Secure Boot is not correctly configured under Windows 8.1/10

Updated November 2024: Stop getting error messages and slow down your system with our optimization tool. Get it now at this link

Download and install the repair tool here.
Let it scan your computer.
The tool will then repair your computer.

The secure boot function under Windows 10 or Windows 8.1/8 guarantees the user that his PC will only boot with firmware that the manufacturer and no one else trusts. So, if there are incorrect configurations, the end user can see the Secure Boot watermark is not configured in the lower right corner of the desktop.

prevented from working.

So if you see that the watermark on the desktop is not configured correctly, it probably indicates that Windows Secure Boot is disabled or not configured on your PC. The problem was not well known until the first Windows 8 users started upgrading to the latest Windows 8.1 update, which was available for free on the Windows store.

Read: What is Secure Boot, Trusted Boot, Measured Boot.

Secure Boot is not configured correctly

November 2024 Update:

You can now prevent PC problems by using this tool, such as protecting you against file loss and malware. Additionally, it is a great way to optimize your computer for maximum performance. The program fixes common errors that might occur on Windows systems with ease - no need for hours of troubleshooting when you have the perfect solution at your fingertips:

Step 1 : Download PC Repair & Optimizer Tool (Windows 10, 8, 7, XP, Vista – Microsoft Gold Certified).
Step 2 : Click “Start Scan” to find Windows registry issues that could be causing PC problems.
Step 3 : Click “Repair All” to fix all issues.

Download Now

A handful of users received the message Secure Boot Isn’t Configured Correctly after upgrading to the new Windows 8.1. Although no workaround solution is currently available, Microsoft provides some instructions to help solve the problem.

First check if Secure Boot has been disabled in BIOS, and if so, reactivate it. Then you should try resetting the BIOS to factory settings, and if that doesn’t work, you can try resetting your PC to the factory default values, then reactivate Secure Boot.

Read: How to save the Windows 10 boot process.

Disable or enable secure boot

Although I do not recommend disabling secure boot if the option is present on your system, you can disable secure boot by customizing your BIOS. Using the advanced options in Windows 8, click UEFI Firmware Settings and restart your PC. In the BIOS Settings screen, in the UEFI settings of your motherboard, you will now see the option to enable or disable Secure Boot, somewhere in the Security section.

View and verify Event Viewer

You can check Windows logs to find out why. The Windows Event Viewer displays a log of application and system messages – errors, information messages and warnings.

Go to View Event Logs > Application and Service Logs
In the right pane, select Microsoft, then Windows.
Under Microsoft, select the Windows folder and navigate to Verify HardwareSecurity > Admin.

Then search for one of these recorded events:

A policy of secure boots without production has been identified. Remove the debugging and pre-release policy from the system firmware. (The PC has a non-production policy.)

You can also use PowerShell commands to check the status.

To see if Secure Boot is disabled, use the PowerShell : Confirm-Save-SaveUEFI command. You will receive one of these answers:

True: Secure Boot is enabled and the watermark does not appear.
False: Secure Boot is disabled and a watermark appears.
Cmdlet is not supported on this platform: The PC may not support secure boot or the PC may be configured in existing BIOS mode. The watermark does not appear.

Use the PowerShell command to determine if a non-production policy is installed : Get-SecureBootPolicy. You will receive one of these answers:

{77FA9ABD-0359-4D32-BD32-BD60-28F4E78F784B} : The right secure start-up policy is in place.
Everything else GUID: There is a non-productive secure boot policy.
Secure boot policy is not enabled on this machine: The PC may not support secure boot or the PC may be configured to the existing BIOS mode. The watermark does not appear.

Source: TechNet.

Microsoft has now released an update that deletes the Windows SecureBoot is not configured correctly watermark in Windows 8.1 and Windows Server 2012 R2. Get it at KB2902864.

Expert Tip: This repair tool scans the repositories and replaces corrupt or missing files if none of these methods have worked. It works well in most cases where the problem is due to system corruption. This tool will also optimize your system to maximize performance. It can be downloaded by Clicking Here