What is Secure Boot (Secure boot) and when you may need to disable it
Got on the computer, most malware usually start to do its dirty work after the launch of Windows Essentials, but there are viruses that are triggered before the start of the system. Do bootkits – malware that modifies the hard disk boot sector. To detect the presence of bootkit conventional methods used by most antivirus tools may not always be possible. Get maximum privileges in the system, bootkits have control over many processes and is easy to bypass the protection.
However, the methods of protection against bootkits exist. One of the most effective technologies to protect against this type of malware is the technology Secure Boot part of UEFI specification 2.2. The essence of her work is to prevent code download software. When any program or operating system tries to load in the computer memory, Secure Boot checks the signature of the boot code with the keys, sewn directly into the BIOS and if the boot code fails the signature verification, the download is immediately blocked.
The advent of Secure Boot, however, was met with mixed reactions. In particular, much controversy was caused by the introduction of this technology in Windows 8 by Microsoft in 2012. There were fears that because of Secure Boot for a computer preinstalled with Windows 8, you cannot install another operating system. This, of course, wrong. All certified to install desktop computers and laptops support disabling Secure Boot at the level of WOA. The only exceptions are the tablets with ARM architecture and Windows 8 preinstalled. To disable Secure Boot is impossible.
How to disable Secure Boot
Depending on the manufacturer of the device, the Secure Boot option is located in different sections of the BIOS/UEFI. Computers Asus in most cases, this setting is under the Boot or Security. Alternatively, you need to go to Boot -> Secure Boot -> OS Type and choose Other OS. On Apple machines the option Secure Boot is typically located under System Configuration -> Boot Options in Dell laptops look under Boot -> UEFI Boot.
In laptops Lenovo and Toshiba option to disable Secure Boot is more than often under Security. But with laptops it is more complicated. Secure Boot they will be disabled in the Boot, but it will also need to agree with the warning about a possible error when the computer boots, then mention the OS parameter Mode Selеction, press enter and set it to CMS OS or UEFI and Legacy OS. And the last one. After disabling Secure Boot, regardless of the device you will need to find and enable the compatibility mode Legacy.
And make sure Secure Boot is disabled through standard tool of the «Information system» (Msinfo32.exe) in the section «the State of secure boot».