Secure Boot State is OFF although it is turned on in UEFI Firmware Settings

Solution 1:

You need to set Platform in "User Mode", Secure Boot in "Standard Mode" and Load Setup Defaults.

You could do it by Restoring Factory Keys:

1. BIOS - Security - Secure Boot - Restore Factory Keys - Enter
2. BIOS - Restart - OS Optimized Defaults - Enabled
3. BIOS - Restart - Load Setup Defaults - Enter
4. Go to BIOS - Main and check if UEFI Secure Boot is ON.

Solution 2:

You might be in Setup Mode because you have deleted the Platform Key in your BIOS. Enabling Secure Boot in this state enables your OS to write a new Platform Key (possibly useful for securing a Linux installation). But if you don't do that, you remain in Setup Mode and the Secure Boot State, indicating the Platform Key has been used to secure the system, will remain off.

Your BIOS might have an option to restore the default Platform Key, possibly called "Restore Default Secure Boot Keys", which restores the Microsoft Key. After doing that, your Secure Boot State will be On when booting Windows.