UEFI Secure Boot is a standard BIOS protection that restricts the ability to run USB media as a bootable disk. This security protocol can be found on computers with Windows 8 and newer. Its essence is to prevent the user from booting from the Windows 7 installer and below (or an operating system from another family).

This function can be useful for the corporate segment, as it prevents unauthorized booting of the computer from unauthorized media that may contain various malware and spyware.

For ordinary PC users, this feature is useless, on the contrary, in some cases it can even interfere, for example, if you want to install Linux together with Windows. Also, due to problems with the UEFI settings, an error message may appear while working in the operating system.

To find out if you have this protection enabled, it is not necessary to go to the BIOS and look for information about this, it is enough to take a few simple steps without leaving Windows:

Depending on the manufacturer of your motherboard, the process for disabling this feature may look different. Consider options for the most popular motherboard and computer manufacturers.

Method 1: For ASUS

Method 2: For HP

Method 3: For Toshiba and Lenovo

Here, after entering the BIOS, you need to select the section "Security"... There should be a parameter "Secure Boot", opposite which you want to set the value "Disable".

Method 4: For Acer

If everything was relatively simple with previous manufacturers, then the initially required parameter will not be available for making changes. To unlock it, you need to put a password on the BIOS. This can be done according to the following instructions:

Boot order, in translation, means a sequence or literally a boot order, if there are many boot options - from a hard disk, flash drive, network, CD / DVD drive, then you need to sort them somehow in order, and set the main one first, this will significantly reduce the turn-on time and boot the computer, because he does not have to go through all the boot options in search of the current one.

How to customize the boot order Boot order in BIOS

There are several options for settings, menu items can be named differently and located in different places, but there are only two fundamentally different options:

1. The Boot order menu lists specific devices that can be ordered in order
2. In the Boot order menu, the types of devices are indicated in order, and if there are more than one of them, then there is an additional menu item in which specific devices can be ordered in order.

The first option is more common and a little easier to configure, you need to find the menu with boot settings, usually it is called Boot or Startup, this page displays the boot settings of a computer or laptop, their list depends on the manufacturer, in the example Boot order is simply called Boot, but it may have a different name, go to it:

We see the Boot Priority Order menu and on the left there is an instruction on how to change the order, in general, use the up / down arrows to select the desired item and use the + and - keys to raise it in the list or release it accordingly:

After setting, we exit to the previous menu, in the overwhelming majority of BIOS the exit is Esc. In the example, there is also a Boot Order Lock item - it is needed in order to fix the boot order and it did not change when connecting other devices from which boot is possible, indirectly it also increases the security of your device - an attacker will not be able to connect a bootable USB flash drive and boot from it:

The second option is most often found on old computers, here in Boot Device Priority the types of devices are lined up according to the list - hard drives, flash drives, network, etc., and in the Hard Disk Drives item, which is not always nearby, you can set the boot priority already specific devices:

We configure, save the settings, reboot and check that everything works as it should. Below are a few more examples of where to look for the Boot Order setting, on very old computers this option is found:

We go to the Advanced BIOS Features menu, in the "Boot Order" rectangle - the first, second and, accordingly, the third boot device, from the drop-down menu you need to select the type, if there are several hard drives (flash drives are also often considered a hard drive) then in the very first paragraph - Hard Disk Boot Priority, you can specify their priority:

The "Boot Order" item can be hidden in an unexpected place:

How to customize Boot order in UEFI

Setting up Boot Order in UEFI does not differ much from that in BIOS, and is performed using almost the same algorithm.
We go into the UEFI BIOS, when turned on, a hint is usually displayed at the bottom of the screen about how to do this, for computers in 99% of cases it is F2 or DEL, for laptops there are more options Esc, F1, F2, F10, F11, F12 (sometimes they need to be pressed together with the Fn button) generally try. Everything is simple for me, you can press F2 or DEL:

I press and get into UEFI, the interface of all manufacturers is more or less standardized and built according to the same principle, right after entering UEFI you get to an information screen with general data about the computer and readings of the main parameters of temperatures, voltages, etc. Here you can immediately go to the Boot Priority menu and set everything up, but we will go the old fashioned way - we are looking for a way to switch to Advanced Mode, usually there is either a corresponding button (indicated by an arrow in the picture below), or there is a key below which you can use to switch to Advanced Mode in our case F7, press:

