To enable Secure Boot, follow these general steps:
- Check if Secure Boot is already enabled by searching for "System Information" on your PC and looking for the "Secure Boot State."
- Restart your PC into BIOS/UEFI settings:
- On many systems, you can do this via Windows Settings > Update & Security > Recovery > Advanced startup > Restart now, then choose Troubleshoot > Advanced options > UEFI Firmware Settings.
- Alternatively, press the BIOS access key during boot (often F2, Delete, or F7).
- In the BIOS/UEFI:
- Disable Compatibility Support Module (CSM) if it is enabled, setting "Launch CSM" to Disabled to switch to UEFI mode.
- Navigate to the "Boot" tab and find "Secure Boot."
- Set Secure Boot to Enabled and ensure the "OS Type" is set to "Windows UEFI mode."
- If applicable, install the default Secure Boot keys.
- Save changes and exit BIOS (usually by pressing F10).
- Once Windows restarts, verify Secure Boot is enabled by checking the "Secure Boot State" again in System Information.
Note: The exact key names and steps can vary depending on the motherboard or system manufacturer. Backing up data before disabling CSM or making BIOS changes is recommended as it could affect system booting.
