How to enable Secure Boot on your PC to install Windows 11

Gabriela Haynes
3 years ago

For Windows 11 to work correctly, you need a Secure Boot tool and know how to check and enable this security feature on your PC.

In addition to TPM, Windows 11 updates can’t do without Secure Boot enabled.

Secure Boot is a security feature built into many devices that have modern hardware and UEFI firmware (it is responsible for securing Windows startup).

The advantage of the feature is that it works securely, because of which Microsoft necessarily requires it to be installed on Windows 11.

Checking the status of Secure Boot in Windows 10  

  1. Open Start.
  2. Find the System Information item – click on the top result to launch the application.
  3. On the left side, click on System Summary.
  4. Check Secure Boot Status – On means enabled, Off means disabled/unavailable.
  5. Look at the BIOS Mode data. UEFI allows you to enable Safe Boot, and Legacy (BIOS) will allow you to enable the feature as well. However, additional steps are needed.
  6. The feature is disabled, and BIOS Mode says UEFI? Then you need to back up your PC and then continue with the steps below to enable Secure Boot.

Properly enabling Secure Boot in Windows 10

To enable Secure Boot on a UEFI PC, you need to follow specific steps. It is essential to know that changing the wrong firmware settings often causes the device to start incorrectly.

  1. Go to Settings.
  2. Update and Security.
  3. Restore.
  4. Go to Advanced Startup, where you need to click on Restart Now.
  5. Click Troubleshooting.
  6. Advanced Settings.
  7. Now select UEFI Firmware Options.
  8. Restart.
  9. Open the boot/security settings page.
  10. You need to select Secure Boot – Enter.
  11. Now select Enabled – Enter.
  12. The last step is to confirm the changes to reboot the PC.

After all, this has been done, the security function will be enabled, and the device will meet all the Windows 11.

Enabling Secure Boot at Startup

An alternative option is to enable Secure Boot by first booting into the UEFI firmware at startup without using Settings.

To access the device firmware at boot, follow these steps:

  1. Press the power button.
  2. On the screen saver, you need to identify the key you need to enter the firmware.
  3. Press the button to enter the setup mode. Often the correct key is Esc, Delete, F1, F2, and F10.
  4. Open the boot/security settings page.
  5. Select Secure Boot – Enter.
  6. Choose Enabled – Enter.
  7. Exit UEFI settings.
  8. Now you have to confirm the changes to reboot the PC.
  9. By following the procedure, Secure Boot should provide support for Windows 11 installation.

Important: present the brands and their corresponding keys to access the firmware of the device:

  • Dell: F2/F12.
  • HP: Esc/F10.
  • Acer: F2/Delete.
  • ASUS: F2/Delete.
  • Lenovo: F1/F2.
  • MSI: Delete.
  • Toshiba: F2.
  • Samsung: F2.