{"id":284,"date":"2014-10-01T15:50:27","date_gmt":"2014-10-01T07:50:27","guid":{"rendered":"http:\/\/www.datarelab.com\/blog\/?p=284"},"modified":"2015-01-18T19:41:30","modified_gmt":"2015-01-18T11:41:30","slug":"secure-boot-confirm-enabled-or-disabled-in-windows-8","status":"publish","type":"post","link":"https:\/\/www.datarelab.com\/blog\/Technical_literature\/284.html","title":{"rendered":"Secure Boot - Confirm Enabled or Disabled in Windows 8"},"content":{"rendered":"<div><span style=\"font-size: x-large;\"><b>How to Check if Secure Boot is Enabled or Disabled in Windows 8 and 8.1<\/b><\/span><\/div>\n<p>&nbsp;<\/p>\n<div>\n<div class=\"infotop\"><img loading=\"lazy\" decoding=\"async\" title=\"information\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/infosmall1.png\" alt=\"information\" width=\"20\" height=\"20\" border=\"0\" \/>\u00a0\u00a0 Information<\/div>\n<div class=\"infobody\">This tutorial will show you how to confirm if <b>Secure B<\/b><b>oot<\/b> is enabled or disabled in your UEFI settings from inside<b>Windows 8 <\/b>and<b> 8.1<\/b>.You must be signed in as an <b>administrator<\/b> to be able to do the steps in this tutorial.<\/div>\n<\/div>\n<div>\n<div class=\"notetop\"><img loading=\"lazy\" decoding=\"async\" class=\"inlineimg\" title=\"Note\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/notesmall1.png\" alt=\"Note\" width=\"20\" height=\"16\" border=\"0\" \/>\u00a0\u00a0 Note<\/div>\n<div class=\"notebot1\"><b>UEFI<\/b> (replaces BIOS) has a firmware validation process, called <b>secure boot<\/b>, which is defined in Chapter 27 of the UEFI 2.3.1 specification. Secure boot defines how platform firmware manages security certificates, validation of firmware, and a definition of the interface (protocol) between firmware and the operating system. Secure boot prevents \u201cunauthorized\u201d operating systems and software from loading during the startup process.<b>Quick summary<\/b><\/p>\n<ul>\n<li>UEFI allows firmware to implement a security policy<\/li>\n<li>Secure boot is a UEFI protocol not a Windows 8 feature<\/li>\n<li>UEFI secure boot is part of Windows 8 secured boot architecture<\/li>\n<li>Windows 8 utilizes secure boot to ensure that the pre-OS environment is secure<\/li>\n<li>Secure boot doesn\u2019t \u201clock out\u201d operating system loaders, but is a policy that allows firmware to validate authenticity of components<\/li>\n<li>OEMs have the ability to customize their firmware to meet the needs of their customers by customizing the level of certificate and policy management on their platform<\/li>\n<li>Microsoft does not mandate or control the settings on PC firmware that control or enable secured boot from any operating system other than Windows<\/li>\n<\/ul>\n<p><b>For more information about secure boot, see:<\/b><\/p>\n<ul>\n<li>Secure Boot Overview<\/li>\n<li>\"Secure Boot isn't configured correctly\": troubleshooting<\/li>\n<li>Protecting the pre-OS environment with UEFI - Building Windows 8 - Site Home - MSDN Blogs<\/li>\n<li>Secured Boot and Measured Boot: Hardening Early Boot Components Against Malware<\/li>\n<\/ul>\n<\/div>\n<\/div>\n<p><b><span style=\"font-size: medium;\">EXAMPLE:<\/span> Secure Boot in your UEFI firmware settings at boot<\/b><\/p>\n<div><img decoding=\"async\" class=\"thumbnail\" title=\"Click image for larger version\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/16490d1360648447t-secure-boot-confirm-enabled-disabled-windows-8-uefi.jpg\" alt=\"Click image for larger version\" border=\"0\" \/><\/div>\n<p>&nbsp;<\/p>\n<div>\n<div><img decoding=\"async\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/OPTl.png\" alt=\"\" height=\"20px\" \/> OPTION ONE <img decoding=\"async\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/OPTR.png\" alt=\"\" height=\"20px\" \/><\/div>\n<div class=\"smallfont\"><\/div>\n<p>To Check if Secure Boot is Enabled or Disabled in System Information<\/p>\n<\/div>\n<div><span style=\"font-size: medium;\"><b>1.<\/b><\/span> Press the <img decoding=\"async\" class=\"inlineimg\" title=\"Start\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/start.png\" alt=\"\" border=\"0\" \/><b> + R <\/b>keys to open the Run dialog, type <b>msinfo32<\/b>, and press Enter.<span style=\"font-size: medium;\"><b>2.<\/b><\/span> In the right pane of <b>System Summary <\/b>in System Information, see what the <b>Secure Boot State<\/b> value is. (see screenshot below)<\/p>\n<div class=\"cms_table\">\n<table class=\"cms_table_grid\" width=\"550\">\n<tbody>\n<tr class=\"cms_table_grid_tr\" valign=\"top\">\n<td class=\"cms_table_grid_td\"><span style=\"font-size: medium;\"><b>Value<\/b><\/span><\/td>\n<td class=\"cms_table_grid_td\"><span style=\"font-size: medium;\"><b>Description<\/b><\/span><\/td>\n<\/tr>\n<tr class=\"cms_table_grid_tr\" valign=\"top\">\n<td class=\"cms_table_grid_td\"><b>On<\/b><\/td>\n<td class=\"cms_table_grid_td\">PC supports Secure Boot and Secure Boot is enabled<\/td>\n<\/tr>\n<tr class=\"cms_table_grid_tr\" valign=\"top\">\n<td class=\"cms_table_grid_td\"><b>Off<\/b><\/td>\n<td class=\"cms_table_grid_td\">PC supports