Secure Boot in Windows 10 is a security feature that ensures your PC only boots with trusted software signed by the Original Equipment Manufacturer (OEM). It prevents unauthorized programs from running during the boot process, protecting your system from malware and rootkits. To enable Secure Boot on Windows 10, follow these general steps:
- Check if Secure Boot is already enabled:
- Press Windows key + R, type "msinfo32", and press Enter.
- In the System Information window, check "BIOS Mode" (should be UEFI) and "Secure Boot State" (should be On).
- If Secure Boot is Off and BIOS Mode is UEFI, you can enable it through the BIOS/UEFI firmware settings:
- Open Settings > Update & Security > Recovery.
- Under Advanced startup, click Restart now.
- After restart, select Troubleshoot > Advanced options > UEFI Firmware Settings, and click Restart.
- In the BIOS/UEFI menu, locate the Secure Boot option (usually under Boot or Security tab) and enable it.
- Disable Compatibility Support Module (CSM) if necessary to switch BIOS to pure UEFI mode.
- Save changes and exit BIOS.
- Ensure your Windows disk partition style is GPT (GUID Partition Table), as Secure Boot requires GPT, not MBR. You can check this by opening Disk Management and viewing the disk's properties.
- After enabling Secure Boot, restart your PC and verify Secure Boot State is On in System Information.
Note: The exact BIOS/UEFI interface and steps may vary depending on the PC manufacturer and motherboard model. Consult your device's manual for specific instructions. This process usually takes about 15-30 minutes, improves security by allowing only trusted software to boot, and is essential for compatibility with some modern software and services.
