How to Boot Windows 11 from USB: BIOS Settings & Boot Menu Guide

A computer that refuses to boot from a USB drive is one of the most common roadblocks people hit when trying to install or repair Windows. The installer is sitting right there on the flash drive, the PC powers on normally, and yet it skips straight past the drive and loads the existing operating system as if the USB were never plugged in. Nine times out of ten, this has nothing to do with a bad drive or a corrupted ISO. It comes down to firmware settings that were never configured to look at USB media first, or that block it entirely for security reasons.

This guide walks through everything involved in getting Windows 11 to boot from usb reliably, starting with how to reach the firmware setup screen on different hardware brands, moving through the settings that actually control boot behavior, and finishing with the troubleshooting steps that resolve the situations where nothing seems to work. By the end, you will understand not just which keys to press, but why each setting exists and how it fits into the broader UEFI and Secure Boot system that every modern Windows 11 PC relies on.

Understanding BIOS, UEFI, and Why Boot Settings Matter

Before touching any settings, it helps to understand what you are actually working with. The firmware is the very first software that runs the moment you press the power button, well before Windows itself loads. It initializes the hardware, runs a power-on self-test, and then decides which storage device to hand control over to. Older systems used a firmware standard called BIOS, short for Basic Input/Output System, while virtually every PC sold in the last decade, and every PC certified for Windows 11, uses UEFI, the Unified Extensible Firmware Interface, instead.

People still say “enter the bios” out of habit, and manufacturers themselves often keep the term in menus and documentation, but on a modern machine you are really opening a windows 11 uefi setup screen. The naming difference matters less than the practical one: UEFI boots faster, supports drives larger than 2TB without a special workaround, and includes Secure Boot, a verification system that checks digital signatures on everything involved in starting the computer before allowing it to proceed. None of this changes how you use the settings day to day, but it explains why some of the toggles discussed later in this guide, particularly around secure boot and legacy boot, exist at all.

It also explains a subtle but important point about windows 11 boot configuration: firmware settings and Windows settings are two entirely separate layers, stored in different places and controlled through different interfaces. Changing something inside Windows, such as which drive holds the operating system or how fast the desktop appears, never touches the firmware. Likewise, firmware changes such as boot order have no awareness of what is installed on any given drive; they simply pass control to whatever storage device sits first in the sequence, regardless of what that device actually contains. Keeping this separation in mind helps explain why a Windows-side setting can never fix a firmware-side boot problem, and vice versa, which is a common point of confusion during troubleshooting sessions with less experienced users.

The reason boot configuration trips people up so often is that Windows 11, once installed, is not the only thing your firmware knows how to load. A single PC might have a Windows Boot Manager entry on the internal drive, a recovery partition, and, when you plug one in, a USB installer, all competing for the same slot. Firmware settings determine which of these gets tried first, and in what order, which is exactly what this guide sets out to control.

How to Enter BIOS or UEFI Setup by Manufacturer

Every brand, and sometimes every model line within a brand, assigns a different key to interrupt the normal startup sequence and open the firmware menu. The trick is timing: you need to press the correct windows 11 bios key repeatedly, starting the instant the screen lights up, before Windows begins loading. Waiting for the manufacturer logo to fully appear is often already too late on a fast, solid-state-drive-equipped PC, since modern startup times can be under two seconds.

If you built your own desktop, do not rely on the case brand or the graphics card manufacturer to guess the correct key. The setting lives on the motherboard, so check whether it uses an Asus, MSI, Gigabyte, or ASRock board and reference that row instead. When in doubt, most systems display a brief on-screen prompt during the first second of startup, such as “Press DEL to enter setup,” though this message often flashes by too quickly to read on a fast-booting SSD-based PC, which is exactly why having the correct key memorized in advance saves considerable frustration.

For anyone who genuinely cannot catch the timing, Windows itself offers a guaranteed workaround. From within a running installation, open Settings, go to System, then Recovery, and under Advanced startup select Restart now. Once the PC reboots into the recovery environment, choose Troubleshoot, then Advanced options, then UEFI Firmware Settings, and select Restart. This reboots the PC directly into firmware setup without needing to catch any key at all, and it works identically across every manufacturer since it is a Windows-level feature rather than a hardware one.

