To turn on Secure Boot, the general process is to access the system BIOS or UEFI settings during startup and enable the Secure Boot option. Here are the key steps commonly involved:
- Check Secure Boot Status: In Windows, search "System Information" and look for "Secure Boot State" to see if it is already enabled.
- Enter BIOS/UEFI Settings: Restart your PC and press the designated key such as Delete, F2, or F7 during boot to enter BIOS/UEFI.
- Switch to Advanced Mode if needed (for example, press F7 in ASUS BIOS).
- Disable CSM (Compatibility Support Module) if available by setting "Launch CSM" to Disabled, to put BIOS in UEFI mode.
- Navigate to the Boot tab or Secure Boot section.
- Enable Secure Boot and make sure the OS type is set to "Windows UEFI mode."
- If required, install default Secure Boot keys from the Key Management or Secure Boot menu.
- Save changes (usually F10) and exit BIOS.
- After restarting, verify in System Information that Secure Boot State is On.
Different PC brands and BIOS versions may have slight variations in menu names or key presses, so checking the specific brand's instructions is recommended. Secure Boot requires the PC to be in UEFI boot mode rather than Legacy BIOS mode. This summarizes the typical approach to turning on Secure Boot on a Windows PC using BIOS/UEFI firmware settings.
