Stuck In A Boot Loop After Enabling Secure Boot In Windows 11

Understanding Why Secure Boot Causes a Boot Loop

Secure boot causes a boot loop in Windows 11 when your computer’s hard drive uses an older MBR partition style instead of the modern GPT format required by UEFI security settings. Your motherboard cannot verify the older drive format during startup, which stops Windows from loading and forces the computer to restart over and over again.

Older computers used a system called CSM or Legacy boot, while newer computers use a modern system called UEFI. If you originally installed Windows 11 using the older CSM system, turning on Secure Boot forces your computer to look for an operating system using the modern UEFI system. Because your computer cannot find a match, the computer fails to start Windows. The computer assumes you want to change your settings, so the computer opens the BIOS screen again. This process creates the endless cycle known as a boot loop.

How to Access Your Computer Settings When You Are Stuck

Accessing your computer settings when stuck in a boot loop requires turning off your PC completely by holding down the power button, turning it back on, and repeatedly pressing your manufacturer’s specific BIOS key like F2, F12, or Delete before the Windows logo appears on your screen.

Turn off your computer by holding down the power button for about ten seconds. Turn the computer back on and immediately press the key on your keyboard that opens your computer settings screen, also known as the BIOS or UEFI menu. This settings key is usually Delete, F2, F12, or F1. Check your computer screen when the computer first turns on for a quick message telling you which key to press.

Solution 1: Temporarily Turn Off Secure Boot to Regain Access

Temporarily turning off secure boot lets you regain access to your Windows 11 desktop by entering your motherboard settings screen, finding the security menu, disabling the secure boot option, and saving your changes so the computer can start up normally again.

Follow these steps to turn off Secure Boot:

• Turn on your computer and open your settings screen by pressing your specific key, such as Delete or F2.
• Look for a tab named Security, Boot, or Authentication. You may need to switch your settings view from an easy mode to an advanced mode by pressing a key like F7.
• Find the option labeled Secure Boot.
• Change the setting from Enabled to Disabled.
• Save your changes and restart your computer. Look on the screen for the key that saves and exits, often the F10 key.

Your computer should now start normally and load your Windows 11 desktop.

Solution 2: Change Your Hard Drive Format from MBR to GPT

Changing your hard drive format from MBR to GPT allows you to keep secure boot enabled permanently in Windows 11 without causing a boot loop. You can use the built-in MBR2GPT tool within the command prompt to safely convert your drive format while keeping all of your personal files intact.

Follow these steps to convert your drive (Administrator privileges required):

• Click the Windows Start button, type Command Prompt, right-click it, and select Run as administrator.
• Type the following exact command and press Enter to check your disk: mbr2gpt /validate /allowfullos
• If the validation succeeds, type the following command to convert your drive and press Enter: mbr2gpt /convert /allowfullos
• Wait for the process to finish completely.
• Restart your computer, open your settings screen, and turn Secure Boot back on using the steps from the previous section.

Solution 3: Switch from Legacy Boot to UEFI Mode

Switching from legacy boot to UEFI mode in your motherboard settings allows your computer to recognize modern hard drive formats and successfully start Windows 11 with secure boot turned on. You simply need to open your BIOS settings, locate the boot mode option, and change it from CSM or Legacy to UEFI.

Follow these steps to update your boot mode:

• Turn on your computer and open your settings screen.
• Navigate to the Boot tab or settings menu.
• Find the setting named Boot Mode Selection, OS Type, or CSM.
• Change the setting from Legacy, CSM, or Both to UEFI Only or UEFI.
• Turn Secure Boot back on if it turned off automatically.
• Save your changes and restart your computer.

Advanced Rescue: Fixing Boot Loops Using a USB Installation Drive

Fixing a persistent boot loop using a USB installation drive requires downloading the official Windows 11 media creation tool onto a blank USB stick using another working computer. You then plug the USB into your broken PC, boot from it, and use the advanced repair options to fix startup files or reinstall Windows safely.

Follow these steps to build and use a rescue drive:

• On a working computer, download the official Windows 11 installation tool from the official Microsoft website.
• Insert your blank USB flash drive into the working computer.
• Run the downloaded tool and follow the on-screen instructions to create a bootable USB drive.
• Insert the finished USB drive into your broken computer while it is turned off.
• Turn on your computer and press your boot menu key, often F12 or F11, to select the USB drive as your startup device.
• When the Windows setup window appears, click Next and then select Repair your computer in the bottom-left corner.
• Go to Troubleshoot, select Advanced options, and click Command Prompt.
• Type diskpart and press Enter.
• Type list disk and press Enter to see your drives. Look for the disk number that holds Windows, usually Disk 0.
• Type select disk 0 and press Enter. (Replace 0 with your actual disk number if it is different).
• Type list volume and press Enter to find your small system partition.
• Type exit and press Enter to leave the disk tool.

Preventing Future Boot Loops When Updating Motherboard Software

Preventing future boot loops when updating your motherboard software involves checking your BIOS settings immediately after a firmware update finishes. Manufacturers often reset security options to factory defaults during updates, so you must verify that secure boot and UEFI mode remain correctly configured before restarting your computer into Windows.

To prevent this, always check your motherboard settings before and after applying a firmware update. Make a note of whether Secure Boot was enabled, whether your keys were in standard or custom mode, and whether your CSM settings were disabled. If you update your firmware and find yourself staring at the settings screen again, navigate back to the security tab, restore your previous Secure Boot and key settings, and save before restarting.

Managing Custom Security Keys and Platform Keys

Managing custom security keys and platform keys inside your motherboard settings prevents Windows 11 from blocking startup if security keys get accidentally deleted or changed. Restoring your secure boot mode from custom back to standard factory keys will allow your computer to trust Windows startup files again and boot normally.

If you suspect you altered these advanced keys:

• Open your computer settings screen during startup.
• Navigate to the Secure Boot settings page.
• Look for an option labeled Secure Boot Mode and ensure it is set to Standard rather than Custom.
• If an option exists to Restore Factory Keys or Reset Secure Boot Keys, select it and confirm your choice.
• Save your changes and restart your computer. This action restores the official digital certificates required by Windows 11 and breaks the boot loop instantly.

Summary

Fixing a computer stuck in a boot loop after turning on secure boot in Windows 11 involves turning off secure boot in your BIOS, converting your hard drive from MBR to GPT, switching your boot mode to UEFI, or using a USB rescue drive if you cannot access Windows normally.