how to tell if secure boot is enabled

To tell if Secure Boot is enabled on a Windows PC, there are several straightforward methods:

• One simple way is using the System Information tool:
  1. Right-click the Start button and select Run.
  2. Type msinfo32 and press Enter.
  3. In the System Information window under System Summary, find the item labeled "Secure Boot State".
  4. Its value will be "On" if Secure Boot is enabled, "Off" if it is disabled, or "Unsupported" if your hardware doesn't support it.
• Another method is using PowerShell:
  1. Open PowerShell as Administrator.
  2. Run the command Confirm-SecureBootUEFI.
  3. It will return True if Secure Boot is enabled, False if disabled, or an error if unsupported or lacking permissions.
• You can also check directly from the UEFI/BIOS settings by restarting your PC and entering firmware setup (usually via keys like DEL, ESC, F2, etc.). Within firmware settings, look for Secure Boot status usually under Boot or Security tab.

These methods allow confirming whether Secure Boot is active, helping ensure your system’s security. The System Information and PowerShell methods do not require rebooting while BIOS/UEFI access is universal but requires restarting the PC.