Here we select with up and down arrows or with the mouse - Advanced Mode

And we find ourselves in the extended menu, which vaguely resembles BIOS, only richer in graphical terms, here we go to the Boot section and then to Hard Drives BBS Priorities:

and set the boot priority by selecting the required hard disk from the drop-down menu opposite each Boot Option item:

After the Boot Order setup is completed, click on Exit at the top, select Save Changes & Reset to save the settings and restart the computer:

We reboot and check that the download went immediately from the specified device, without wasting time for polling the rest.

In general, as you can see, there is no difficulty in setting up the Boot Order, and with the help of this article you can easily fix boot problems on your computer or laptop, if something does not work out - write in the comments, preferably right from the photo, I will tell you where to reap ...

Summary

Advice: After Secure Boot is disabled and Legacy Mode is enabled on computers with a hard drive of less than 2 terabytes, the UEFI partition can be completely removed at will (for example, if you no longer need to use Windows 8). This can be done with an application like Gparted).

Compatibility Mode Legacy Mode is an option that usually allows you to install and run operating systems that do not support UEFI. This applies to Windows 7 and earlier, as well as many smaller Linux distributions. By disabling UEFI, the computer will start directly from the BIOS.

Although Manjaro supports UEFI out of the box, if Compatibility Mode has not been enabled, the friendly graphical boot screen provided in the installation instructions will not appear. Instead, a clumsy menu will appear. This menu is for UEFI.

Step 1: Access BIOS settings

Advice: There is no need to follow complicated and confusing instructions developed by Windows 8 to access your BIOS or UEFI. You can also click on the images below to enlarge them..

UEFI is an add-on to your computer's BIOS. Thus, you need to go to BIOS settings in order to disable the secure boot option in UEFI. To do this, press one of the function keys (F) - usually - immediately after turning on or rebooting the system. Key usually provides access directly to the UEFI system itself.

Once you get to the UEFI menu, an image like this will appear on the screen.

However, as shown, it is still possible from here to access the BIOS, in this case by pressing the key .

When going to BIOS settings, a window like this will open.

Step 2: Access Boot Settings

Once in BIOS settings, you will have the option with the arrow keys<влево>and<вправо>navigate tabs (usually Main, Security, System Configuration and Exit). Arrow keys can be used<вверх>or<вниз>to highlight and select the settings placed under each tab.

1. Navigate using the arrows<влево> / <вправо>in the tab System Configuration.

2. A line will open Boot options... Highlight it with arrows<вверх> / <вниз>.

3. With the highlight, press<ввод>to get to its settings.

Step 3: Activating Legacy Mode

Attention: Again, if your hard drive is larger than 2TB / 2000GB, you should not enable Compatibility Mode. If compatibility mode is already disabled, in this case your BIOS may try to automatically enable it, along the way by enabling Secure Boot.

While in Boot Options, you will see the settings Legacy Support / Mode.

1. Highlight an option Legacy Support / Mode using arrows<вверх> / <вниз>on keyboard.

2. With the highlight, press<ввод>to enter the menu.

3. As you can see in the photo, a new menu will appear where you can select "Disabled" or "Enabled". Highlight Enabled clicking on the arrows<вверх> / <вниз>then press<ввод>.

Many of today's PC hardware and software brands are looking to support UEFI with their products. This software solution is intended to become an alternative to the input-output system - BIOS, which is familiar to many computer enthusiasts. What is the specificity of the software in question? What nuances are typical for using its capabilities?

What is UEFI

Let's take a look at the basics of UEFI. What is this development? UEFI is a special interface that is installed between the OS installed on the computer and the software responsible for the low-level functions of the hardware components of the PC.

Sometimes referred to as the UEFI BIOS. On the one hand, there is some mistake in this name, since BIOS is a software solution that functions according to different principles. UEFI is developed by Intel, BIOS is software that exists in several versions supported by different brands.

On the other hand, the purpose of BIOS and UEFI is practically the same. BIOS UEFI - formally, not quite a correct phrase, but not contradicting the logic of software and hardware algorithms for PC control.

