How to Convert a Disk From MBR to GPT With mbr2gpt for Secure Boot

Windows 11 wants Secure Boot, Secure Boot needs UEFI mode, and UEFI mode needs a disk laid out as GPT rather than the old MBR scheme. The good news is you do not have to wipe and reinstall to get there. Microsoft ships a built-in command-line tool, mbr2gpt.exe, that converts your system disk in place without touching your files. Here is the full sequence, from validation to flipping the firmware over to UEFI.

Quick Answer

Run mbr2gpt /validate to confirm the disk qualifies, then mbr2gpt /convert to change it from MBR to GPT without data loss, then reboot into firmware and switch from legacy BIOS to UEFI with Secure Boot enabled. The disk must be a 64-bit Windows system disk with at most three primary partitions and BitLocker turned off.

Before you start: requirements and a backup

The tool is non-destructive, but a system disk conversion is not a step to take casually, so back up first.

mbr2gpt only works when the disk meets specific conditions: it must be a GPT-eligible system disk running 64-bit Windows, hold no more than three primary partitions, have one active partition, not be part of a dual-boot setup, and have BitLocker or any disk encryption suspended or off beforehand. A modern mini PC or desktop almost always qualifies, but confirm rather than assume. If you are setting up a fresh small-form-factor machine for this, the mini PC range at Evetech is a sensible starting point since most ship UEFI-ready.

Step by step with mbr2gpt

Follow these in order. The validation step is your safety gate, do not skip it.

1. Suspend or disable BitLocker if it is on, and take a full backup of the drive. This is the one chance to be cautious before changing partition style.
2. Open an elevated Command Prompt (Run as administrator). You can do this from within Windows for validation.
3. Run mbr2gpt /validate to check the disk meets every requirement. If it reports failures, fix those first, the convert step will refuse to run otherwise.
4. Reboot into the Windows Recovery Environment. Go to Settings, then System, then Recovery, then Restart now under Advanced startup, then Troubleshoot, then Advanced options, then Command Prompt.
5. Run mbr2gpt /convert. The tool rewrites the partition layout to GPT, adds the EFI system partition, and updates the boot files, all without deleting your data.
6. Power down once the conversion reports success. Do not let Windows boot yet, the firmware still expects legacy mode.

What mbr2gpt actually changes on the disk

When the conversion runs, the tool shrinks the first partition slightly to carve out space for a new EFI System Partition, moves the existing recovery partition if needed, and writes a GPT protective MBR so legacy tools still recognise the disk. Your data partitions are left untouched. The EFI partition it creates is typically around 100MB and holds the boot files that UEFI needs to start Windows. Once done, the disk presents itself to the firmware as a native GPT drive and Secure Boot becomes available as an option in the BIOS.

Common validation failures and how to fix them

The three most frequent reasons mbr2gpt /validate fails are too many primary partitions, BitLocker still active, or the disk not being recognised as the OS disk. For partition count, open Disk Management, identify any extra primary partitions that are not the system, boot or recovery partition, and delete or convert them before retrying. For BitLocker, go to Settings, then System, then Device Encryption, and turn it off, or suspend it temporarily. Give Windows a few minutes to decrypt before running the tool again.

Switch the firmware to UEFI and enable Secure Boot

The disk is now GPT, but your firmware is still set to legacy BIOS, so the next boot would fail until you change it.

Enter the firmware setup (usually Del or F2 at power-on), find the boot mode setting, and switch it from Legacy or CSM to UEFI. While you are there, turn on Secure Boot, which only becomes available once the disk is GPT and the firmware is in UEFI mode. Save and exit, and Windows boots normally, now on a GPT disk in full UEFI mode ready for Windows 11. If you are doing this across several machines, the most popular PC builds list at Evetech is a quick reference for systems that already ship in this configuration.

Frequently Asked Questions

Will mbr2gpt delete my files?

No. The conversion is non-destructive and keeps your data and Windows installation intact. A full backup beforehand is still strongly advised, as with any partition-level change.

Why does the convert step fail inside Windows?

mbr2gpt /convert is designed to run from the Windows Recovery Environment, not the running desktop. Use /validate inside Windows, then do the actual /convert from WinRE Command Prompt.

Do I have to enable Secure Boot immediately?

You can convert the disk and switch to UEFI first, then enable Secure Boot afterwards. Windows 11 expects Secure Boot on, so enable it before or during the firmware switch.

What if validation reports too many partitions?

mbr2gpt allows at most three primary partitions. If validation flags this, you will need to consolidate or remove an extra partition before the tool will proceed.

Can I undo the conversion?

There is no clean built-in rollback once converted. That is precisely why the pre-conversion backup matters, restoring an image is your fallback if anything goes wrong.