Error:

Javascript is disabled in this browser. This page requires Javascript. Modify your browser's settings to allow Javascript to execute. See your browser's documentation for specific instructions.

hp-support-head-portlet

Actions

HP Customer Support - Knowledge Base

hp-contact-secondary-navigation-portlet

Actions

hp-share-print-widget-portlet

Actions

Information

Need Windows 11 help?
Check the information on compatibility, upgrade, and available fixes from HP and Microsoft. Windows 11 Support Center

Feedback

hp-concentra-wrapper-portlet

Actions

HP PCs - Secure Boot (Windows 10)

This document is for HP and Compaq PCs with Windows 10 and Secure Boot.

Enable Secure Boot to block malware attacks, virus infections, and the use of non-trusted hardware or bootable CDs or DVDs that can harm the computer. You can also disable Secure Boot to use trusted but unrecognized hardware (such as older video cards) or to boot from an unrecognized recovery disc.

All HP computers manufactured with Windows 10 come with Secure Boot enabled by default. If you upgraded to Windows 10 from an earlier Windows version, you can use Secure Boot only if an AMI BIOS version 8 compatible with UEFI is available for the computer. Go to HP Desktop PCs - Updating the BIOS or HP Notebook PCs - Updating the BIOS for additional information.

Secure Boot settings for consumer notebook computers

To enable or disable Secure Boot on an HP notebook computer, first confirm if Legacy Support is available and enabled.

Turn off the computer.
Press the power button to turn on the computer, and then immediately press the Esc key repeatedly until the Startup Menu opens.
Press F10 to open BIOS Setup.
Use the right arrow key to select System Configuration, use the down arrow key to select Boot Options, and then press Enter.
Check for Legacy Support in the list.
- If Legacy Support is not listed, continue to the next step.
- If Legacy Support is listed and you are enabling Secure Boot, use the down arrow to select Legacy Support, press Enter, select Disabled, press Enter, and then continue to the next step.
- If Legacy Support is listed and you are disabling Secure Boot, continue to the next step.
Use the down arrow key to select Secure Boot, and then press Enter.
Use the down arrow key to select Enabled or Disabled depending on your requirements.
Press Enter to save the change.
- If you enabled Secure Boot, depending on your notebook, press F10 to save the changes and reboot, or use the left arrow key to select the File menu, use the down arrow key to select Save Changes and Exit, and then press Enter to select Yes to confirm the change.
- If you disabled Secure Boot, continue to the next step.
Use the arrow keys to select Legacy Support, press Enter to change the setting to Enable, press Enter, select Yes in the confirmation window, and then press Enter.
Use the down arrow key to select a device in the Legacy Boot Order menu, and press F5 and F6 to move the device down or up.
Press F10 to accept the changes, use the left arrow key to select Yes, and then press Enter to Exit Saving Changes to restart the computer.
If an Operating System Boot Mode Change message displays, type the code shown, and then press Enter to start Windows.

note:
Make sure you type the code correctly. There is no text field to see what you are typing. This is expected behavior.
Turn off the computer, wait a few seconds, turn on the computer, and then immediately press Esc repeatedly until the Startup menu opens.
When the Startup Menu displays, press F9 to open the Boot Device Options.
When the Boot Manager Window opens, use the down arrow key to select a boot device, and then press Enter to start the computer from the selected device.

Secure Boot settings for business notebooks and workstations

Use the BIOS settings to enable or disable Secure Boot on an HP business notebook or workstation computer.

Turn off the computer.
Press the power button to turn on the computer, and then immediately press the Esc key repeatedly until the Startup Menu opens.
Select BIOS Setup (F10), and then press Enter.
Select the Advanced tab, and then select Secure Boot Configuration.
Click the Configure Legacy Support and Secure Boot drop-down menu, and then select Legacy Support Disable and Secure Boot Enable to enable Secure Boot, or select Legacy Support Enable and Secure Boot Disable to disable it.
- If you enabled Secure Boot, select the Main tab, select Save Changes and Exit, and then click Yes to confirm the change.
- If you disabled Secure Boot, continue to the next step.
Select the Main tab, select Save Changes and Exit, and then click Yes to display a PIN.
Type the PIN, and then press Enter.
Turn off the computer.
Press the power button to turn on the computer, and then immediately press the Esc key repeatedly until the Startup Menu opens.
Select BIOS Setup (F10), and then press Enter.
Select the Advanced tab, and then select Boot Options.
Under Legacy Boot Order, select a boot device, and then press Enter.
Select the Main tab, select Save Changes and Exit, and then click Yes to confirm.