Differences between BIOS and UEFI

But the first thing we will pay attention to is finding the differences between the "clean" BIOS and the "classic" UEFI. The fact is that the software solution we are considering is positioned as a more perfect alternative to BIOS. Many manufacturers of modern motherboards for computers try to provide support for the corresponding type of software from Intel. Thus, we can trace the differences between UEFI and BIOS by examining, first of all, the shortcomings of the second system.

The first drawback of BIOS is that this system cannot provide full use of disk space on very large hard drives - those that exceed 2 terabytes in volume. Indeed, even a few years ago, such values ​​characterizing the capacity of hard drives seemed fantastic, and therefore, PC manufacturers did not particularly focus on the corresponding disadvantage of BIOS. But today you will not surprise anyone with a "hard drive" of more than 2TB. PC makers began to feel that it was time to switch to UEFI, that it was an objective necessity, based on modern technological trends.

Another feature of the BIOS is that it supports a limited number of primary partitions on the hard drive. In turn, UEFI works with 128. In the structure of the new software solution from Intel, a new partition table is implemented - GPT, which, in fact, allows you to use the noted technological advantage of UEFI.

With all the differences noted between the new software environment developed by Intel and the traditional BIOS input / output system, the main functions of the respective solutions are generally the same. Apart from the groundbreaking security algorithm in UEFI, there are not very many actual differences between systems. Some experts believe that the new software platform allows operating systems to boot faster, while others point out that this is only relevant for Windows 8. Let's take a closer look at the security system implemented in UEFI.

New safety technology

Where the new UEFI BIOS is ahead is the level of security. The fact is that there are viruses that are capable of introducing themselves into a microcircuit where BIOS algorithms are written. After that, it becomes possible to boot the OS with extended user rights, which opens up the widest opportunities for a hacker. In turn, the new solution from Intel implements secure boot - UEFI provides a corresponding algorithm called Secure Boot.

It is based on the use of special keys, which must be certified by the largest brands in the IT market. However, as experts note, there are not too many such companies in practice. In particular, with regard to the support of the corresponding option by the manufacturers of operating systems, it is fully provided only by Microsoft and only in Windows 8. There is also information that compatibility with the new security system is implemented in some Linux distributions.

UEFI Benefits

It is obvious that the noted disadvantages of BIOS are, at the same time, advantages of the new software solution. At the same time, UEFI is characterized by a number of other major advantages. Let's consider them.

First of all, it is a convenient, intuitive and functional interface. As a rule, it implements mouse support - which is not typical for BIOS. Also, many versions of UEFI (BIOS, this option is also not peculiar) provide a Russified interface.

The algorithms provided by the new software solution make it possible to boot operating systems in most cases significantly faster than when using BIOS. For example, Windows 8 installed on a UEFI-enabled computer can boot - assuming adequate processor performance and other key hardware components - in literally 10 seconds.

Among other significant advantages of the software solution under consideration, which are highlighted by many IT specialists, is a simpler update algorithm compared to the BIOS mechanisms. Another useful UEFI option is the presence of its own in this system, which can be used if several operating systems are installed on the PC.

So, we understand the technological advantages of the new PC control software interface developed by Intel. The largest brands-manufacturers of hardware components for PCs ensure the compatibility of the corresponding hardware with UEFI - Gigabyte, ASUS, SONY. The transition to a new system, as many IT experts believe, can turn into a stable technology trend. The opportunities that Intel, the developer of UEFI, offers to the global IT community may well be attractive to leading manufacturers of software and hardware components for PCs. Moreover, the corresponding UEFI technology options are supported by the largest brand in the operating system market.

Secure Boot Facts

Let's take a closer look at the benefits of UEFI-supported Secure Boot technology. What is this concept? secure computer boot, which is designed to protect the system, as we noted above, from the penetration of viruses. True, for its full use, the keys used by this protocol must be certified. At the moment, very few software brands meet this criterion. Among them is Microsoft, which has implemented support for the corresponding algorithms in Windows 8.

It can be noted that this circumstance in some cases can complicate the installation on a PC running UEFI, other operating systems. If Windows is to be installed - UEFI may still show some loyalty to this - but on condition that the OS version is as close as possible to the one installed by the computer manufacturer. It can also be noted that some Linux distributions are also compatible with the Secure Boot option.

