hp-support-head-portlet

Actions
Loading...

HP Customer Support

hp-contact-secondary-navigation-portlet

Actions
Loading...

hp-share-print-widget-portlet

Actions
Loading...

hp-concentra-wrapper-portlet

Actions
Loading...

HP PCs - Secure Boot (Windows 8)

This document pertains to HP and Compaq PCs with Windows 8 and Secure Boot.
Secure Boot Configuration is a new feature of the Unified Extensible Firmware Interface (UEFI) in BIOS 8 that helps a computer resist attacks and infection from malware. When your computer was manufactured, UEFI created a list of keys that identify trusted hardware, firmware, and operating system loader code. It also created a list of keys to identify known malware.
When Secure Boot is enabled, the computer blocks potential threats before they can attack or infect the computer. For example, Secure Boot can prevent your computer from starting from illegally copied CDs or DVDs that could harm the computer. Secure Boot does not lock out valid recovery discs or Windows discs.
You may have to disable Secure Boot in order to use hardware (such as older video cards) that Secure Boot does not recognize, or to boot from a CD or DVD that is not recognized. If Secure Boot does not recognize hardware, Windows does not use the hardware when it boots up, and you may experience problems starting the computer. If Secure Boot does not recognize a video card, the computer may have a blank display. For more information, refer to the Troubleshooting section.
 note:
If your computer was updated to Windows 8.1 and you now have a persistent message over the desktop that states SecureBoot isn't configured correctly, Microsoft has released a download solution to remove this message. For more information, refer to Update removes the "Windows SecureBoot isn't configured correctly" watermark in Windows 8.1 (in English).
Figure : SecureBoot Watermark in Windows 8.1
SecureBoot Watermark in Windows 8.1
System requirements for using Secure Boot in Windows 8
All HP and Compaq computers that were manufactured with Windows 8 can use Secure Boot. Secure Boot is enabled by default on these computers. If you upgrade a computer manufactured with Windows 7 or earlier to Windows 8, you can use Secure Boot only if and AMI BIOS version 8 that is compatible with UEFI (Unified Extensible Firmware Interface) is available for the computer.
 note:
HP and Compaq Notebook PCs that were manufactured with Windows 7 or earlier may have an available BIOS update that allows the use of Secure Boot. For more information, refer to Updating the BIOS.
 note:
HP and Compaq Desktop PCs that were manufactured with Windows 7 or earlier do not have a BIOS version that allows the use of Secure Boot and one will not be made available for these computers.
Using Secure Boot on older notebook computers with Windows 8
Most HP notebook computers use the Insyde BIOS. Use the instructions in this section to enable or disable Secure Boot on your notebook computer.
Enabling Secure Boot on a notebook computer in Windows 8
Secure Boot is enabled by default on computers that were manufactured with Windows 8. If Secure Boot has been disabled or if you are enabling a Notebook PC that was upgraded to Windows 8, follow these steps to enable it:
  1. Turn off the computer.
  2. Press the power button to turn on the computer, then immediately press Esc repeatedly, about once every second, until the Startup Menu opens.
    Figure : Startup Menu
    Startup Menu
  3. Press F10 to open BIOS Setup.
  4. Use the right arrow key to choose the System Configuration menu, use the down arrow key to select Boot Options, then press Enter.
    Figure : Boot Options selection in the System Configuration window
    Boot Options selection in the System Configuration window
  5. Use the down arrow key to select Secure Boot, press Enter, then use the down arrow key to modify the setting to Enabled.
    Figure : Secure Boot: Enabled
    Secure Boot: Enabled
  6. Press Enter to save the change.
  7. Use the left arrow key to select the File menu, use the down arrow key to select Save Changes and Exit, then press Enter to select Yes.
  8. The Computer Setup Utility closes and the computer restarts.
Disabling Secure Boot on notebook computers with Windows 8
You may want to disable Secure Boot in order to install new hardware or boot from a CD or DVD. Follow these steps to disable Secure Boot:
  1. Turn off the computer.
  2. Press the power button to turn on the computer, and immediately press Esc repeatedly, about once every second, until the Startup Menu opens.
    Figure : Startup Menu
    Startup Menu
  3. Press F10 to open BIOS Setup.
  4. Use the right arrow key to choose the System Configuration menu, use the down arrow key to select Boot Options, then press Enter.
    Figure : Boot Options selection in the System Configuration window
