Enabling Secure Boot on a Gigabyte motherboard involves adjusting settings in the BIOS/UEFI to switch from legacy/CSM mode to UEFI with Secure Boot enabled. The exact menu labels can vary by motherboard model and BIOS version, but the general steps below apply to most Gigabyte boards. Direct answer

• Enter BIOS/UEFI during system boot and enable Secure Boot after ensuring the system is in UEFI mode (not Legacy/CSM). Save changes and reboot.

Guided steps (typical Gigabyte BIOS process)

• Restart and press Delete (Del) or F2 to enter BIOS/UEFI setup.
• If your BIOS has an “Easy Mode” and “Advanced Mode,” switch to Advanced Mode to access full options.
• Ensure the firmware is in UEFI mode:
  • Look for a setting like CSM (Compatibility Support Module) and set it to Disabled or Windows UEFI only. Some boards label this as “CSM” with a toggle; set it to Disable.
  • If you have a separate option for “BIOS Boot Mode” or “Boot Mode,” choose UEFI.
• Enable TPM and/or fTPM if your system requires it:
  • In Gigabyte BIOS, this is often found under Advanced > Settings > AMD fTPM (or PTT for Intel platforms). Set to Enabled if you plan to use Secure Boot with Windows.
• Enable Secure Boot:
  • Go to the Boot or Security section and find Secure Boot.
  • If shown, set Secure Boot to Enabled. If prompted to choose a mode, select Standard or Canadian/Default (the exact label varies by BIOS); avoid Special or Custom unless you know you need them.
  • If Secure Boot is grayed out, you may first need to enable a Compatibility Support Module temporarily, set a supervisor/admin password, or restore factory keys, then re-enter and enable Secure Boot.
• Save and exit:
  • Save changes and reboot. On first boot after enabling Secure Boot, the system may perform additional checks and require that Windows be installed in UEFI mode for full compatibility.

Common issues and tips

• If Secure Boot isn’t available, your system may be in Legacy/CSM mode, or the BIOS needs an update. Update BIOS from Gigabyte’s official site using a USB flash drive, then retry switching to UEFI and enabling Secure Boot.
• Windows prerequisites: For Windows 10/11, Secure Boot works best when the OS disk uses GPT partitioning. If your drive is MBR, consider converting to GPT (disk management tools like MBR2GPT can help) after backing up data.
• Resetting keys: Some Gigabyte BIOS menus offer “Restore Factory Keys” or “Install Default Keys.” If Secure Boot remains disabled, using this option can help.

If you’d like, share your exact motherboard model (e.g., GA-xx series) and BIOS version, and I can tailor the steps to match the exact menu labels you’ll see in your BIOS.