The computer starts from the bootable device selected.

Secure Boot settings for desktop computers

Use the BIOS settings to enable or disable Secure Boot on an HP desktop computer.

Turn off the computer.
Press the power button to turn on the computer, and then immediately press the F10 key repeatedly until the Computer Setup Utility opens.
Use the arrow keys to select the Security menu, select Secure Boot Configuration, and then press Enter.
Press F10 on the Secure Boot Configuration message to continue.
Change the Secure Boot setting.
- To enable Secure boot, use the arrow keys to select Disable next to Legacy Support, and then select Enable next to Secure Boot.
- To disable Secure boot, use the arrow keys to select Disable next to Secure Boot, and then select Enable next to Legacy Support.
Press F10 to accept the changes.
Press F10 again, and then press Enter twice to restart the computer.
If you disabled Secure Boot, type the four-digit code displayed in the Operating System Boot Mode Change message, and then press Enter to confirm the change.

note:
Make sure you type the code correctly. There is no text field to see what you are typing. This is expected behavior.

Frequently asked questions

Read frequently asked questions about how Secure Boot works and to troubleshoot any issues.

Is my computer at risk if I disable Secure Boot?

With Secure Boot disabled, your computer is at greater risk from rootkit infections that install themselves before the Windows boot process. Antivirus or security software typically does not protect against these types of threats.

Can I use Secure Boot if my computer did not come with Windows 10?

Depending on your HP or Compaq computer type and original configuration, Secure Boot might be available if you upgrade to Windows 10 or Windows 8.

Notebook computers manufactured with Windows 7 or earlier might have an available BIOS update that includes Secure Boot. Go to Updating the BIOS for more information.

Desktop computers manufactured with Windows 7 or earlier do not have the correct BIOS version to use Secure Boot.

What if the computer does not boot properly after installing new hardware?

If the computer does not start, a blue or a blank screen opens, or a BIOS error displays after installing a new compatible hardware such as a video card, Secure Boot might not recognize it. Return the computer to its original state, and then enable Legacy Boot to install the new component.

Turn off the computer.
Uninstall the new hardware or component, and then reinstall the original component.
Press the power button to turn on the computer, and then immediately press the F10 key repeatedly until the Computer Setup Utility opens.
Use the arrow keys to select the Security menu, select Secure Boot Configuration, and then press Enter.
Press F10 on the Secure Boot Configuration message to continue.
Use the arrow keys to select Disable next to Secure Boot, and then select Enable next to Legacy Support.
Press F10 to accept the changes.
Press F10 again, and then press Enter twice to restart the computer.
Type the four-digit code displayed in the Operating System Boot Mode Change message, and then press Enter to confirm the change.

note:
Make sure you type the code correctly. There is no text field to see what you are typing. This is expected behavior.
Turn off the computer. reinstall the new component, and then restart the computer.

What if I cannot boot from a recovery disc or drive?

Secure Boot prevents legacy boot devices from starting your computer, including bootable CDs, DVDs, and USB flash drives. To start your computer from a valid disc, enable Legacy Support, and then select the correct drive as the boot device.

Turn off the computer.
Press the power button to turn on the computer, and then immediately press the F10 key repeatedly until the Computer Setup Utility opens.
Use the arrow keys to select the Security menu, select Secure Boot Configuration, and then press Enter.
Press F10 on the Secure Boot Configuration message to continue.
Use the arrow keys to select Disable next to Secure Boot, and then select Enable next to Legacy Support.
Press F10 to accept the changes.
Press F10 again, and then press Enter twice to restart the computer.
Type the four-digit code displayed in the Operating System Boot Mode Change message, and then press Enter to confirm the change.
Press the power button to turn off the computer, wait a few seconds, and then turn on the computer and immediately press Esc repeatedly until the Startup menu opens.
Press F9 to open the Boot Menu.
Use the down arrow key to select a device under the Legacy Boot Sources heading, and then press Enter.

The computer starts Windows 10.
Insert the CD, DVD or USB flash drive into the computer.
Press the power button to turn off the computer, and then wait 5 seconds.
Press the power button again to turn on the computer.

The computer starts from the selected boot source.

hp-feedback-input-portlet

Actions

hp-feedback-banner-portlet

Actions

hp-country-locator-portlet

Actions

Country/Region: Flag

United Kingdom

hp-detect-load-my-device-portlet

Actions

hp-hero-support-search

Actions

Examples: "DeskJet 3630 paper jam", "EliteBook 840 G3 bios update"