    Boot Options selection in the System Configuration window
  5. Use the down arrow key to select Secure Boot, press Enter, then use the down arrow key to modify the setting to Disabled.
    Figure : Secure Boot: Disabled
    Secure Boot: Disabled
  6. Press Enter to save the change.
  7. Use the left arrow key to select the File menu, use the down arrow key to select Save Changes and Exit, then press Enter to select Yes.
  8. The Computer Setup Utility closes and the computer restarts. When the computer has restarted, the Operating System Boot Mode Change screen appears, prompting you to confirm the Boot Options change. Type the code shown on the screen, then press Enter to confirm the change and continue to Windows.
Using Secure Boot on newer notebook computers with Windows 8 and Windows 8.1
Most HP notebook computers use the Insyde BIOS. Use the instructions in this section to enable or disable Secure Boot on your notebook computer using Windows 8 or Windows 8.1.
Enabling Secure Boot on recent model notebook computers that include Legacy Support in Windows 8 and Windows 8.1
Secure Boot is enabled by default on computers that were manufactured with Windows 8 and Windows 8.1. If Secure Boot has been disabled or if you are enabling a Notebook PC that was upgraded to Windows 8 and Windows 8.1, follow these steps to enable it:
  1. Turn off the computer.
  2. Press the Power Button to turn on the computer and press Esc repeatedly, about once every second, until the Startup Menu opens.
  3. When the Startup Menu displays, press F10 to open BIOS Setup.
    Figure : Startup Menu
    Startup Menu
  4. Use the right arrow key to choose the System Configuration menu, use the down arrow key to select Boot Options, then press Enter.
    Figure : Boot Options selection in the System Configuration window
    Boot Options selection in the System Configuration window
  5. Use the down arrow key to select Legacy Support and press Enter, select Disabled if it is enabled and press Enter.
    Figure : Legacy Support
    Image: Legacy Support
  6. Use the up and down arrow keys to select Secure Boot and press Enter, then use the up and down arrow keys to select Enabled and press Enter.
    Figure : Secure Boot
    Image: Secure Boot
  7. Press F10 to accept the changes and use the left arrow key to select Yes and press Enter to Exit Saving Changes.
    The computer automatically reboots to Windows with Secure Boot enabled.
    Figure : Exit Saving Changes
    Image: Exit Saving Changes
Disabling Secure Boot on recent model notebook computers that include Legacy Support in Windows 8 and Windows 8.1
You may want to disable Secure Boot in order to install new hardware or boot from an external bootable device such as a CD or DVD or USB drive.
Step 1: Disable Secure Boot and enable Legacy Boot
Follow these steps to disable Secure Boot and enable Legacy Support:
  1. Turn the computer off completely.
  2. Turn on the computer by pressing the Power button and immediately press Esc repeatedly, about once every second, until the Startup Menu opens.
  3. When the Startup Menu appears, press F10 to select BIOS Setup.
    Figure : Startup Menu
    Startup Menu
  4. Use the right arrow key to choose the System Configuration menu, use the down arrow key to select Boot Options, and then press Enter.
    Figure : Boot Options selection in the System Configuration window
    Boot Options selection in the System Configuration window
  5. Use the down arrow key to select Secure Boot, press Enter, then use the down arrow key to modify the setting to Disabled, press Enter.
    Figure : Secure Boot
    Image: Secure Boot
  6. Use the up and down arrow keys to select Legacy Support, press Enter to change the setting to Enable and press Enter again.
    Figure : Legacy Support
    Image: Legacy Support
  7. Use the left and right arrow keys to select Yes on the confirmation window and press Enter to enable Legacy Support.
    Figure : Confirmation window
  8. Use the down arrow key to select a device in the Legacy Boot Order menu, and press F5 and F6 to move the device down or up.
    Figure : Legacy Boot Order
    Image: Legacy Boot Order
  9. Press F10 to accept the changes and use the left arrow key to select Yes and press Enter to Exit Saving Changes.
  10. As soon as the computer starts, a message may appear indicating that the boot mode has changed, if so, type the four-digit code shown in the message, then press Enter to confirm the change. Otherwise, continue with the next step.
    Figure : Boot mode change message
     note:
    Make sure you type the code correctly, since there is no text field to see what you are typing. This is expected behavior. When you type the numbers, the code is logged without a text field.
    The computer starts Windows 8.
Step 2: Select the drive as the boot device
