Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I had UEFI Secure Boot enabled laptop with Windows 8 installed in, the problem is that I restored another OS(linux) and now I cannot enter in BIOS Setup.

Is there a way to disable UEFI Secure Boot without entering in BIOS settings?

share|improve this question
UEFI is the replacement for BIOS. You can't 'disable' UEFI, nor can you 'switch' between UEFI and BIOS. – spuder Aug 12 '13 at 15:08
@spuder Edited the question. – Eduard Florinescu Aug 12 '13 at 15:13
up vote 3 down vote accepted

By design, Secure Boot cannot be disabled from within an OS; you must enter your firmware's setup utility in order to disable it. With most computers, you can enter the firmware setup utility by hitting a function key, or sometimes Del, early in the boot process. Some computers don't enable the keyboard, though, or don't provide this option at all. If you've got such a system, you could try unplugging the hard disk from the motherboard and booting without a disk; that might kick the system into the firmware setup utility.

IIRC, the HashTool.efi program that comes with PreLoader.efi provides an option to reboot into the firmware's setup utility. This option doesn't work on all computers, though. If yours is one on which this feature works, you could get in by preparing a USB flash drive as follows:

  1. Download PreLoader.efi and HashTool.efi.
  2. Prepare a USB flash drive with a FAT filesystem. You may need to partition it with GPT and mark the partition as an ESP by giving it a type code of EF00 in gdisk or by setting its "boot flag" in parted or GParted.
  3. Copy and rename PreLoader.efi to the USB flash drive as EFI/BOOT/bootx64.efi and copy HashTool.efi as EFI/BOOT/HashTool.efi.
  4. Move the USB flash drive to your currently-unbootable computer and try to boot from it. With any luck, HashTool will come up and give you an option to reboot into the firmware setup utility.

Another option would be to prepare a USB flash drive or the like with a Secure Boot-enabled boot loader (PreLoader or shim). This would enable you to boot to Linux and install the Secure Boot-enabled boot loader on your hard disk. If you use PreLoader, you can begin as just described, but you'll also need to copy a regular Linux boot loader to the USB drive as EFI/BOOT/loader.efi. When you boot, HashTool will then let you register that program as valid, and thereafter it will work. You'll still have to configure the boot loader to boot off your regular hard disk, though. For more information or if you want to use shim rather than PreLoader, see my Web page on the topic for details.

Update: Recent versions of rEFInd, and I believe also gummiboot, provide an option to reboot into the firmware setup utility. To be useful, you'll need to install these programs to launch from PreLoader.efi or shim.efi. My rEFInd Secure Boot documentation covers this process in detail for rEFInd.

share|improve this answer

Is there a way to disable UEFI Secure Boot without entering in BIOS settings?

Secure Boot is an option enabled by default on UEFI OEM systems. Its actually required, to be turned on by default with the option to disable it, to be get a Windows 8 supported sticker from Microsoft.

So even if you remove the CMOS battery the default option would be to enable Secure Boot

share|improve this answer
Disabling Secure Boot will not require re-installing Linux, assuming that Linux was properly installed to begin with. (If the OP's Linux was restored from another computer, it might not work on the new one, but it probably will.) I switch Secure Boot on and off all the time on one of my test systems. – Rod Smith Aug 12 '13 at 16:12
@RodSmith - I agree. Normally it would not be required. Since the author is having problems booting to the restored image, I simply suggested, they restore the image after the disable secure boot. – Ramhound Aug 12 '13 at 16:16
The restored system will be identical whether or not Secure Boot was active when it was restored. Thus, restoring the system a second time after disabling Secure Boot won't change its bootability vs. simply disabling Secure Boot. – Rod Smith Aug 12 '13 at 16:38
@RodSmith - I will be honest I missed the part where he restored a linux image I thought it was simply installed. I find my answer still valid and remove the last sentence. – Ramhound Aug 12 '13 at 16:40
If you are going to downvote this question it might help to know the reason you are doing so otherwise I cannot improve this answer. – Ramhound Oct 4 '13 at 17:40

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.