To enable UEFI Secure Boot, follow these general steps:
- Check if Secure Boot is already enabled:
- Open the Windows search, type "system information," and open it.
- Look for the "Secure Boot State" entry. If it says "Off," proceed to enable it.
- Access UEFI Firmware Settings:
- Open Windows Settings.
- Go to Update & Security > Recovery.
- Under "Advanced startup," click "Restart now."
- After reboot, choose Troubleshoot > Advanced options > UEFI Firmware Settings, then restart.
- Configure BIOS/UEFI settings:
- Once in the UEFI setup (BIOS), go to the Boot tab.
- Disable CSM (Compatibility Support Module) if enabled to ensure UEFI mode is active.
- Find the Secure Boot option and enable it.
- Set "OS type" to "Windows UEFI mode."
- If needed, install default Secure Boot keys under Key Management.
- Save changes and exit the UEFI settings:
- Press F10 to save and restart the computer.
- Verify Secure Boot is enabled:
- After reboot, open "system information" again.
- Confirm "Secure Boot State" shows "On."
Note: Your Windows installation disk must use the GPT partition style for Secure Boot to work, not MBR. If your disk is MBR, convert it to GPT before enabling Secure Boot to avoid boot issues. These steps may vary slightly depending on the PC or motherboard brand, so consult your device's manual for exact BIOS menu navigation. This process ensures your system boots securely by verifying trusted software, enhancing protection against malware during startup.