Boot Menu vs Full BIOS Settings: Which One Do You Need?

These two are often confused, but they solve different problems and understanding when to use each one saves a lot of wasted time. The windows 11 boot menu is a temporary, one-time list of every detected bootable device, shown for that single startup only. Selecting your USB drive from this list boots from it exactly once, and on the next restart the PC quietly returns to its normal default, usually the internal Windows drive, without you needing to change anything back afterward.

Full firmware setup, sometimes still called the bios settings screen even on UEFI systems, is where permanent changes live. This is where you would adjust the boot order so that USB devices are always checked first, toggle secure boot on or off, switch between UEFI boot and legacy boot modes, or update the firmware version itself. Anything you change here persists across every future restart until you go back in and change it again.

For a single Windows 11 installation or a one-time repair, the boot menu is almost always the better choice, since it gets you into the installer without leaving any lasting configuration change behind that you might forget about later. Reaching for full firmware setup makes more sense when you install Windows from USB regularly, when the boot menu key does not seem to work on a particular machine, or when the USB drive is not appearing in either list at all, which usually points to a setting inside firmware setup that needs adjusting first.

Preparing a Bootable Windows 11 USB Drive

None of the firmware settings covered in this guide matter if the USB drive itself was not created correctly, so it is worth confirming this step first. Microsoft’s own Media Creation Tool, downloaded directly from Microsoft’s website, is the most straightforward option for most home users, since it downloads the current Windows 11 build and writes it to a flash drive of at least 8GB automatically, formatting it correctly for UEFI boot in the process.

For more control, including the ability to bypass hardware checks on unsupported PCs, remove bloatware from the installation image, or build media that boots correctly in legacy BIOS mode on genuinely old hardware, a third-party tool such as Rufus offers considerably more flexibility than the official tool. Rufus lets you choose explicitly between a GPT partition scheme for UEFI systems and an MBR partition scheme for legacy BIOS systems, which becomes important later when this guide discusses matching the drive’s format to your firmware’s boot mode.

A drive that was formatted incorrectly for your firmware type is one of the most common, and most misdiagnosed, reasons a USB stick simply does not show up as a boot option at all. If you built the drive with the wrong partition scheme, the fix is rarely a firmware setting; it is almost always rebuilding the USB drive itself with the matching scheme, which the next section explains how to identify.

UEFI Boot vs Legacy Boot: Choosing the Right Mode

Firmware on most PCs built in the last ten years supports two distinct ways of starting the operating system, and mismatching them with your installation media is a frequent source of boot failures. windows 11 uefi boot is the modern standard, required for Windows 11 itself, and it depends on a GPT, or GUID Partition Table, disk layout along with Secure Boot support. windows 11 legacy boot, sometimes labeled CSM for Compatibility Support Module in firmware menus, emulates the older BIOS boot process and expects an MBR, or Master Boot Record, disk layout instead.

Windows 11 specifically requires UEFI mode with Secure Boot capability as part of its official system requirements, so legacy boot is not a viable long-term option for actually running Windows 11 day to day. Where legacy boot occasionally becomes relevant is when working with certain older diagnostic tools, some Linux live environments, or specific enterprise imaging software that has not been updated for UEFI, none of which apply to a standard Windows 11 installation.

To confirm which mode your current Windows installation is using, open System Information by typing msinfo32 into the Start menu search bar, and check the “BIOS Mode” field on the System Summary page. If it reads UEFI, make sure your installation USB was also built with a GPT partition scheme. If for some reason it reads Legacy on a system that should support UEFI, that itself is worth investigating, since it likely means Windows was installed with CSM enabled unnecessarily and is missing out on Secure Boot protection as a result.

Changing the Boot Order for a Permanent Fix

If you find yourself booting from USB frequently, perhaps while testing multiple operating systems or repeatedly reinstalling Windows on several machines, adjusting the windows 11 boot order directly is more convenient than opening the one-time boot menu every single time. This setting lives inside full firmware setup, typically under a tab labeled Boot, Boot Order, or Boot Priority depending on the manufacturer.

