Applicable For: MSI Z97-Gaming 7 Motherboard (UEFI BIOS)
Difficulty: Intermediate
Secure Boot is a security feature in UEFI that ensures only trusted operating systems and firmware load during the boot process. Enabling Secure Boot is essential for Windows 11 compatibility and enhanced system security.
This guide will walk you through enabling Secure Boot on an MSI Z97-Gaming 7 motherboard.
Before proceeding, ensure:
✅ Your system is running in UEFI mode (not Legacy/CSM).
✅ Your OS (Windows 10/11) is installed in UEFI mode.
✅ Your BIOS is updated to the latest version (check MSI Support).
✅ You have backed up important data (BIOS changes carry risks).
- Restart your PC.
- Repeatedly press DEL or F2 during boot to enter BIOS.
If your system is in Legacy/CSM mode, you must disable it first:
- Go to Settings - Advanced - Windows OS Configuration.
- Set "Windows 10/11 WHQL Support" to Enabled.
- Set "Boot Mode Select" to UEFI.
- Disable "CSM" (Compatibility Support Module).
- Navigate to Settings - Advanced - Secure Boot.
- Set "Secure Boot" to Enabled.
- Select "Secure Boot Mode" - Standard (for Windows).
- If prompted, load factory defaults or install default keys.
- Press F10 to save changes and exit.
- Confirm with Yes.
- Your system will reboot with Secure Boot enabled.
To confirm Secure Boot is active:
- Windows:
- Open CMD as Admin - Run:
Confirm-SecureBootUEFI
- If it returns "True", Secure Boot is enabled.
- BIOS:
- Re-enter BIOS - Check Secure Boot Status under Settings.
- Ensure CSM is disabled and Windows WHQL Support is enabled.
- Update BIOS if the option is missing.
- Reset Secure Boot keys to "Restore Factory Keys" in BIOS.
- Reinstall OS in UEFI mode if necessary.
- Some OS require manual key enrolment - Check your distro’s documentation.
- Secure Boot enhances security but may cause issues with unsigned drivers/OS.
- If you face boot problems, disable Secure Boot temporarily.
- For further help, visit the MSI Support Forum.