How to Fix Secure Boot State Unsupported on Windows 11 and 10
Secure Boot State Unsupported in System Information means Windows boots in Legacy BIOS mode or your firmware does not expose Secure Boot. Check BIOS Mode, convert an MBR disk to GPT, switch the firmware to UEFI and enable Secure Boot. Jump to your situation below or work through the methods in order.
By Neeraj Singh ~5 min Updated Nov 2026 Checked against EA Help
Error message
Secure Boot State: Unsupported. This PC must support Secure Boot.
Summary
Secure Boot State: Unsupported in msinfo32 means Windows cannot use Secure Boot with the way your PC booted. BIOS Mode: Legacy on an MBR disk is the common cause, because Secure Boot works only in UEFI mode. Convert the system disk to GPT with Microsoft's mbr2gpt tool, switch the firmware from Legacy to UEFI and enable Secure Boot. If BIOS Mode already says UEFI, update the BIOS and look for a Secure Boot or OS Type setting. Open msinfo32 again to confirm that Secure Boot State reads On.
What Secure Boot State Unsupported means
System Information reports Secure Boot State as On, Off or Unsupported. On means Secure Boot is active, Off means it is available but disabled and Unsupported means Windows cannot use it with the current boot setup.
Secure Boot works only when the PC boots through UEFI. A PC that boots in Legacy BIOS or CSM mode reports Unsupported, even when the motherboard is new enough to offer Secure Boot.
Windows 11 needs Secure Boot capable firmware, so Unsupported blocks the upgrade. It also stops games with anti-cheat that require it, including EA Javelin AntiCheat and Riot Vanguard.
Common causes
BIOS Mode shows Legacy because Windows was installed in Legacy mode.
The system disk uses MBR instead of GPT.
CSM or Legacy support is enabled in the firmware.
The firmware is old and does not expose Secure Boot.
Secure Boot keys are missing or cleared in the firmware.
✓ How to fix it
Method 1
Check BIOS Mode and disk type
1Press Windows key + R, enter this and press Enter.
msinfo32
2Select System Summary and read BIOS Mode and Secure Boot State.
3If BIOS Mode says UEFI and Secure Boot State says Off, go to Method 3. If BIOS Mode says Legacy, continue.
4Right-click the Start button, select Disk Management, right-click your Windows disk, select Properties and open the Volumes tab. Partition style tells you whether the disk is MBR or GPT.
Method 2
Convert the disk from MBR to GPT
1Back up your files first. Microsoft warns that the conversion cannot be undone with the tool.
2Open Command Prompt as administrator and check that the disk can convert. Use your disk number if it is not 0.
mbr2gpt /validate /disk:0
3If validation passes, convert the disk from the full Windows session.
mbr2gpt /convert /disk:0 /allowFullOS
4Do not restart into Windows yet. The disk now boots only in UEFI mode, so continue with Method 3. Microsoft explains the options on its MBR2GPT.exe page on Microsoft Learn.
Method 3
Switch to UEFI and enable Secure Boot
1Restart your PC and open the firmware settings with the key your maker shows at startup, or select Settings, System, Recovery, Restart now, Troubleshoot, Advanced options and UEFI Firmware Settings.
2Set the boot mode to UEFI and disable CSM or Legacy support.
3Set Secure Boot to Enabled. Some boards ask you to set OS Type to Windows UEFI Mode first.
4Save, exit and start Windows. Open msinfo32 and confirm that BIOS Mode says UEFI and Secure Boot State says On.
Method 4
Fix Unsupported when BIOS Mode already says UEFI
1Open the firmware settings again and look for the Secure Boot or OS Type setting. Names differ by maker.
2Check that the Secure Boot keys are present. Choose the option that installs default keys if the firmware offers it.
3Enable TPM 2.0 in the firmware, because Windows 11 asks for it as well.
4Update the BIOS from your motherboard or PC maker if no Secure Boot option exists, then save and test with msinfo32.
Method 5
Install Windows in UEFI mode when MBR2GPT fails
1Back up your files to an external drive.
2Create Windows installation media on another PC.
3Set the firmware to UEFI mode and boot from the media.
4Install Windows on the disk and confirm Secure Boot State in msinfo32. The installer sets up the disk as GPT in UEFI mode.
Secure Boot State Unsupported in msinfo32 means Windows cannot use Secure Boot with the current boot setup, and Legacy BIOS mode on an MBR disk is the common cause. Convert the disk with mbr2gpt, switch the firmware to UEFI, enable Secure Boot and confirm that Secure Boot State reads On. If BIOS Mode already says UEFI, update the BIOS and check the Secure Boot keys.
Frequently asked questions
What does Secure Boot State Unsupported mean?
It means Windows cannot use Secure Boot with the way your PC booted. The common cause is Legacy BIOS mode on an MBR disk, because Secure Boot works only in UEFI mode.
How do I fix Secure Boot State Unsupported?
Check BIOS Mode in msinfo32. If it says Legacy, convert the system disk to GPT with mbr2gpt, switch the firmware to UEFI, disable CSM and enable Secure Boot. Then open msinfo32 again and confirm that Secure Boot State reads On.
What is the difference between Unsupported and Off?
Off means the firmware supports Secure Boot and it is disabled, so you enable it in the firmware settings. Unsupported means Windows cannot use it with the current boot mode, so you fix the boot mode first.
Will MBR2GPT delete my files?
Microsoft says mbr2gpt converts a system disk from MBR to GPT without deleting data. The tool cannot undo the conversion, so back up your files first.
Why is Secure Boot Unsupported when BIOS Mode says UEFI?
The firmware can lack a Secure Boot option, or the Secure Boot keys can be missing. Update the BIOS, open the Secure Boot or OS Type setting and choose the Windows UEFI option.
Do I need to reinstall Windows?
Not when mbr2gpt validation passes. Install Windows again in UEFI mode only when validation fails and the disk layout cannot convert.
