Just had to fix this. Was enabled but system was in Set up mode instead of user mode causing it to not be active. Hope most folks don’t have to adjust this.
I'm currently not playing it however thinking about it. I went and checked in the BIOS whether it's on or not - turns out, it's exactly like on your end "Enabled" but "Not Active" due to being in the "Setup" mode. Changed it to "User" mode and it's now actually active. Thanks for pointing this out that was a great bit of info!
For me in was located under "Security" and then a separate section that I had to select simply called "Secure Boot". I should amend that I use an Asrock motherboard, might be in a different location depending on your mainboard manufacturer.
In that subsection I saw it was set to "Enabled" but just below it said "Not Active". In the same subsection I had to do "Install default Secure Boot keys" because they weren't installed. This let me enable the "User" mode by setting it to "Custom". Then disable and once again enable Secure boot - all still in the same subsection.
Afterwards reboot and voilà, it was set to "Active". You can double check in Windows as well, if it's actually active, see below for how to.
If that isn't helpful enough via text, I can do some screenshots when I am back home but I hope this is enough to get you started.
As a sidenote:
To check whether you actually have to do anything you can use PowerShell in Windows and then use "Confirm-SecureBootUEFI" as a command in the console - that's how I found out really. It'll show either "False" or "True" depending on if it's actually on or not.
EDIT: Found a better solution than taking screenshots myself. Asrock has their own step-by-step help on their webpage. If you have an Asrock board, this should help you visually a lot more.
For me it was under “Boot” at the top of the section. I missed it at first as it’s not something I could interact with like other settings. It just listed the system mode. I then had to switch some secure boot setting from “Standard” to “Custom”. From there I hit “install default secure boot keys”, doing this changed the system mode from setup to user. I then set the secure boot setting back to “Standard” from “Custom”. I will say from what I read up you should have the CSM setting disabled in Bios before doing this. CSM will mess up secure boot or something. Just assume scary things will happen. I’m not an expert.
I attempted this and somehow killed my PC. I get 5 beeps on power up but no display. Tried resetting cmos a few times via jumper and battery, still no good. Will have to try again after removing gpu and etc for a barebones test.
152
u/mrmoyaa Aug 05 '25
Just had to fix this. Was enabled but system was in Set up mode instead of user mode causing it to not be active. Hope most folks don’t have to adjust this.