But even if, by virtue of the function in question, loading a new OS is prohibited by the system, the structure of the UEFI interface provides for the ability to disable Secure Boot algorithms. It is clear that in this case the OS boot will not be so secure, however, the corresponding option can be activated again at any time and start working with Windows 8.

Which operating systems are fully UEFI compatible?

In very rare cases, individual IT specialists get an installation on a PC with support for Secure Boot of alternative operating systems. For example, it is known that it is theoretically possible to install Windows 7 on some notebooks with UEFI BIOS support. ASUS is among the manufacturers of such PCs. But this is rather an exception to the rule. In general, it is not very likely that even other editions of Windows 8 will be successfully installed. However, as we noted above, some Linux distributions are also compatible with UEFI options.

UEFI setup features

Let's consider some of the nuances of setting up the considered software solution from Intel. An interesting option is BIOS emulation using UEFI. What is this opportunity? Indeed, in some versions of UEFI, algorithms are implemented according to which PC control is organized in accordance with the mechanisms that use the input-output system, which is the historical predecessor of UEFI.

Depending on the specific PC, this mode may be called differently. Most often it is Legacy or Launch CSM. At the same time, there are no difficulties with how to install UEFI in standard boot mode.

Nuances of access to UEFI

Another noteworthy fact that is useful to note is that there are a large number of UEFI versions. They can vary significantly on PCs from different brands. At the same time, the level of availability of certain functions on different computers can also vary significantly. It often happens, for example, that when the computer boots up, a menu is not displayed with which you can enter the UEFI settings. But in this case, Windows, as a rule, provides an alternative option to load the necessary options. You need to go to the "Options" and activate the option "Special boot options".

After that, you can reboot - and several options for loading the PC will appear on the screen. There is an alternative way to provide access to the appropriate UEFI options. It works on many PCs. You need to press Esc at the very beginning of the computer boot. After that, the menu in question should open.

Specificity of work in different modes

It should be noted that when changing the normal mode of UEFI to Legacy, preferably using the necessary programs that require disabling Secure Boot or working during BIOS emulation, re-enable the UEFI interface with all the appropriate options as soon as possible. Otherwise, Windows 8, as noted by some IT professionals, may not start. However, many PCs do not have this problem. Some manufacturing brands are implementing algorithms into the PC control structure that enable UEFI mode automatically. In some PC models, a hybrid mode is implemented, in which the UEFI system boots from any media, and, if necessary, BIOS modulation can be started. Differences in UEFI versions may also suggest that disabling Secure Boot in the native mode of an Intel software solution is not possible. To do this, you will have to activate the BIOS emulation function anyway.

UEFI and bootable USB sticks

In some cases, users need to boot the operating system from a USB flash drive. The main difficulty is that the UEFI bootable USB flash drive, which has a format other than FAT32, is not recognized. But this problem can be successfully resolved. How?

So, by default, bootable USB drives for Windows are formatted into which UEFI does not recognize. Therefore, the main challenge is to ensure that the corresponding hardware component is formatted in the more versatile file system - FAT32. The most interesting thing is that it is considered outdated by many IT specialists. But using the example of one of the most modern software solutions, which is, of course, UEFI, we can trace the relevance of the corresponding standard.

USB flash drive for booting in UEFI mode: components

What do we need in order for a bootable UEFI flash drive to be recognized without problems? First of all, it is, in fact, a USB drive itself. It is desirable that its capacity is at least 4 GB. It is also desirable that no valuable files be placed on it, since we have to completely format the USB flash drive. The next component we need is the Windows OS distribution kit. Let it be a 64-bit version of Windows 7. Another feature of UEFI, which should be mentioned - this system does not support 32-bit OS from Microsoft.

Preparing a flash drive

If we have the marked components, then we can start working. First, insert the USB flash drive. Then - open the command line in the Windows interface. It is necessary, in this case, that the user has administrator rights. Through you need to run the DISKPART program - just by entering this word. After that, you must enter the list disk command, which will display a list of disks present in the system. You need to find a USB stick in it. If it is in the list under number 2, then you need to enter the command seleck disk 2.

