Secure Boot in BIOS/UEFI

Once you enter the BIOS/UEFI setup menu, you need to find the Secure Boot option. On MSI motherboards and laptops, click the “Settings” button and then click the “Advanced” tab.

Once there, click the “Windows OS Configuration” tab

Next, click the “Secure Boot” tab

Once you’re inside the “Secure Boot” option menu, you’ll see whether Secure Boot is enabled or disabled on your machine. If it’s enabled, and you want to disable it, click the button and select the “Disable” option.

Once you’re done, exit the BIOS setup and make sure to save the changes you’ve made —in the case of MSI motherboards and laptops, just hit the “X” button in the upper right corner and save the changes when prompted.

If you cannot enable Secure Boot on an MSI motherboard, you’ll most likely be greeted with the following notification when trying to change the setting: “System in Setup Mode! Secure Boot can be enabled when System in User Mode. Repeat operation after enrolling Platform Key(PK).”

If that happens, change the Secure Boot mode option from “Standard” to “Custom.”

Then, switch back to “Standard,” and click “Yes” when prompted to “Install Factory Defaults.”

Next, select “No” when asked whether to exit without saving.

Now you should be able to enable or disable Secure Boot without issues.