SecureBoot is not enabled. This is how Battlefield 2042 became unplayable.

Detailed Guide to Enable Secure Boot for Dual Boot Systems

Enabling Secure Boot on a Windows dual-boot system (e.g., Windows + Linux) requires careful steps to avoid boot issues. Secure Boot ensures only trusted operating systems and bootloaders load during startup, but it can interfere with non-Windows OS installations if not configured properly.

Prerequisites

1. UEFI Firmware: Your system must use UEFI (not Legacy/CSM BIOS).
2. Compatible Hardware: Some older hardware may not support Secure Boot.
3. Backup Important Data: Changing boot settings can sometimes cause boot failures.
4. Windows Installed in UEFI Mode: Verify using:

• Press Win + R, type msinfo32, and check "BIOS Mode" (should say UEFI).

Step 1: Check Current Secure Boot Status

1. Open Command Prompt (Admin) and run:

Confirm-SecureBootUEFI

• If it returns True, Secure Boot is already enabled.
• If False, proceed to enable it.

1. Alternatively, check in System Information (msinfo32):

• Look for "Secure Boot State" (should say "On" if enabled).

Step 2: Prepare for Secure Boot (Dual Boot Considerations)

Linux Users: Many Linux distributions (Ubuntu, Fedora, etc.) support Secure Boot, but some (e.g., Arch Linux) may require manual configuration.

Third-Party Bootloaders: Tools like GRUB, rEFInd, or systemd-boot must be signed or use Microsoft's Shim to work with Secure Boot.

Disable Fast Startup (Windows):

• Go to Control Panel > Power Options > Choose what the power buttons do.
• Click "Change settings that are currently unavailable".
• Uncheck "Turn on fast startup" and save.

Step 3: Enter UEFI/BIOS Setup

• Restart your PC.
• Press the UEFI/BIOS key (usually F2, F12, DEL, or ESC).
• Navigate to Boot Settings or Security Settings.

Step 4: Enable Secure Boot

• Locate Secure Boot (may be under Boot, Security, or Authentication).
• Set it to Enabled.
• If prompted, select "Windows UEFI Mode" (not "Other OS").
• Some systems require:
• Reset to Setup Mode (if keys are missing).
• Load Default Keys (restores Microsoft's certificates).
• Save & Exit (usually F10).

Step 5: Verify Secure Boot in Windows

Boot into Windows.

Open Command Prompt (Admin) and run:

Confirm-SecureBootUEFI

• Should now return True.

Step 6: Fixing Dual Boot Issues

For Linux Users

• Ubuntu/Fedora: Should work by default (uses Shim).
• Other Distros: May need to:

1. Install signed bootloader (e.g., shim-signed).
2. Enrol custom keys in UEFI (advanced).

GRUB Issues:

• Reinstall GRUB with Secure Boot support:

sudo grub-install --target=x86_64-efi --efi-directory=/boot/efi --bootloader-id=GRUB --no-nvram sudo update-grub

If Windows Boots Instead of Linux

• Use BIOS Boot Menu (usually F12 at startup) to select Linux.
• Set Linux as default in UEFI boot order.

Step 7: Troubleshooting

If PC Won’t Boot After Enabling Secure Boot

• Disable Secure Boot temporarily in BIOS.
• Check if the OS supports Secure Boot (e.g., some Linux distros need extra steps).
• Re-enable Secure Boot after fixing bootloader issues.

"Invalid Signature Detected" Error

• Your bootloader isn’t signed. Solutions:
• Use a signed bootloader (e.g., Shim).
• Disable Secure Boot (last resort).

"Operating System Not Found"

• Ensure CSM/Legacy Boot is disabled in BIOS.
• Reinstall bootloader in UEFI mode.

Conclusion

Enabling Secure Boot on a dual-boot system requires:
✅Confirming UEFI mode
✅ Enabling Secure Boot in BIOS
✅ Ensuring Linux/other OS supports Secure Boot
✅ Fixing bootloader issues if they arise

If done correctly, your system will boot securely while maintaining dual-boot functionality.