Windows 8.1 ‘SecureBoot isn’t configured correctly’ watermark finally removed via hotfix

When Microsoft rolled out Windows 8.1 on October 17th, there was one annoyance that has popped up regarding Secure Boot, leaving an annoying watermark on the desktop. Many Windows 8.1 users were reporting that they have a watermark stating “SecureBoot isn’t configured correctly.” Today, Microsoft has rolled out a fix (KB2902864).

“Secure Boot helps increase the security of Windows 8.1 and Windows RT 8.1 PCs by stopping unauthorized software from running. If you see a “SecureBoot isn’t configured correctly” message in the lower-right corner of the desktop, it means that Secure Boot has either been turned off or hasn’t been set up correctly on your PC,” Microsoft explains.

Expanding on that, Microsoft never came up with SecureBoot. Microsoft is simply the first to widely implement it via Windows 8. SecureBoot is part of the new UEFI spec, which is a new replacement for the old BIOS that we have come to know and love over the years. SecureBoot simply adds extra steps when it comes to getting a non-Windows operating system to dual boot alongside Windows 8 or 8.1, preventing the loading of drivers or operating system loaders that are not digitally signed. This can be one of the reasons why many people want this SecureBoot feature turned off.

Unfortunately, those who did not want to enable SecureBoot were stuck seeing the watermark. Microsoft today rolled out a hotfix that removes this watermark for those of you on Windows 8.1 and Windows Server 2012 R2. 

We’ve added the download links to the update below, available in 32bit and 64bit for Windows 8.1 and a download for Windows Server 2012 R2 64bit. Let us know if you were able to remove the watermark successfully after installing this update.

  • Ramesh Kumar

    I don’t think so it makes sense… you should enable/turn on SecureBoot if you install Windows [8] in EFI mode.

    • Althorion

      And why should I do this? Especially if Windows isn’t my only OS?

      • malcwake

        Well done, thanks for the hotfix worked like a charm, cleared finally, Malc.

    • Lirodon

      Microsoft supporter.

  • Tulip

    It makes a lot of sense. I do not have SecureBoot in my bios and there is no update for my bios.
    It makes very much sense the watermark has been driving me crazy

  • jochtr

    I fixed it prior to this hotfix. It was three steps, in this order: 1) EVGA sent me a firmware update to get my video card up to UEFI spec. 2) Got a new BIOS version for my motherboard from the Manufacturer. 3) Enabled SecureBoot in BIOS.

    Without touching Windows 8.1 at all, this removed the watermark.

  • dypsis

    After installing this update and rebooting, my computer became non-responsive and didn’t fully load.
    My left or right mouse clicks wouldn’t do anything. My computer was rendered useless.
    I am in the process of trying to fix it now.


  • David Cardona

    Good news for me, no errors worked just fine and very fast thank you.

  • Juan Carlos Pachón Espitia

    Thanks a lot, it works!

  • Juan Carlos Pachón Espitia

    Use the DOWNLOAD LINK:
    Server 2012 R2 64bit

  • Flordeliza Flynn

    My computer has been running horribly slow and unreliably since installing this update, but I cannot find out how to uninstall it.

    I have checked in all the usual places, including Windows Updates, but it isn’t anywhere to be found. Does anyone know how to uninstall it? Things are going from bad to worse with Windows 8.1 for me.

  • SteVader

    Finally! Thanks for the link to the hotfix, this has been driving me nuts since the 8.1 upgrade (no SecureBoot available on my machine).

  • Erik Moreau

    tested, works fine!

  • Roger

    Like other people, I had the “SecureBoot isn’t configured properly” message on a multi-boot configured Gigabyte GA-H87-HD3 motherboard (BIOS F5).

    I asked Gigabyte:

    The system is working flawlessly with Windows 7 SP1 x64.

    I have installed Windows 8.1 Enterprise x64 and Windows 8.1 Pro x64 on two further hard drives/partitions and now have a watermark “SecureBoot isn’t configured correctly Build 9600” when I boot from either of these 8.1 drives.

    I can find no reference to SecureBoot in the Gigabyte motherboard manual or support website.

    I heard an off-the-cuff comment from a Microsoft evangelist that suggested that SecureBoot is not supported in a multi-boot environment. In which case, I just need to get rid of the watermark.

    Gigabyte Global Technical Service answered:

    Please go to the BIOS Setup. Enter the BIOS Feature menu and scroll down to Secure Boot. Set to enable.

    Then the Secure Boot Mode option will become visible. Set to custom.

    Then the “Key Management” sub-menu will become visible.

    Press enter into key management and set “Default Key Provisioning” to enable.

    Save and exit.

    Boot into Windows 8.1 and it will no longer show the “Windows 8.1 secure boot isn’t configured correctly” watermark.


    This fix works perfectly. I was having problems because I had set Secure Boot option to “Disabled” and so could not see the other BIOS menu options.