-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
-
×InformationNeed Windows 11 help?Check documents on compatibility, FAQs, upgrade information and available fixes.
Windows 11 Support Center. -
- HP Community
- Notebooks
- Notebook Software and How To Questions
- How do I enable secure boot on my hp envy

Create an account on the HP Community to personalize your profile and ask a question
02-27-2025 03:11 PM
I need to enable secure boot on my computer in order to upgrade to the latest version of Windows 11 and get software updates. How do I do this?
Solved! Go to Solution.
Accepted Solutions
02-27-2025 04:08 PM
It looks like your PC meets Microsoft's minimum W11 hardware requirements with it having an Intel i7- i7-8550U processor.
The legacy mode setting is the problem which is why the secure boot setting is grayed out in the BIOS.
You have two options:
Back up any files you don't want to lose onto a portable hard drive and clean install W11 in UEFI mode by making a bootable W11 installation flash drive with the media creation tool from the link below (2nd option).
You need to boot the USB flash drive from the (U)EFI USB flash drive, not the legacy one.
Your other option would be to convert the existing file system from MBR (legacy mode) to GPT (UEFI mode) so you can disable legacy mode in the BIOS and enable secure boot.
Back up your files for this too just in case.
Watch this video for how to do that.
How To Convert MBR To GPT For Free In Windows 10
After you make the conversion, you have to restart the PC and immediately tap the ESC key to get the menu of options.
Select the F10 setup option to get into the BIOS and press the Enter key.
Then change the BIOS setting to disable Legacy mode and enable secure boot, save the setting and you should be able to upgrade to W11.
02-27-2025 03:15 PM
What is the full model number or product number of your notebook and how is Windows installed now--In Legacy or UEFI mode?
To find the product number for your PC, click on the search icon on your Windows taskbar.
Type: System Information
The System information app should show up.
Run the app and the product number of your PC will be found on the System SKU line about 1/4 of the way down on the report.
Then while you are in the same report, check the BIOS Mode line.
It will be either on Legacy or UEFI.
Let me know what the BIOS Mode line indicates --that's a little below the System SKU line.
02-27-2025 04:08 PM
It looks like your PC meets Microsoft's minimum W11 hardware requirements with it having an Intel i7- i7-8550U processor.
The legacy mode setting is the problem which is why the secure boot setting is grayed out in the BIOS.
You have two options:
Back up any files you don't want to lose onto a portable hard drive and clean install W11 in UEFI mode by making a bootable W11 installation flash drive with the media creation tool from the link below (2nd option).
You need to boot the USB flash drive from the (U)EFI USB flash drive, not the legacy one.
Your other option would be to convert the existing file system from MBR (legacy mode) to GPT (UEFI mode) so you can disable legacy mode in the BIOS and enable secure boot.
Back up your files for this too just in case.
Watch this video for how to do that.
How To Convert MBR To GPT For Free In Windows 10
After you make the conversion, you have to restart the PC and immediately tap the ESC key to get the menu of options.
Select the F10 setup option to get into the BIOS and press the Enter key.
Then change the BIOS setting to disable Legacy mode and enable secure boot, save the setting and you should be able to upgrade to W11.