How To Activate Secure Boot | How to Verify It’s Enabled

Activating Secure Boot depends on your system’s BIOS/UEFI firmware. Restart your PC. As soon as it starts booting, press the BIOS key (usually F2, Delete, F10, or ESC). The exact key varies by manufacturer.

Here’s a step-by-step guide for most modern Windows PCs:

🔐 What is Secure Boot?

Secure Boot is a UEFI firmware feature that prevents unauthorized or malicious software from loading during system boot. It’s required for some OS features (e.g., Windows 11).

✅ Prerequisites

Make sure:

• You’re using UEFI, not Legacy BIOS.

• Your system disk is formatted with GPT, not MBR.

• You’re not running incompatible OS (e.g., older versions of Linux without Secure Boot support).

💻 How to Activate Secure Boot (Windows PC)

1. Enter UEFI/BIOS Setup

• Restart your PC.

• As soon as it starts booting, press the BIOS key (usually F2, Delete, F10, or ESC). The exact key varies by manufacturer.

  Tip: On Windows 10/11, you can also go to:
  Settings > Update & Security > Recovery > Advanced Startup > Restart Now
  Then: Troubleshoot > UEFI Firmware Settings > Restart

2. Enable UEFI Mode

• In BIOS, go to the Boot or Startup tab.

• Set Boot Mode to UEFI (not Legacy or CSM).

If you’re on Legacy BIOS, you’ll need to convert your disk from MBR to GPT before switching to UEFI (I can help with that if needed).

3. Activate Secure Boot

• Go to the Security, Boot, or Authentication tab (depending on BIOS).

• Look for Secure Boot and set it to Enabled.

• If it’s greyed out:

  • Set Secure Boot Mode to Standard (or Custom, if needed).

  • Save changes, reboot into BIOS again—it should now be available.

4. Save and Exit

• Press F10 to Save & Exit the BIOS.

• Your PC will reboot with Secure Boot enabled.

✅ How to Verify It’s Enabled (Windows)

1. Press Windows + R, type msinfo32, and hit Enter.

2. In System Information, look for:

   • Secure Boot State → Should say On

   • BIOS Mode → Should say UEFI

🔧 Common Issues