To enable Secure Boot on a Windows PC, follow these general steps:
- Check if Secure Boot is currently enabled:
- Open "System Information" by searching for it in the Windows search bar.
- Look for the "Secure Boot State" entry to see if it says "On" or "Off."
- Prepare to enter BIOS/UEFI settings:
- From Windows, go to Settings > Update & Security > Recovery.
- Under "Advanced startup," click "Restart now."
- After restart, navigate through Troubleshoot > Advanced options > UEFI Firmware Settings to open BIOS.
- Alternatively, you can access BIOS by pressing a key like Delete or F2 during startup.
- Configure BIOS settings:
- Enter "Advanced Mode" if available (usually via F7).
- Find the Boot tab and disable "CSM" or "Legacy Support" if enabled.
- Locate the Secure Boot option, set "OS Type" to "Windows UEFI mode," and enable Secure Boot.
- If there is a "Key Management" option, choose "Install Default Secure Boot Keys."
- Save changes (usually F10) and exit BIOS.
- Verify Secure Boot is enabled:
- After reboot, open "System Information" again and confirm that Secure Boot State is "On."
Note: Your PC firmware must be set to UEFI mode (not Legacy BIOS), and your OS disk should use the GPT partition style for Secure Boot to function. If your disk is MBR, conversion to GPT might be needed before enabling Secure Boot. These steps can vary slightly depending on your PC or motherboard manufacturer, so it might help to consult the specific manual or support site for your device. This method applies to both Windows 10 and Windows 11 PCs. If you need detailed step-by-step instructions or troubleshooting based on your specific hardware or OS version, please specify, and more tailored guidance can be provided.
