How to remove the ‘SecureBoot isn’t configured correctly’ watermark on Windows 8.1

For those who were one of the lucky ones to successfully download and install the Windows 8.1 update while numerous users are experiencing difficulties, you are likely to be enjoying all the new consumer requested features that the update brings to Windows 8. However, there is one annoyance that has poped up regarding Secure Boot, leaving an annoying watermark on the desktop.

Some Windows 8.1 users are reporting that they have a watermark stating “SecureBoot isn’t configured correctly.” Here is why it appears and how you can fix it, for now at least.

“Secure Boot helps increase the security of Windows 8.1 and Windows RT 8.1 PCs by stopping unauthorized software from running. If you see a “SecureBoot isn’t configured correctly” message in the lower-right corner of the desktop, it means that Secure Boot has either been turned off or hasn’t been set up correctly on your PC,” Microsoft explains.

If you need to turn on Secure Boot for your device, if it is capable, head over to your BIOS menu and enable it. The Secure Boot feature, for the most part, is available on UEFI-based computers.

Microsoft also explains that if you turned off Secure Boot and installed your own drivers, you will likely need to reset your Windows installation before you can turn Secure Boot on again. Simply Reset or Refresh Windows 8.1 via the System Settings app. 

Apparently the only solution to disable the watermark is to actually enable Secure Boot in the BIOS. At the moment, there seems to be no workaround to remove the watermark if the Secure Boot option is disabled in the BIOS.

Have you discovered another method that works?

Update: Microsoft has rolled out a hotfix that removes the watermark.

  • dizzy

    So how do I get rid of it if I DON’T want SecureBoot turned on?

    • Anon

      Just go back to your BIOS menu and select disable I guess.

      • Balearic

        Not such an Option in many BIOS dude. My ASUS has nothing of that sort.

        • IBR

          open run ( type regedit )
          go to HKEY_LOCAL_MACHINE/software/Microsoft/windows/currentversion/policies/system/
          open EnableLUA put 0 instead of 1 in Value Data
          restart your PC .

          • tweets

            the registry setting removes the watermark but then you can’t enter the store. i tried it , watermark is gone, but you need UAC to enter the store. this isn’t a good fix.

          • Art Zainio

            My Asus N76VB i updated my Geforce drivers. After that i went to the BIOS (boot, press F2) and then secure point i changed secure boot enabled Boot,. After that watermark was gone.

    • microlith

      Good question. I turned it off because it’s a pain in my ass and does less for my system security than NoScript. It should be an option like the rest of the security center options where you can tell it to stop harassing you for turning off various features.

      In the mean time I continue using noscript and adblock and find myself largely immune to security holes.

  • Lirodon

    You’re just supporting Microsoft’s position on this “feature”

  • Jeremy

    Microsoft is going to get chewed out by the community if they already haven’t, many people install graphic cards on their computers that only run in legacy mode/ dont support OS lockdown AKA “secure boot”. Nice one Microsoft.

  • Khang Huynh

    Wow, pretty much a non-post. How the hell we can access BIOS on RT devices? Sad but I’ll have to wait until Microsoft has a fix for this.

    • microlith

      It happens on RT? That’s hilarious, considering you can’t turn SecureBoot off on those devices.

  • Guguking65

    Tried to enable the secure boot over the BIOS manu, but water mark still showing on my screen. What can we do to actually fix it??

    • FateStayNight

      I did a fresh install of 8.1 last sept. After enabling secureboot, the watermark was still there. The next day, the watermark was gone, so I guess you just have ta wait. ;)

  • Emily

    Secure boot wasn’t letting me do anything to it. I disabled legacy then it gave me a coupleof other options and finally let me enable secure boot. No more water mark.

  • mharky

    may laptop is toshiba sattellite P845t how can i acces the BIOS menu?tnx

  • robertwade

    Unfortunately, I still have a couple of legacy programs that simply won’t run if the UEFI features are enabled. Eventually, I expect those programs to be updated or, even better, become Metro apps.

  • MickP

    My printer has started printing in miniature fonts

  • Fraggy

    What if your EFI hasn’t the Secure Boot option? ;)

  • Jekyllac

    Now THIS is a glitch. Obamacare is a poop tornado.

    • Fuji Condor

      It’s a Poopnado.

    • James P Jr Bettes

      More like a poopicane. hurricanes’ spawn tornadoes, so poopicane fits better, because it would spawn poopnadoes. LOL

  • Fuji Condor

    Unfortunately I only have 1 option: turn my UEFI Boot on or off. I have no option to enable secure boot.