Formatting a flash drive

Next, you need to format the media. To do this, enter the clean command. After that, you need to create a primary partition on the disk. This can be done using the create partition primary command. After that, the created section should be made active. To do this, enter the active command. After that, you can display a list of sections. To do this, enter list volume into the command line. We find the section that we created. If it is indicated at number 3, then we enter the command select volume 3. After that, you need to format it in the FAT32 system. To do this, enter the command format fs = fat32. The basic bootable media is thus ready. But that's not all. You must assign a drive letter to the USB flash drive. This can be done using the assign command. After that, enter exit and exit the command line.

Writing a distribution kit to a USB flash drive

After all the above steps, you need to copy the Windows 7 distribution to a USB flash drive. This can also be done using the command line. How? There is a special command for this - xcopy. You need to enter it, then - specify the address of the disk with the distribution kit, insert the * symbol, specify the letter corresponding to the USB flash drive intended for loading into UEFI, and then enter the command with / s / e. Then you need to go through the command line to the USB flash drive. There you need to get into the efi \ microsoft \ boot directory. It needs to be copied to the efi \ boot folder. After that, you need to copy the file called bootmgfw.efi to the efi \ boot folder, and then rename it to the bootx64.efi file.

The work with the flash drive is completed. UEFI disk with FAT32 file system, in which we can just recognize without problems. Accordingly, from it you can also install Windows 7 on a PC. Of course, provided that the Secure Boot algorithm is disabled in the UEFI options, which prohibits the installation of OS other than Windows 8 on the computer.

How do I install Windows in Legacy or UEFI mode?

While the installation process itself does not pose any particular difficulties for the trained user, the process of preparing the boot device and choosing the installation modes can be questionable. At least in terms of understanding the difference between installation modes for different types of tables:. Let's reveal some details of the process of how to properly install Windows. The article will be divided according to the following principle:

If you are not interested in theory, go straight to the installation.

The UEFI software is launched, which supports the recognition of a list of "valid" boot volumes, known to some nosy users as EFI Service Partitions.

He doesn't care about devices, UEFI is interested in “special” partitions with a workable GPT table. GPT does not contain a boot loader like the MBR does. All the work is done by dedicated EFI drivers. And, if the partition is found, the system immediately starts loading itself. If not, UEFI can switch to the Legacy method, which changes the boot principle to what you are already familiar with (see Installing Windows in UEFI Mode). If Legacy still fails, we are again faced with

Now that the principles of loading Windows in both modes have been briefly examined, let's move on to a direct comparison.

Performance

Legacy BIOS is controlled exclusively by Read Only Memory, which is flashed into the CMOS chip and is an unchangeable part of the bundle software. Are you adding or changing any components on your computer? In some cases, the computer simply will not start due to the arising incompatibility between the BIOS software and the updated component. Thus, it becomes necessary to flash the CMOS chip (and not only after replacing such an important component as a processor, for example). This, however, is already a "language" problem for the Legacy variant (see below). In addition, the difference between UEFI and Legace should be considered precisely in terms of the difference between the two types of tables: MBR and GPT.

UEFI software partially solved this problem by introducing drivers into the boot process, which are now responsible for the correct launch of the OS instead of ROM. Besides, the drivers do not have what the BIOS has always suffered from - memory limitation. This partly also solves the much more extended compatibility with the "hardware" of the computer. But further - it is better: since these are drivers, it means that they are written uniquely (namely, the “universality” of the BIOS sometimes plays a bad joke with users). In the end, such drivers are easily written and installed from a regular disk / flash drive, just like the usual drivers for other devices. What's the bottom line? In Legacy mode, the software flashed into the BIOS “rules” the load within the established (and maybe very, very long time ago) norms. As a result, the system boots up as the BIOS needs. In UEFI, the boot process is more adapted to a specific assembly and system: CMOS listens to the peculiarities of the OS, the chances of system boot and stability are much greater.

Download speed

Despite the seeming complexity of UEFI driver loading mode compared to a strict BIOS program, booting from UEFI it is much faster on modern processors. At the same time, the advantages of UEFI would not be noticeable on old-style chipsets with lower performance and cache sizes. But no one will know about this anymore: let me remind you that the technology became widespread a dozen years ago, and on old support boards UEFI does not exist.

