How to enable Secure Boot in Windows 11

Enabling Secure Boot in Windows 11 enhances the security of your system by ensuring that only trusted software can be run during the startup process. Here’s a detailed guide on how to enable Secure Boot on your Windows 11 PC:

Step 1: Access UEFI/BIOS Settings

To enable Secure Boot, you need to access your computer’s UEFI or BIOS settings. The method to enter these settings varies depending on your computer manufacturer and model.

• Typically, you can access the UEFI/BIOS settings by restarting your computer and pressing a specific key or combination of keys as soon as it starts booting. Common keys include F2, F12, Delete, Esc, or Enter. However, this can vary greatly between different manufacturers.
• On some systems, especially those running Windows 11, you might find an option within Windows itself:
• Go to Settings > Update & Security > Recovery.
• Under Advanced startup, click Restart now.
• After your PC restarts, go to Troubleshoot > Advanced options > UEFI Firmware Settings, then click Restart.

Step 2: Navigate to Secure Boot Settings

Once you’re in the UEFI/BIOS setup utility:

1. Use the arrow keys to navigate through the tabs or menus until you find the Security tab or a similar section that includes security-related settings.
2. Look for an option named Secure Boot. This may be under a Security, Boot, or Authentication tab depending on your motherboard manufacturer.

Step 3: Enable Secure Boot

1. Highlight the Secure Boot option and change its setting from Disabled to Enabled.
2. Some systems may require you to set a Platform Key (PK) or perform other actions to fully enable Secure Boot. Follow the on-screen instructions if prompted.

Step 4: Save Changes and Exit

After enabling Secure Boot:

1. Navigate to the Exit menu within the UEFI/BIOS settings.
2. Select Save changes and exit or a similarly named option.
3. Confirm any prompts to save and apply your changes before exiting.

Step 5: Verify Secure Boot Status in Windows

Once back in Windows 11, you can verify that Secure Boot is enabled:

1. Open a Command Prompt window with administrative privileges (Win + X and select Windows Terminal (Admin)).
2. Type the following command and press Enter:

   mscinfo

Alternatively, you can use:

   Confirm-SecureBootUEFI

If Secure Boot is enabled, this command will return True.

Important Notes

• Compatibility: Ensure that your hardware supports Secure Boot. Most modern PCs do, but older systems might not.
• Operating System Support: Secure Boot requires that your operating system supports it. Windows 11 does support Secure Boot, so there shouldn’t be issues here.
• Reinstallation of Operating Systems: Enabling Secure Boot could prevent unsigned operating systems from booting. Make sure all your operating systems are signed and compatible with Secure Boot if you have multiple OS installations.

By following these steps, you should be able to successfully enable Secure Boot on your Windows 11 machine, enhancing its security against unauthorized firmware and malware attacks.