To turn on Secure Boot in Windows 10, follow these steps:
- Check Current Secure Boot Status:
- Search for "System Information" from the Start menu and open it.
- Scroll down to find "Secure Boot State." If it says "Off," you need to enable it.
- Access Advanced Startup:
- Open Settings and go to "Windows Update."
- Select "Advanced options," then under "Recovery," click "Restart now" in the Advanced startup section.
- Enter UEFI Firmware Settings:
- After restart, choose "Troubleshoot" > "Advanced options" > "UEFI Firmware Settings."
- Your computer will restart into BIOS/UEFI settings.
- Enable Secure Boot in BIOS/UEFI:
- In BIOS, go to the Boot tab.
- Disable "Launch CSM" (Compatibility Support Module) to enable UEFI mode.
- Find the "Secure Boot" option and set it to Enabled.
- Make sure "OS type" is set to "Windows UEFI mode" and "Secure Boot mode" to "Standard."
- Save changes (usually by pressing F10) and exit BIOS.
- Verify Secure Boot is On:
- Once back in Windows, open "System Information" again and confirm "Secure Boot State" is now "On."
Note: If your system boots in Legacy BIOS mode or the drive is MBR, Secure Boot cannot be enabled without reinstalling Windows in UEFI mode. These steps cover the general process to enable Secure Boot on most Windows 10 systems, though BIOS menus may vary by manufacturer and model.