1. Restart the PC and enter firmware setup using the correct key from the manufacturer table above.
2. Navigate to the Boot tab, sometimes found under Advanced or Settings depending on the firmware layout.
3. Locate the boot priority or boot order list, which typically shows entries such as Windows Boot Manager, the internal drive, and, once plugged in, the USB device.
4. Move the USB drive entry to the top of the list, usually with the Plus and Minus keys, or F5 and F6 on many boards, though some interfaces support dragging with a mouse.
5. Save the changes, typically with F10, and exit. The PC will restart and, if a USB drive is present, boot from it automatically without needing the boot menu at all.

One habit worth building is reversing this change once you are finished. Leaving a USB drive as the top boot priority indefinitely means any USB stick plugged in during a future restart, even an unrelated one like a phone charging cable with storage capability, could interrupt a normal startup. Moving the internal Windows drive back to the top position after finishing your USB-based task keeps day-to-day boots predictable.

Secure Boot: When to Disable It and When to Leave It On

windows 11 secure boot is a firmware-level security feature that checks the digital signature of the boot loader and operating system before allowing them to run, blocking anything that has been tampered with or is not properly signed. It is a mandatory requirement for running Windows 11 and should generally stay enabled, since it protects against a serious class of malware that tries to load before the operating system, and before conventional antivirus software would ever get the chance to intervene.

That said, a small number of scenarios genuinely require disabling it temporarily. Certain older Linux distributions without a signed boot loader will not start with Secure Boot active. Some very old or highly customized USB creation tools produce media that is not properly signed and gets blocked at the firmware level before Windows Setup even loads. Diagnostic and recovery tools from third-party vendors occasionally run into the same signature issue.

To disable it temporarily, open firmware setup, look for a Security or Boot tab, and locate the Secure Boot toggle, switching it to Disabled. Complete whatever task required it, then return to the same screen and switch it back to Enabled before resuming normal use. Leaving Secure Boot off long-term removes a meaningful layer of protection and is not recommended once the specific task that required disabling it is finished. Windows 11 will actually continue running with Secure Boot disabled, but Windows Update, and the Windows Security app itself, will flag its absence as a device security concern.

Other Boot Options and Settings Worth Knowing

Beyond boot order and Secure Boot, a handful of other windows 11 boot options tend to interfere with USB booting if left in their default state, and knowing where to find each one saves considerable troubleshooting time.

Fast Boot, sometimes labeled Fast Startup or Ultra Fast Boot depending on the manufacturer, skips certain hardware initialization steps to shave a second or two off startup time. The trade-off is that it can also skip checking for USB devices during that abbreviated startup sequence, which is precisely why a USB drive sometimes fails to appear even after correctly adjusting the boot order. Disabling Fast Boot in firmware setup, found under Boot settings on most systems, resolves this in the majority of cases and can simply be re-enabled afterward if the faster startup time matters to you.

CSM, the Compatibility Support Module mentioned earlier, needs to be enabled if you specifically require legacy boot mode for non-Windows-11 purposes, and disabled if you want a purely UEFI environment with Secure Boot active, since the two settings interact directly with each other on many boards. USB Legacy Support is a separate toggle on some older firmware versions that controls whether USB devices are recognized at all during the early boot process, distinct from whether they boot in UEFI or legacy mode; if present and disabled, USB drives may not appear anywhere, including in the boot menu.

Administrator or supervisor passwords set within firmware can also block boot device changes entirely on business-oriented laptops, a setting IT departments frequently enable to prevent students or employees from booting unauthorized media on managed devices. If firmware setup opens but boot order options appear grayed out, this is the most likely explanation, and the relevant password, not a technical fault, is what needs resolving first.

Updating Your BIOS or UEFI Firmware Safely

Occasionally, a windows 11 bios update is what actually resolves a persistent USB boot issue, particularly on older PCs where the original firmware predates USB 3.0 support or proper GPT recognition. Manufacturers periodically release firmware updates that improve hardware compatibility, patch security vulnerabilities such as those affecting Secure Boot certificate handling, and occasionally add new boot-related options that were missing in earlier revisions.