  • Natalia

    I have a solution for those having a hard time enabling Secure Boot. This worked on my ASUS desktop. If you have entered BIOS and found the Boot menu, and even located the Secure Boot option, but have realized that the “Secure Boot State” option is “grayed” out (i.e. unselectable), beneath that option there should be an option “Secure Boot Mode”. Change that to “Custom”. This opens up the Key Management screen. Enable the option that says “Load Secure Boot Keys” (should be first on the list). Save all your changes and reboot the system. It worked for me!

  • Al

    I have an Acer Aspire V-3 and turning on secure boot or resetting to factory did nothing. I went to the Acer driver download site and upgraded the BIOS from 2.22 to 2.23. That worked for me. Watermark gone.

  • Coty

    This advice worked for me. Gave me a chance to poke around my computer’s BIOS while I was at it. There’s some really scarily dangerous (to yourself) stuff in there.

    Aside from being cosmetically unappealing though, the Secure Boot watermark did not get in the way of anything from the point of view of a relatively medium to low level power user like me. One could even use it to delude others that your computer has been tweaked to give it stealth capabilities that you just can’t discuss . . .

  • m4570d0n

    Compared with this non-answer, here’s an actual answer for those who want to remove the watermark without having to enable Secure Boot.
    See post #4 here:

    You need to use Resource Hacker or similar program and edit C:WindowsSystem32en-USshell32.dll.mui
    In that file you have to edit StringTable 20701033 and replace the string about Secure Boot not being configured correctly with an empty string (like this: ” “).

    link to Resource Hacker:

  • James P Jr Bettes

    I have a HP pavilion G6 laptop with 8.1 and a windows 7 partition. After installing the 8.1 upgrade I started getting this error. I had to enable the “legacy” mode to run the 7 partition, but if I disable the legacy setting, I can boot 8.1 without the message, but then win7 will not boot. So, I can either live with the watermark, and be able to boot either os, or I can disable legacy mode and make the watermark go away, but loose the ability to boot into 7.

  • garry

    Microsoft idots at work once again. Yes I know secureboot is disabled, it’s the only way I can get the PC to boot into Xubuntu from a USB flash drive. How about Microsoft stop being a set of d!cks and sort it out.

    • namern


  • Steven Mason

    I’ve figured out a solution. It works on my ASUS desktop. I can’t guarantee solutions on other platforms, but in principle, it ought to work. Before I got into product launches, strategy and branding, I used to be an engineer ;)

    Here’s the easy part (you can find this or something similar elsewhere on the web):

    – Hit the R and search in the Settings for “Advanced Startup” and select “Change Advanced Startup Options”

    – Click “Restart Now” in Advanced Startup (this won’t actually restart — thanks MSFT!)

    – Click on Troubleshoot

    – Click on Advanced Options

    – Click on EUFI Firmware

    – Click on Restart

    Here’s the hard part. Everyone tells you to find the “Security” menu and to select the “Secure Boot” option. Unfortunately, you may not have a “Security menu” and/or you may not see a “Secure Boot” option. Here’s what to actually do:

    – Instead, you will have a number of different menus (usually at the top) from which to select. On the ASUS, you want to select the BOOT menu (perhaps HP has another name – just keep looking)

    – Now, you will finally have found the Holy Grail – something that says Secure Boot. It will tell you if it’s enabled and/or if the keys have been loaded or unloaded. If the keys have been unloaded, you can fix the problem.

    – Next, look on the same page for a menu or choice that offers “Standard” or “Custom” installation of SecureBoot. You’d think Standard would work, right? Wrong. Choose Custom.

    – Once, you’ve done that, you’ll be asked if you want to load the keys. Select that option and they’ll be loaded.

    – Now, Save and Exit (on the ASUS, it’s the foreboding “Save and Reset” – Reset!! – sounds scary, but it’s bad semantics). So choose your Save and Exist or Save and Reset.

    – Your PC will reboot and the problem is now solved.

    Steven (

    • David

      Thanks, It worked great.

  • sf

    I had no trouble updating my very recent HP Envy DV7 to WIn 8.1 other than it taking 3 hrs to complete. I had hoped that the message indicated an actual problem as after updating the laptop went from booting really quickly to sitting with a black screen for a few minutes while it does something mysterious in the background.

    While I have been a long time user and generally a fan of Windows, Win 8.1 seems to take a flawed concept that at least performed and patches it into a slightly less flawed concept that performs poorly. My machine is a quad core i7 with separate GPU and 2 GB of dedicated video memory, so there really is no excuse for brewing coffee while waiting for a boot.

    Anybody figure out how to get task manager to actually kill a run away game? This is the only version of Windows I have ever used where Task Manager opens but can’t be brought to the foreground to kill a task. The lack of a working task manager is one of the reasons I hate the long boot time as the only way to kill the game is to power down with the power switch.