Video Tutorial: Enabling Secure Boot in UEFI BIOS

Introduction

• The video addresses the issue of getting a message that secure boot is not enabled, causing the PC not to boot.
• It includes a step-by-step guide on adding a secure boot entry in UEFI BIOS using PowerShell.

Objective

• Fix secure boot errors.
• Solve the problem of missing boot entries or Windows not booting.

Initial Checks

1. Verify Secure Boot Status:

   • Search for 'Ms info' to check secure boot status.
   • Status can be 'Enabled', 'Disabled', or 'Unsupported'.

2. Check BIOS Mode:

   • Ensure Windows BIOS mode is UEFI and motherboard supports UEFI.
   • If BIOS mode is Legacy, a specific tutorial is needed.

Steps to Enable Secure Boot in BIOS

1. Restart your PC and enter BIOS by pressing F2, F10, F12, or Delete.
2. Navigate to Boot, Security, or Advanced settings to enable Secure Boot.
3. Add new boot entry or select a UEFI file trusted for execution:
   • Path sequence: EFI > Microsoft > Boot > bootmgfw.efi.
   • Name your entry 'Windows Boot Manager'.

Using PowerShell to Fix Secure Boot

1. Open PowerShell as Administrator.

2. Execute command: bcdedit /enum firmware. Check for 'Windows Boot Manager' boot entry.

3. If Missing, Add Secure Boot Entry Manually:

   • bcdedit /set {bootmgr} path \EFI\Microsoft\Boot\bootmgfw.efi
     shutdown /r /fw /t 0
     

4. Alternative Method:

   • Open PowerShell, type diskpart.
   • List and select your main Windows drive and partition.
   • Assign a drive letter to your EFI partition.
   • Execute command to create boot entries:

     • bootrec /scanos /s c:\Windows /s: /f:uefi
       

   • Verify boot entries, check secure boot status, and reboot.

Conclusion

• Secure boot should now be enabled.
• Video provides thorough instructions using BIOS settings and PowerShell.
• Users are encouraged to like, comment, share, and subscribe to the channel.

Engagement

• Questions and feedback are welcomed on the channel for further assistance.