Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Scan for outdated or missing drivers - takes under a minute3Repair Windows errors before they cause bigger problems“SGX disabled by BIOS” means Intel Software Guard Extensions is not currently available to the application reporting the message. The fix depends on the BIOS state and whether your exact processor and computer support SGX: check system support first, use the manufacturer’s BIOS instructions when an option is available, and use an operating-system activation tool only when its prerequisites match. SGX is needed by applications designed to use it, not for ordinary computer operation.
What “SGX disabled by BIOS” means
Intel SGX is a security technology in supported Intel processors that lets compatible applications isolate selected code and data in protected enclaves. The message does not, by itself, mean Windows or Linux is broken. It indicates that an application cannot use SGX in the system’s current configuration.
For SGX to be available, Intel identifies several requirements: a processor that supports SGX, a BIOS that supports and exposes the feature, Intel SGX platform software, and—when the BIOS is set to Software Controlled—an activation step. As Intel puts it, processor support alone is not enough to have a fully SGX-enabled system.
First, check whether your computer supports SGX
- Identify the exact processor and computer or motherboard model. Check the system’s specifications or firmware information; do not rely on a processor family name alone.
- Verify processor capability. Intel’s SGX and SGX2 platform support guidance explains how to check processor capability. A processor capability check does not establish that the computer’s BIOS supports or enables SGX.
- Check whole-system support with the computer or motherboard manufacturer. Look up the exact model and firmware guidance. Intel notes that BIOS vendors control whether the setting is exposed, and there is no single SGX2 list that establishes support for every processor-and-system combination.
If the processor or system does not support SGX, a software utility cannot add it. Contact the system manufacturer if its specifications are unclear.
#1 Best Overall
- Intel LGA 1700 Socket: Ready for Intel Core 14th & 13th Gen Processors, Intel Core 12th Gen, Pentium Gold and Celeron Processors
- Ultrafast Connectivity: PCIe 5.0, two M.2 slots, Realtek 2.5Gb Ethernet, Wi-Fi 6, rear USB 5Gbps Type-A, front USB 5Gbps support
- Comprehensive Cooling: VRM heatsink, PCH heatsink, hybrid fan headers and Fan Xpert 2+
- Aura Sync RGB Lighting: Onboard Addressable Gen 2 headers for RGB LED strips, easily synced with Aura Sync-capable hardware
Choose the fix that matches the BIOS state
| BIOS state | What to do | Important condition |
|---|---|---|
| Enabled | Check that the relevant Intel SGX platform software and application requirements are met; reboot and recheck the application. | Enabled status does not by itself confirm every software prerequisite. |
| Software Controlled | Use an activation procedure documented for your operating system and platform. | The Windows activation-app procedure below is specifically documented for Windows 10 and requires UEFI boot. |
| Explicitly Disabled | Use the manufacturer’s instructions to enable SGX, if supported; otherwise contact the OEM. | Linux software activation does not override an explicit BIOS disablement. |
| Missing or greyed out | Confirm exact system support and platform prerequisites with the OEM. | Firmware may hide or disable the option for unsupported hardware or configuration. |
Method 1: Enable SGX in the model-specific BIOS settings
- Find the firmware setup instructions for your exact computer or motherboard model, then enter BIOS/UEFI setup using the manufacturer’s procedure.
- Look for a setting named Intel SGX, Software Guard Extensions, or SW Guard Extensions. These are search terms, not a universal menu path.
- If the setting is available, follow the manufacturer’s explanation of its options. Select Enabled if that is the supported setting for your platform, or use Software Controlled only when your platform and intended software support that mode.
- Save the change, reboot, and check the BIOS status or the application that reported the message.
Menu names and locations differ by manufacturer and model. Do not change unrelated memory, security, or virtualization settings based on instructions for another system.
Method 2: Use Intel’s activation app on a qualifying Windows 10 system
Intel documents this procedure for Windows 10, not as a universal Windows 11 fix. It applies only when SGX is set to Software Controlled and Windows is installed in UEFI mode. Intel’s instructions were last reviewed on 2025-02-06.
- Confirm in BIOS/UEFI that SGX is set to Software Controlled and verify that Windows was installed in UEFI mode.
- Install the Intel SGX Activation App from the Microsoft Store, following Intel’s Windows 10 activation instructions.
- Run the app as an administrator.
- Reboot the computer, then check BIOS status and the application that needs SGX.
If the system does not meet those prerequisites or the procedure does not change the status, consult the computer manufacturer rather than treating the app as a way to bypass firmware support.