Before updating, identify your exact model number and current firmware version, visible on the System Information page mentioned earlier under BIOS Version/Date, and download the matching update directly from the manufacturer’s official support site rather than a third-party download mirror. Dell, HP, and Lenovo all offer dedicated support utilities, Dell Command Update, HP Support Assistant, and Lenovo Vantage respectively, that can detect and install the correct firmware update automatically, which is considerably safer than manually hunting for the right file.

The single most important precaution during any firmware update is avoiding interruption. Keep a laptop plugged into power throughout the entire process, and never power off a desktop, remove a USB drive being used for the update, or restart manually while an update is running. An interrupted firmware update can leave the motherboard unable to boot at all, sometimes requiring a specialized recovery procedure or, in rare cases, professional repair. If your current setup is working normally and boots from USB without issue once the settings above are correctly configured, a firmware update is not strictly necessary just to enable USB booting, and should be treated as a targeted fix rather than routine maintenance.

Booting from USB on Newer Copilot+ and ARM-Based PCs

The newest generation of Windows 11 hardware, particularly Copilot+ PCs built around ARM processors from Qualcomm or newer Intel and AMD chips with integrated neural processing units, introduces a couple of extra wrinkles worth knowing about before attempting a USB boot. These systems ship with UEFI firmware that is more tightly locked down by default, often pairing Secure Boot with a dedicated security processor, such as Microsoft Pluton, that adds an additional layer of firmware-level verification beyond what older Intel and AMD PCs use.

ARM-based Windows 11 devices also require installation media built specifically for the ARM64 architecture, rather than the standard x64 media used for the vast majority of PCs. Attempting to boot an x64 USB installer on an ARM-based Surface or similar device will either fail to appear as a boot option at all or, in rare cases, appear briefly before returning an architecture mismatch error. Microsoft’s official download page for Windows 11 clearly separates the ARM64 download from the standard x64 version, so double-checking which processor architecture your specific PC uses before creating the USB drive avoids this problem entirely.

Firmware setup menus on these newer machines also tend to simplify the interface compared to older systems, sometimes hiding Secure Boot, CSM, and boot order behind a single “Advanced Mode” or “Custom Mode” toggle rather than presenting every option on the main screen. If your Copilot+ PC’s firmware setup looks unusually sparse compared to the settings described earlier in this guide, look for an advanced or expert mode toggle, often found in a corner of the screen or accessible with the F7 key on some boards, before assuming a particular setting simply does not exist.

Common Mistakes to Avoid When Booting from USB

A handful of small missteps account for a large share of the frustration people experience with this process, and most of them are easy to avoid once you know to look for them. Plugging the USB drive in after the PC has already started, rather than before powering it on, is one of the most frequent mistakes; the firmware typically only enumerates connected storage devices during its initial startup sequence, so a drive inserted mid-boot often will not appear until the next full restart.

Using a USB hub, particularly an unpowered one, is another common source of failure. Some firmware implementations do not reliably initialize devices connected through a hub during the early boot phase, even though that same hub works perfectly once Windows has fully loaded. Connecting the installation USB directly to a port on the motherboard or laptop chassis, rather than through a hub, dock, or extension cable, resolves this in most cases.

Confusing the boot menu key with the firmware setup key trips up plenty of people as well, since pressing the wrong one, F2 instead of F12 for example, simply reopens firmware setup instead of the one-time boot list, leading some users to assume the boot menu feature does not exist on their PC when it actually does. Double-checking both keys from the manufacturer table earlier in this guide, and trying each one on a fresh restart, clears up this confusion quickly.

Finally, downloading Windows 11 installation media from anywhere other than Microsoft’s official site is a mistake with consequences well beyond boot troubleshooting. Third-party ISO sources occasionally bundle modified system files or unwanted software, and even when they do not, verifying a match against Microsoft’s published file hash is not something most casual sources make easy to do. Sticking to Microsoft’s official download page, or a well-established, actively maintained tool such as Rufus that fetches the image directly from Microsoft’s own servers, keeps the entire process both reliable and safe.

Complete Boot Configuration Checklist

Pulling every setting discussed above into a single sequence gives a clear troubleshooting path when a USB drive refuses to boot, working from the most common culprit down to the least common.

Troubleshooting: USB Drive Not Appearing in the Boot Menu

When a properly created USB drive simply does not show up anywhere, a few specific causes account for the vast majority of cases. Start by testing the drive in a different USB port, ideally a USB 2.0 port on the back of a desktop rather than a front-panel USB 3.0 port, since some older firmware versions initialize rear ports before front ones during the early boot sequence, and a small number of systems have incomplete USB 3.0 driver support at the firmware level entirely.

If the drive still does not appear, rebuild it using Rufus rather than the Media Creation Tool, explicitly selecting the GPT partition scheme for UEFI target systems, since occasionally the automatic tool selects a scheme that does not match a particular motherboard’s expectations. Confirm the drive itself is not failing; testing it on a second, known-working PC quickly rules out a hardware fault with the USB stick itself, which is a more common issue than people expect, particularly with lower-quality flash drives that have seen heavy use.

On business laptops, check for an administrator-set restriction specifically blocking external boot devices, a setting IT departments sometimes enable as a security policy; this will not throw an obvious error message, it simply will not display the USB drive as an option no matter what else is configured correctly. Finally, on very new hardware paired with a very old Windows 11 installation image, confirm the ISO or USB creation tool being used is reasonably current, since Microsoft has occasionally shipped installation media that lacks storage or USB controller drivers required by the newest chipsets, causing the drive to boot into a black screen or error rather than the installer.

Frequently Asked Questions

What is the fastest way windows 11 how to enter bios on an unfamiliar PC?

Restart the PC and immediately tap F2 repeatedly, since it is the most common windows 11 bios key across Dell, Lenovo, and many Asus laptops. If that does not work, try Esc followed by F10 for HP, or Del for most desktop motherboards. If none of these succeed, use Settings, System, Recovery, Advanced startup, then UEFI Firmware Settings from within Windows itself, which works on every manufacturer without needing to guess the correct key.

Do I need to disable secure boot to boot windows 11 from usb?

No, official Windows 11 installation media created through the Media Creation Tool or a current version of Rufus is properly signed and boots fine with Secure Boot enabled. Disabling it is only necessary for certain older or heavily customized boot tools, unsigned Linux distributions, or specific diagnostic utilities that were never updated to support Secure Boot’s signature requirements.

Why does my USB drive show up in the boot menu but Windows Setup still fails to load?

This usually points to a mismatch between the USB drive’s partition scheme and the firmware’s boot mode, such as an MBR-formatted drive being selected on a system running strictly in windows 11 uefi boot mode. Rebuilding the drive with Rufus and explicitly choosing GPT for UEFI targets, or verifying the ISO download completed without corruption, resolves the large majority of these failures.

Is it safe to change windows 11 boot order settings myself?

Yes, adjusting boot priority is one of the safer changes available in firmware setup and does not affect installed software or data, since it only controls which device is checked first at startup. If you want extra peace of mind, most firmware setup screens include a Load Setup Defaults or Optimized Defaults option that instantly reverts every setting, including boot order, back to the factory configuration.

Should I run a windows 11 bios update just to fix a USB boot problem?

Try adjusting boot order, disabling Fast Boot, and confirming Secure Boot compatibility first, since these settings resolve most USB boot issues without touching the firmware itself. A firmware update becomes worth considering only if the PC is several years old, the manufacturer’s release notes specifically mention USB or boot-related fixes, and the simpler settings changes have already been ruled out.

Can I set a permanent windows 11 boot order without ever needing the boot menu again?

Yes, moving the USB entry to the top of the boot priority list inside firmware setup makes any connected USB drive load automatically ahead of the internal disk on every restart. This is convenient for frequent reinstalls or multi-boot testing, but it is worth moving the internal drive back to the top position afterward, since leaving USB set as the default boot device means any flash drive plugged in later, even unintentionally, could interrupt a normal startup.