Can anyone confirm that Secure Boot become disabled when you use Boot Menu (F10) accessed through Power Button Menu?
How to check (provided you have enabled Secure Boot inside BIOS settings):
1. Power off your device.
2. Hold power button and release it after third beep but before fourth.
3. Choose: Boot Menu (F10).
4. Choose you operating system.
5. Check if system booted with Secure Boot method.
In Windows run (Win + R) msinfo32.exe and check Secure Boot state.
Thank you for joining the community.
I see that you are having questions about setting the secure boot on the Intel® NUC, allow me to help you with the inquiries.
I would like to verify with you if you have followed this steps to enable the secure boot.
- Press F2 during the start to enter BIOS setup.
- Go to Advanced > Boot > Boot Configuration.
- In the Boot Devices pane, disable Internal UEFI Shell.
- Go to Advanced > Boot > Secure Boot.
- Enable Secure Boot, if it was originally enabled.
- Press F10 to save changes and exit BIOS Setup.
I would like to gather more information about the configuration you have on the computer. Please attach to this thread the TXT file the Intel® System Support Utility will generate: https://downloadcenter.intel.com/download/25293/Intel-System-Support-Utility https://downloadcenter.intel.com/download/25293/Intel-System-Support-Utility
Steps to save the report:
- Run the utility.
- Click on "Scan" to get the scanned system.
- Once the scan is complete click on "next".
- Use the "save" option, save the report to your desktop.
- To attach a file, you must click the "Attach" option on the bottom right-hand corner of the response box.
Hope this help.
Thanks for the interest but I can enable Secure Boot. And most of the time it is working.
What I found strange is that it is temporary disabled when I use "Power Button Menu" and access "Boot Menu" from there.
When I use this method Secure Boot became disabled.
Hello Gorbush ,
I've tested this Secure Boot behavior in my NUC6i5SYH, Windows 10 Pro, 64bit, Latest Bios 0067.
1. I can confirm your observation that when I've booted to the Boot Menu from Power Button Menu and then I've chosen as a boot devise my UEFI SSD, the Secure Boot was disabled (OFF). Exactly as in your NUC.
2. Later booting normally (short depressing on Power Button), the Secure Boot is enabled according to bios settings.
By the way, I don't see any thing wrong here.
Could this bios behaviour be a solution to trying to update the bios with secure boot on? It may have been easier to just turn off secure boot when in the bios, then turn it back on again.
I would feel safer if BIOS update could be done only in secured environment. Otherwise almost anyone could modify firmware. Especially when we considered Management Engine known vulnerabilities.
Thank you for the information.
Secure Boot doesn't have anything to do with BIOS security.
You can add an Administrative password for the BIOS, but this can be overwritten by a BIOS Recovery or Clear CMOS (Intel intended this because there is no way to recover the password and several people forget the password all of the time).
Hope this help.