To turn on Secure Boot, the general steps are:
- Check if Secure Boot is already enabled by opening "System Information" in Windows and looking at the "Secure Boot State."
- Restart your PC into the BIOS/UEFI settings:
- On boot, press a key like F2, Delete, or a specific key depending on your manufacturer (often shown on screen at startup).
- Alternatively, in Windows go to Settings > Update & Security > Recovery > Advanced startup > Restart now > Troubleshoot > Advanced options > UEFI Firmware Settings.
- In the BIOS/UEFI menu:
- Find the Boot tab or Security tab.
- Locate the Secure Boot setting.
- Set "Secure Boot" to Enabled.
- Make sure the OS Type is set to Windows UEFI mode.
- If there's an option for Compatibility Support Module (CSM), set it to Disabled to ensure UEFI mode.
- Save your changes and exit (usually by pressing F10).
- Your computer will restart with Secure Boot enabled.
After restarting, you can confirm in Windows System Information that the Secure Boot State is now On. These steps can vary a little depending on the PC manufacturer and BIOS version, but this is the typical method to enable Secure Boot on most Windows PCs.
