To enable Secure Boot in a Gigabyte BIOS, follow these general steps:
- Enter the BIOS by restarting the computer and pressing the Delete key during boot.
- Disable CSM (Compatibility Support Module) support to ensure the system is in UEFI mode.
- Navigate to the Security or Boot tab in the BIOS.
- Find the Secure Boot option and set it to Enabled.
- If prompted, set Secure Boot Mode to Standard and select to restore or install default Secure Boot keys.
- Save BIOS settings and exit (usually by pressing F10).
- Reboot and verify Secure Boot is enabled by checking System Information in Windows (run msinfo32 and look for Secure Boot State).
Additional prerequisites include:
- Using a GPT partition style on the boot drive rather than MBR.
- Having TPM 2.0 enabled if required for the operating system.
- BIOS updated to the latest version.
- BIOS mode must be UEFI, not Legacy.
If the Secure Boot option is missing, ensure CSM is fully disabled and BIOS is set to Windows 10/11 mode. Updating the BIOS may be necessary in some cases to get Secure Boot support. These instructions apply broadly to Gigabyte motherboards and BIOS versions as of 2025 and have been confirmed across multiple sources, including official Gigabyte documentation and user guides.
