Secure Boot Not Working Properly FaceIT | Step-By-Step Fix

The “Secure Boot is not working properly” error on FACEIT usually happens because your PC’s BIOS says Secure Boot is “Enabled,” but Windows sees it as “Off” or “Not Active.”

This disconnect occurs when the Secure Boot Keys (cryptographic signatures) are missing or not loaded.

Here is the step-by-step fix, ranked from the most common solution to deeper troubleshooting.

1. The “Golden Fix” (Reset Factory Keys)

Even if your BIOS says Secure Boot is “Enabled,” it won’t work for FACEIT if the Factory Keys are not installed. This is the #1 cause of the error.

General Steps (Applies to most motherboards):

1. Enter your BIOS (usually press DEL or F2 during startup).

2. Find the Secure Boot menu (often under “Boot,” “Security,” or “Windows OS Configuration”).

3. Look for “Secure Boot Mode”. If it says “Standard”, switch it to “Custom”.

4. Once in Custom mode, look for an option that says “Restore Factory Keys”, “Install Default Secure Boot Keys”, or “Enroll Platform Key (PK)”.

5. Select Yes / OK.

6. (Optional) Switch “Secure Boot Mode” back to “Standard” if you prefer, but “Custom” with keys loaded usually works fine.

7. Save & Exit (F10).

Brand-Specific Instructions:

• Gigabyte: Go to Boot > Disable CSM Support first. Then go to Secure Boot. If “Mode” is Standard, change to Custom. Then click “Restore Factory Keys”. Press F10 to save.

• MSI: Go to Settings > Security > Secure Boot. Change “Secure Boot Mode” to Custom. Click “Enroll all Factory Default Keys” (or similar).

• ASUS: Go to Security or Boot > Secure Boot. Change “OS Type” to Windows UEFI Mode. If “Key Management” is visible, click it and select “Install Default Secure Boot Keys”.

• ASRock: Go to Security > Secure Boot. Change mode to Custom. Click “Install Default Secure Boot keys”.

Also Read : Aion 2 Unable to Connect to Login Server Fix

2. The “CSM” Conflict

FACEIT requires UEFI Mode. If your motherboard is running in “Legacy” or “CSM” (Compatibility Support Module) mode, Secure Boot will never activate properly.

1. In BIOS, find the Boot tab.

2. Look for “CSM Support” or “Legacy Boot”.

3. Set it to DISABLED.

4. Set “OS Type” to Windows UEFI.

5. Save & Exit.

   • Critical Warning: If your PC boots straight back into BIOS after this, your drive is formatted as MBR (old style) and needs to be converted to GPT (new style). Do not panic. Switch CSM back to “Enabled” to get back into Windows, then follow Step 3 below.

3. Converting Drive to GPT (If Step 2 Failed)

If disabling CSM stopped your PC from booting, you need to convert your drive from MBR to GPT. You can do this without losing data.

1. Boot into Windows (with CSM enabled).

2. Type cmd in the Windows search bar, right-click Command Prompt, and select Run as Administrator.

3. Type this command to check if conversion is possible: mbr2gpt /validate /allowFullOS

4. If it says “Validation completed successfully,” type this command to convert: mbr2gpt /convert /allowFullOS

5. Once it says “Conversion completed successfully,” restart your PC, enter BIOS, Disable CSM, and Enable Secure Boot.

4. Verify the Fix

Before opening FACEIT again, verify that Windows actually sees Secure Boot as active.

1. Press Win + R on your keyboard.

2. Type msinfo32 and hit Enter.

3. Look for “Secure Boot State”.

   • If it says “On”, you are fixed.

   • If it says “Off” (but BIOS says Enabled), repeat Step 1 (Reset Factory Keys).

   • If it says “Unsupported”, you are likely still in Legacy/CSM mode (repeat Step 2).