Secure boot can be enabled when the system is in user mode

Secure Boot is a security standard developed by members of the PC industry to ensure that devices can only boot and run software trusted by the original equipment manufacturer (OEM). In Windows 11, secure boot is a basic requirement. When you enable Secure Boot, if you encounter the error SYSTEM in setup mode, this may indicate that the system is currently in user mode. In this case, the solutions provided in this article will help you.

Secure Boot can be enabled when the system is in user mode

After enabling Secure Boot on your device, you may receive the error "Secure Boot can be enabled when the system is in user mode." To install Windows 11, Secure Boot must be enabled on the system. Nonetheless, other methods exist to install Windows 11 without Secure Boot.

Some games may require the Secure Boot option to be enabled to run properly. If you successfully installed Windows 11 by bypassing the Secure Boot option, these games may not play properly. Therefore, it is important to fix this problem. Here are a few suggestions to help you resolve this error.

Check your hard drive partition style

Close CSM

Change system mode to user

Generate platform key (for ASUS Phantom gaming motherboard users)

Restore BIOS settings to default settings

Let's look at all the fixes in detail.

1]Check your hard drive partition style

The first step is to check the partition type of the hard disk. To do this, follow these steps:

Press Win X key combination.

Select Disk Management.

Right click on your hard drive and select Properties.

Select the "Volume" tab in the "Properties" window.

You will see the partition styles there.

If your hard drive adopts MBR partition type, please consider converting it to GPT. Normally, converting MBR to GPT will result in data loss, but there are some special tools and methods that can help you complete this conversion without losing data. Therefore, before performing this operation, be sure to back up important data in case something unexpected happens. Doing so ensures that your data is fully protected and no important information is lost during the conversion of partition type.

Now, try to enable secure boot. If Secure Boot cannot be enabled, try other fixes.

2]Close CSM

Modern computer systems come with UEFI support. In such computer systems, CSM support is not required. So, if CSM is enabled on your system, you can disable it. Different brands of motherboards may have different methods of disabling CSM in the BIOS. You need to visit your computer motherboard manufacturer's official website to learn the exact method of disabling CSM in the BIOS.

3]Change system mode to user

The error message states that Secure Boot can be enabled when the system is in user mode. Therefore, if your system is in setup mode, Secure Boot cannot be enabled. Change setup mode to user mode and you will be able to enable secure boot.

Different brands of motherboards may switch between system mode and user mode differently. Please refer to the motherboard's user manual or refer to its official website for specific operation methods.

For example, in MSI and GB motherboards, you must install the default factory key. Here are the steps to do this:

Enter your BIOS.

Change the safe boot mode from standard to custom.

Click the Enroll Factory Default Key option. On gigabyte motherboards, this option is the factory reset key.

Click Yes.

You may receive a pop-up message about resetting your system. Click No. You should now be able to enable secure boot. After enabling Secure Boot, change the Secure Boot mode back to Standard. Save BIOS settings and exit.

4]Generate platform key (for ASUS Phantom gaming motherboard users)

This solution is for ASUS Phantom gaming motherboard users. If your system has this motherboard and you are unable to install the default Secure Boot key, you can generate a platform key.

To do this, enter your computer's BIOS and go to the Security tab. There, you will see an option called Key Management. Select it and then choose Build Options or something similar to Build Options.

Now, go back to the Secure Boot page in BIOS and switch the Secure Boot mode from Standard to Custom. This will enable the option to install the default Secure Boot key. Click on the Install Default Secure Boot Keys option. Once this is done, enable secure boot.

After enabling Secure Boot, change the Secure Boot mode back to Standard. Save changes and exit.

5]Restore BIOS settings to default settings

If none of the above fixes solve your problem, you can restore all BIOS settings to their default settings. After doing this, you should be able to enable secure boot. Before resetting your BIOS settings to default, we recommend that you write down all the changes you have made in the BIOS so that you can make all these changes again after enabling Secure Boot.

I hope this helps.

How to enable secure boot in system configuration?

There is no option to enable secure boot in the system configuration or message configuration. Therefore, it is necessary to enter your BIOS settings to enable Secure Boot on your device. Visit your computer manufacturer's official website to learn the private key to enter the BIOS.

Why can't I enable Secure Boot?

There may be many reasons why Secure Boot cannot be enabled or the Secure Boot option is grayed out on your system. You may have changed the settings to disable the secure boot option. The easiest way to fix this problem is to reset the BIOS to factory default settings.

Read next: Windows computer won’t boot after enabling Secure Boot.

The above is the detailed content of Secure boot can be enabled when the system is in user mode. For more information, please follow other related articles on the PHP Chinese website!