Rank #2
- Intel LGA 1700 socket: Ready for Intel Core 14th & 13th Gen Processors, Intel Core 12th Gen, Pentium Gold and Celeron Processors
- Enhanced power solution: 12+1 DrMOS, 6-layer PCB, ProCool connectors, alloy chokes and durable capacitors for stable power delivery
- Next-gen connectivity: DDR5 memory, Wi-Fi 6, PCIe 5.0 x16 slot, PCIe 4.0 M.2 slots, rear USB 10Gbps Type-C and Type-A, front panel USB 10Gbps Type-C, Thunderbolt (USB4) header support
- Exclusive Memory Technology: ASUS Enhanced Memory Profile II and ASUS OptiMem II
- Comprehensive cooling: Large VRM heatsinks, M.2 heatsinks, PCH heatsink, hybrid fan headers and Fan Xpert 4 with AI Cooling II
Method 3: Use Intel’s software-enable utility on a qualifying Linux system
Intel’s Linux SGX software-enable utility is intended for platforms whose BIOS supports software enablement without an explicit BIOS toggle. Linux must be booted in UEFI mode because the procedure relies on EFI variables.
PC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchThe utility cannot make SGX available if the processor or BIOS lacks support, or if BIOS explicitly disables the feature. In those cases, Intel directs users to enable the BIOS setting if it is available or contact the OEM.
If the SGX option is missing or greyed out
Check the exact platform before changing firmware settings
A missing option may mean the system does not support SGX, the BIOS does not expose it, or the platform has not met a model-specific prerequisite. Confirm support with the manufacturer for your exact model and firmware. Do not apply server-specific settings to a consumer PC or a different server family.
Rank #3
- Supports 12th/13th Gen Intel Core, Pentium Gold and Celeron processors for LGA 1700 socket
- Supports DDR4 Memory, Dual Channel DDR4 5333+MHz (OC)
- Enhanced Power Design: 12+1 Duet Rail Power System with P-PAK, 8-pin + 4-pin CPU power connectors, Core Boost, Memory Boost
- Premium Thermal Solution: Extended Heatsink, MOSFET thermal pads rated for 7W/mK, additional choke thermal pads and M.2 Shield Frozr are built for high performance system and non-stop gaming experience
- High Quality PCB: 6-layer PCB made by 2oz thickened copper and server grade level material
Intel Xeon systems
On Intel Xeon systems, SGX can be unavailable because of processor or socket population, memory population or interleaving, firmware status, or relevant UEFI variables. Intel says an unsupported configuration can cause firmware to turn SGX off for the current boot. Check the supported configuration for the specific system and the steps in Intel’s Xeon and SGX troubleshooting guidance before changing hardware or firmware settings.
Intel Server System M50CYP family only
Intel documents a specific procedure for the M50CYP family; it is not a general fix for other PCs or servers. On that system, the SGX option remains hidden until Total Memory Encryption is enabled and particular memory settings are configured. Intel’s instructions specify:
- Disable UMA-Based Clustering.
- Enable Memory Corrected Error.
- Disable Patrol Scrub.
- Disable Memory Mirroring Possible.
- Disable Mirror Mode.
The published menu locations are Advanced > Processor Configuration and Advanced > Memory Configuration > Memory RAS and Performance Configuration. Save with F10 and reboot. Follow the complete Intel M50CYP instructions for the system; do not copy these settings to another model.
Rank #4
- Supports 12th/13th Gen Intel Core, Pentium Gold and Celeron processors for LGA 1700 socket
- Supports DDR4 Memory, Dual Channel DDR4 4800+MHz (OC)
- Core Boost : With premium layout and digital power design to support more cores and provide better performance
- Memory Boost: Advanced technology to deliver pure data signals for the best performance, stability and compatibility
- Lightning Fast Experience: PCIe 4.0, Lightning Gen4 x4 M.2 with M.2 Shield Frozr
Verify the result—and whether you need SGX
After a supported change, save and reboot, then check SGX status in firmware or with a diagnostic appropriate to the platform. Intel lists the Linux command cpuid | grep -i sgx and a test program for checking SGX2 processor capability. These can show processor feature information; they do not prove that the BIOS, platform software, and application activation requirements are all satisfied.
If the application you are trying to use does not require SGX, the message may not affect your task. Intel describes SGX as a feature that applications written for SGX can benefit from, not as a general requirement for booting or using a computer.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →
