To turn on UEFI Secure Boot, follow these general steps:
- Check Secure Boot Status
- Open "System Information" on your PC by searching for it.
- Scroll to "Secure Boot State" to see if it is "On" or "Off."
- Access UEFI Firmware Settings (BIOS)
- Open Windows Settings → Update & Security → Recovery.
- Under Advanced Startup, click "Restart now."
- At restart, choose Troubleshoot → Advanced options → UEFI Firmware Settings.
- The PC will reboot into BIOS/UEFI setup.
- Configure BIOS Settings
- In BIOS, switch to "Advanced Mode" if needed (often by pressing F7).
- Navigate to the "Boot" tab.
- Disable "CSM" (Compatibility Support Module) if available to enable pure UEFI mode.
- Find the "Secure Boot" option and set it to "Enabled."
- Ensure OS type is set to "Windows UEFI mode."
- Some systems require loading default Secure Boot keys under "Key Management."
- Save and Exit BIOS
- Press F10 to save changes and exit.
- The PC will restart with Secure Boot enabled.
- Verify Secure Boot is Enabled
- After boot, check "Secure Boot State" again in System Information; it should say "On."
Note: If your BIOS is in Legacy mode or your disk is MBR partitioned, you may need to convert to UEFI and GPT format to enable Secure Boot. Consult your motherboard or PC manufacturer’s documentation for specific instructions as settings and keys may differ between models.