To start your computer from a valid bootable disc or USB drive, such as an HP recovery disc, use the Boot Menu to select drive as the boot device.
  1. Turn the computer off completely, wait a few seconds, then turn on the computer by pressing the Power Button and immediately press Esc repeatedly, about once every second, until the Startup menu opens.
  2. When the Startup Menu appears, press F9 to open the Boot Device Options.
  3. When the Boot Manager Window opens, use the up and down arrow keys to select a boot device and press Enter to select an option.
    Figure : Boot Manager Options
  4. The computer starts from the bootable device selected.
  5. If you need information on how to perform a System Recovery from a CD/DVD or USB drive on Windows 8 and 8.1, please refer to the HP support document: Performing an HP system recovery (Windows 8).
Using Secure Boot on a desktop computer with Windows 8
The BIOS on a desktop computer is different from the BIOS on a notebook computer. Use the instructions in this section to enable or disable Secure Boot on your desktop computer.
Enabling Secure Boot on a desktop computer with Windows 8
Secure Boot is enabled by default on computers that were manufactured with Windows 8. If Secure Boot has been disabled, follow these steps to enable it:
  1. Turn off the computer.
  2. Turn on the computer and immediately press F10 repeatedly, about once every second, until the Computer Setup Utility opens.
  3. Use the left and right arrow keys to select the Security menu.
    Figure : Secure Boot Configuration selection in the Security window
    Secure Boot Configuration selection in the Security window
  4. Use the up and down arrow keys to select Secure Boot Configuration, and then press Enter.
  5. The Secure Boot Configuration warning displays. Press F10 to continue.
    Figure : Secure Boot Configuration window
    Secure Boot Configuration window
  6. Use the left and right arrow keys to disable Legacy Support if it is enabled.
    Figure : Secure Boot Configuration window
    Secure Boot Configuration window
  7. Use the up and down arrow keys to select Secure Boot, then use the left and right arrow keys to enable it.
  8. Press F10 to accept the changes.
  9. Press F10 again, then press Enter twice to restart the computer with Secure Boot enabled.
    Figure : Save Changes and Exit selection
    Save Changes and Exit selection
Disabling Secure Boot on a desktop computer with Windows 8
You may want to disable Secure Boot in order to install new hardware or boot from a CD or DVD. Follow these steps to disable Secure Boot:
  1. Turn off the computer.
  2. Turn on the computer and immediately press F10 repeatedly, about once every second, until the Computer Setup Utility opens.
  3. Use the left and right arrow keys to select the Security menu, then use the up and down arrow keys to select Secure Boot Configuration, and then press Enter.
    Figure : Secure Boot Configuration selection in the Security window
    Secure Boot Configuration selection in the Security window
  4. The Secure Boot Configuration warning displays. Press F10 to continue.
    Figure : Secure Boot Configuration window
    Secure Boot Configuration window
  5. Use the up and down arrow keys to select Secure Boot, then use the left and right arrow keys to change the setting to Disable.
    Figure : Secure Boot Configuration window
    Secure Boot Configuration window
  6. Use the up and down arrow keys to select Legacy Support, then use the left and right arrow keys to change the setting to Enable.
  7. Press F10 to accept the changes.
  8. Press F10 again, then press Enter twice to restart the computer.
    Figure : Save Changes and Exit selection
    Save Changes and Exit selection
  9. As soon as the computer starts, a message appears indicating that the boot mode has changed.
    Figure : Boot mode change message
    Boot mode change message
  10. Type the four-digit code shown in the message, then press Enter to confirm the change.
     note:
    No text field displays for the code. This is expected behavior. When you type the numbers, the code is logged without a text field.
    The computer starts Windows 8.
Frequently Asked Questions about Secure Boot in Windows 8
Click each question to find the answer to a frequently asked question about Secure Boot.
Troubleshooting problems with Secure Boot in Windows 8
The following sections provide information for resolving issues with Secure Boot. Click each issue to see its solution.

hp-feedback-input-portlet

Actions
Loading...

hp-online-communities-portlet

Actions
Loading...

Ask the community!


Support Forum

Support Forum

Join the conversation! Find Solutions, ask questions, and share advice with other HP product owners. Visit now


hp-feedback-banner-portlet

Actions
Loading...

hp-country-locator-portlet

Actions
Loading...
United States

hp-detect-load-my-device-portlet

Actions
Loading...