Secure Boot and Secure Boot is disabled<\/td>\n<\/tr>\n<tr class=\"cms_table_grid_tr\" valign=\"top\">\n<td class=\"cms_table_grid_td\"><b>Unsupported<\/b><\/td>\n<td class=\"cms_table_grid_td\">PC does not support Secure Boot or is a Legacy (BIOS) installed Windows<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<div>\n<p><img decoding=\"async\" class=\"thumbnail\" title=\"Click image for larger version\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/26078d1376076178t-secure-boot-confirm-enabled-disabled-windows-8-minfo32_secure_boot.jpg\" alt=\"Click image for larger version\" border=\"0\" \/><\/p>\n<\/div>\n<\/div>\n<p>&nbsp;<\/p>\n<div>\n<div><img decoding=\"async\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/OPTl.png\" alt=\"\" height=\"20px\" \/> OPTION TWO <img decoding=\"async\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/OPTR.png\" alt=\"\" height=\"20px\" \/><\/div>\n<div class=\"smallfont\"><\/div>\n<p>To Check if Secure Boot is Enabled or Disabled in PowerShell<\/p>\n<\/div>\n<div><span style=\"font-size: medium;\"><b>1.<\/b><\/span> Open an <b>elevated PowerShell<\/b> window from inside Windows 8 or 8.1.<span style=\"font-size: medium;\"><b>2.<\/b><\/span> If prompted by UAC, then click\/tap on <b>Yes<\/b>.<span style=\"font-size: medium;\"><b>3.<\/b><\/span> In the elevated PowerShell window, copy and paste the command below, and press Enter.<\/p>\n<div><b>Confirm-SecureBootUEFI<\/b><\/div>\n<p><span style=\"font-size: medium;\"><b>4.<\/b><\/span> Based on what the cmdlet returns, this will let you know if Secure Boot is enabled or disabled in your UEFI settings.<\/p>\n<div class=\"cms_table\">\n<table class=\"cms_table_grid\" width=\"725\">\n<tbody>\n<tr class=\"cms_table_grid_tr\" valign=\"top\">\n<td class=\"cms_table_grid_td\"><span style=\"font-size: large;\"><b>Cmdlet Return<\/b><\/span><\/td>\n<td class=\"cms_table_grid_td\"><span style=\"font-size: large;\"><b>Description<\/b><\/span><\/td>\n<\/tr>\n<tr class=\"cms_table_grid_tr\" valign=\"top\">\n<td class=\"cms_table_grid_td\"><b>True<\/b><\/td>\n<td class=\"cms_table_grid_td\">PC supports Secure Boot and Secure Boot is enabled<\/td>\n<\/tr>\n<tr class=\"cms_table_grid_tr\" valign=\"top\">\n<td class=\"cms_table_grid_td\"><b>False<\/b><\/td>\n<td class=\"cms_table_grid_td\">PC supports Secure Boot and Secure Boot is disabled<\/td>\n<\/tr>\n<tr class=\"cms_table_grid_tr\" valign=\"top\">\n<td class=\"cms_table_grid_td\"><b>Cmdlet not supported on this platform<\/b><\/td>\n<td class=\"cms_table_grid_td\">PC does not support Secure Boot or is a Legacy (BIOS) installed Windows<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<div>\n<p><img decoding=\"async\" class=\"thumbnail\" title=\"Click image for larger version\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/16491d1360648447t-secure-boot-confirm-enabled-disabled-windows-8-secure_boot_powershell-true.jpg\" alt=\"Click image for larger version\" border=\"0\" \/><\/p>\n<p><img decoding=\"async\" class=\"thumbnail\" title=\"Click image for larger version\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/16492d1360648447t-secure-boot-confirm-enabled-disabled-windows-8-secure_boot_powershell-false.jpg\" alt=\"Click image for larger version\" border=\"0\" \/><\/p>\n<p><img decoding=\"async\" class=\"thumbnail\" title=\"Click image for larger version\" src=\"https:\/\/www.datarelab.com\/blog\/wp-content\/uploads\/2014\/10\/16493d1360648447t-secure-boot-confirm-enabled-disabled-windows-8-secure_boot_powershell_not_available.jpg\" alt=\"Click image for larger version\" border=\"0\" \/><\/p>\n<p>&nbsp;<\/p>\n<p>Windows Registry Editor Version 5.00<\/p>\n<p>[HKEY_LOCAL_MACHINE\\SYSTEM\\ControlSet001\\Control\\SecureBoot\\State]<br \/>\n\"UEFISecureBootEnabled\"=dword:00000001<br \/>\n\"PolicyPublisher\"=\"{77fa9abd-0359-4d32-bd60-28f4e78f784b}\"<br \/>\n\"PolicyVersion\"=dword:00000001<\/p>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>How to Check if Secure Boot is Enabled or Disabled in W [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[171,96],"class_list":["post-284","post","type-post","status-publish","format-standard","hentry","category-Technical_literature","tag-secure-boot","tag-windows"],"views":2217,"_links":{"self":[{"href":"https:\/\/www.datarelab.com\/blog\/wp-json\/wp\/v2\/posts\/284","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.datarelab.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.datarelab.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.datarelab.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.datarelab.com\/blog\/wp-json\/wp\/v2\/comments?post=284"}],"version-history":[{"count":0,"href":"https:\/\/www.datarelab.com\/blog\/wp-json\/wp\/v2\/posts\/284\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.datarelab.com\/blog\/wp-json\/wp\/v2\/media?parent=284"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.datarelab.com\/blog\/wp-json\/wp\/v2\/categories?post=284"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.datarelab.com\/blog\/wp-json\/wp\/v2\/tags?post=284"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}