C vs. Assembler

Here everything is a little more complicated precisely for the end user, but in the end, again, everything depends on the advantage. UEFI... As a result, this item absorbs both of the previous ones. Written in C, EFI is about friendliness and adaptability not only for the hardware vendor's software author. Unlike the sometimes sprawling lines of assembler code for Legacy. Legacy-type of programs (i.e. inherited type of software) has always been limited by the fact that updating the program is impossible without updating the hardware.

What will be the carrier of the installation files?

First, decide on the media from which you will install Windows. I will not bend you in any direction, all the options have pros and cons. For myself, I have learned forever that:

• the optical disc in the drive is always safe (if properly stored: do not leave in the sun, do not wash with solvent or scratch); however, the drives do not always work for all
• the flash drive is compact and mobile; but the reliability of the media is questioned: a little bit wrong "pulled" or inserted into the port - and in front of you is the file system RAW with unreadable files, which now also need to be restored. But, given the general availability and the increasing applicability of flash drives as universal devices, I will have it as a carrier.

I don't see any sense in developing this topic in more detail, and therefore we are proceeding with the installation.

Does my motherboard support UEFI?

The latest versions of motherboards do just that (until 2012, UEFI did not exist). However, the wording "latest versions", you see, is vague. The BIOS / UEFI itself will tell you exactly when you start the computer and press a key Delete(or in the area of ​​F-keys). However, you can find out about this directly from the Windows installed on the disk. The best way to find this out is to use a benchmark program (like HWiNFO of the corresponding Windows version) and check the UEFI support in part Motherboard left:

UEFI support is

no UEFI support

And do not be confused by the mere presence of the folder. EFI by the address:

C: \ Windows \ Boot

All recent versions of Windows have it. So clarify the issue right away so that when you try to install Windows in UEFI mode, you are not met with discouragement (see paragraph with installing Windows in UEFI mode):

Learn more about how to identify support for Windows boot modes in the articles:

Does the board support UEFI mode?

How do I install Windows in UEFI mode?

Even a child can install Windows in any of these modes at the time of writing, the process itself is extremely simplified. We only need:

• the image of the required version of Windows downloaded according to the instructions in the article. I used;
• a flash drive with a larger volume (from 4 GB; recommend from 8 GB)
• program Rufus.

Further. Before proceeding with the preparation in this way, make sure that the version of the motherboard supports UEFI mode at all. If everything is in order, and you are sure of the chosen option, we continue. For further work, close background programs and prepare a USB flash drive to accept installation files from the image. This can be done by the utility itself. Rufus... So that…

• Launch Rufus and set the settings for the photo. I've circled the important points in red:

• We agree with the warnings and proceed by clicking on the button Start.

• We are waiting for the end of the installation of Windows on the USB flash drive. The installation speed is determined by the capabilities of the computer and the type of USB port and the parameters of the flash drive itself. After the end, you can test the performance or "make money".

For the installation of Windows itself, you must either set or, after turning on the computer / laptop, “catch” the boot device selection menu ( Boot Pop Up Menu). The latter appears in different ways on different motherboards:

• Phoenix BIOS - F5
• AMI BIOS - F7
• American Megatrends - F8

Also there are keys Tab, less often - others in (each manufacturer may have its own, Lenovo, for example, F12). Next, just follow the advice of the system installation manager. Who is lost, refer to the section.

Cons of the option

Even a carrier created by the wave in an official way will probably stumble upon a frozen screen with the inscription

However, some of the manipulations in the BIOS will help correct the situation with installing Windows from the USB flash drive we created in UEFI mode. So, the ideal option would be one that includes mutual support (UEFI and Legacy):

How do I install Windows in Legacy mode?

The conditions for creating a flash drive are the same as in the previous version. Only now the window Rufus before writing to a USB flash drive, in some settings it looks like this:

A more detailed (although the process is simple) description - in the content of the article. There, using the example of a slightly outdated version of the utility, everything is arranged on the shelves. The process of choosing a ready-made flash drive when installing Windows on a computer is also similar to that from the previous paragraph:

• choosing a flash drive as a boot device from BIOS or Boot Pop Up Menu
• selection / creation / partitioning of a disk as needed
• installation of the system and drivers for devices