how to activate secure boot windows 10

To activate Secure Boot on Windows 10, follow these steps:

1. Check if Secure Boot is already enabled:
   • Press the Windows key, type "system information," and open it.
   • Look for "Secure Boot State." If it says "On," Secure Boot is already enabled. If "Off," you need to enable it.
2. Access Advanced Startup:
   • Open Settings (Windows key, then type "Settings").
   • Go to Update & Security > Recovery.
   • Under Advanced startup, click "Restart now."
3. Enter UEFI Firmware Settings:
   • After restart, choose Troubleshoot > Advanced options > UEFI Firmware Settings, then restart.
4. In BIOS/UEFI setup:
   • Navigate to the Boot tab.
   • Disable Compatibility Support Module (CSM) by setting "Launch CSM" to Disabled to switch to UEFI mode.
   • Find the Secure Boot option.
   • Set it to Enabled and ensure "OS Type" is set to "Windows UEFI mode."
   • If available, under Key Management, select "Install Default Secure Boot Keys."
   • Save the changes and exit BIOS (usually F10).
5. Verify in Windows:
   • After reboot, check "Secure Boot State" in System Information again; it should now say "On."

Note: Your drive must use GPT partition style (not MBR) for Secure Boot to work, and BIOS mode must be UEFI. You might need to convert MBR to GPT if necessary. These steps can vary slightly by manufacturer and PC model, so refer to your system's manual if needed.