What is uefi secure boot
Last updated: April 1, 2026
Key Facts
- Verifies cryptographic signatures of bootloaders and operating system components before execution
- Uses public key infrastructure with a database of trusted certificates stored in firmware
- Protects against rootkits, bootloader malware, and other firmware-level attacks
- Can be disabled in UEFI settings if needed, though this reduces security
- Supported by Windows, Linux, macOS, and most modern operating systems
Overview
UEFI Secure Boot is a security standard introduced with the Unified Extensible Firmware Interface (UEFI) that prevents computers from loading unauthorized operating systems or boot software. It works by checking the digital signature of every boot component before the system allows it to execute.
How Secure Boot Works
When you power on your computer, the UEFI firmware checks each boot file against a database of trusted signing keys. If the signature matches a trusted certificate, the boot process continues. If the signature is invalid or missing, the firmware halts the boot sequence, preventing potential malware from compromising the system at the lowest level. This process occurs before the operating system even loads, making it an effective first line of defense.
Key Components
Secure Boot relies on several components working together: the UEFI firmware itself, a database of trusted keys stored in the firmware (called the Allowed Signature Database), and cryptographic certificates embedded in boot files. The system also maintains a Forbidden Signature Database that explicitly blocks known malicious code. These components create a chain of trust that extends from the firmware through the entire boot process.
Benefits and Protection
Secure Boot provides significant protection against:
- Bootkit and rootkit infections that run before the operating system
- Unauthorized firmware modifications and BIOS attacks
- Malware designed to disable security features at startup
- Unauthorized operating system installations
Disabling Secure Boot
While Secure Boot enhances security, users and administrators can disable it in UEFI settings when necessary. This might be needed for legacy software, custom kernels, or certain Linux distributions. However, disabling Secure Boot should only be done when absolutely necessary and the risks are understood. Most modern systems benefit from keeping Secure Boot enabled.
Related Questions
What is UEFI firmware?
UEFI (Unified Extensible Firmware Interface) is the modern replacement for BIOS that initializes hardware and launches the operating system. It provides a more flexible, secure interface between firmware and the OS.
What is a bootkit?
A bootkit is malware that infects the boot process and runs before the operating system loads, making it difficult to detect and remove. Secure Boot helps prevent bootkit infections.
How do I enable or disable Secure Boot?
You can enable or disable Secure Boot by entering the UEFI settings (BIOS) during startup, typically by pressing F2, F12, Del, or Esc during boot, then locating the Secure Boot option and toggling it on or off.
More What Is in Daily Life
- What Is a Credit ScoreA credit score is a three-digit number, typically ranging from 300 to 850, that represents your cred…
- What Is CD rates make no sense based on length of time invested. Explain like I'm 5CD (Certificate of Deposit) rates often don't increase with longer lock-up times the way people expe…
- What is a phdA PhD (Doctor of Philosophy) is a doctoral degree earned after completing advanced academic research…
- What is a polymathA polymath is a person with deep knowledge and expertise across multiple different fields or academi…
- What is aaveAAVE stands for African American Vernacular English, a dialect with distinct grammar, pronunciation,…
- What is aarch64ARMv8-A (commonly called ARM64 or AArch64) is a 64-bit processor architecture developed by ARM Holdi…
- What is about menTopics and discussions about men typically encompass masculinity, male identity, gender roles, men's…
- What is abiturAbitur is the German academic qualification awarded upon completion of secondary education, typicall…
- What is abrosexualAbrosexual is a sexual orientation identity where a person's sexual attraction changes or fluctuates…
- What is abgABG is an Indonesian acronym standing for 'Anak Baru Gede,' which refers to adolescent girls or teen…
- What is aaaAAA batteries are a standard cylindrical battery size measuring 10.5mm in diameter and 44.5mm in len…
- What is aacAAC (Advanced Audio Codec) is a digital audio compression format that provides better sound quality …
- What is aaa gameAAA games are high-budget video games developed by large studios with budgets typically exceeding $1…
- What is a proxyA proxy is a server that acts as an intermediary between your device and the internet, forwarding yo…
- What is ableismAbleism is discrimination and prejudice against people with disabilities based on the assumption tha…
- What is absAbs, short for abdominal muscles, are the muscles in your core that flex your spine and stabilize yo…
- What is abortionAbortion is a medical procedure that ends pregnancy by removing the fetus before viability. It can b…
- What is accutaneAccutane (isotretinoin) is a powerful prescription medication derived from vitamin A used to treat s…
- What is acetaminophenAcetaminophen, also known as paracetamol, is an over-the-counter pain reliever and fever reducer use…
- What is acidAcid is a chemical substance that donates protons (hydrogen ions) to other substances, characterized…
Also in Daily Life
- How To Save Money
- Why are so many white supremacist and right wings grifters not white
- Does "I'm 20 out" mean youre 20 minutes away from where you left, or youre 20 minutes away from your destination
- Why are so many men convinced that they are ugly
- What does awol mean
- What does asl mean
- What does ad mean
- What does asap mean
- What does apex mean
- What does asmr stand for
- What does atp mean
- What causes autism
- What does abg mean
- What does am and pm mean
- What does a fox sound like