Hi Duke,
The screenshot shows Secure Boot is actually OFF despite BIOS settings saying otherwise (like “Secure Boot Mode” set to “Standard” but Secure Boot: Disabled).
3 reasons along with its fixes why Secure Boot is Off despite the BIOS showing options:
1.Secure Boot is disabled because of the BIOS mode or CSM settings:
Even if Secure Boot Mode is set to Standard, Secure Boot can remain off if CSM (Compatibility Support Module) is enabled.
CSM allows legacy boot, which disables Secure Boot.
Fix:
Go into BIOS and disable CSM completely — often under Boot or Advanced settings. After disabling CSM, Secure Boot can be enabled.
2.Secure Boot keys are missing or cleared:
If the keys are cleared or not enrolled, Secure Boot stays off.
Fix:
In BIOS, look for an option to Load Default Secure Boot keys or Install Factory Keys.
3.Boot device is not UEFI-compatible:
Secure Boot requires UEFI boot devices.
If your boot drive is set up for Legacy boot, Secure Boot cannot be enabled.
Fix:
Make sure your OS drive is using GPT partition style and your system boots in UEFI mode.
Best regards,
Kimberly