US Trends

how to enable secure boot state windows 11

To enable Secure Boot for Windows 11, you must access your PC's UEFI firmware settings, as this feature is managed at the hardware level rather than through Windows software. Secure Boot ensures that your device only boots using trusted software, which is a core security requirement for Microsoft's latest operating system.

Quick Status Check

Before restarting, verify whether Secure Boot is already active on your system:

  1. Press the Windows Key , type msinfo32 , and press Enter.
  1. In the System Summary , find the Secure Boot State.
  1. If it says On , you are already protected; if it says Off , proceed with the steps below.

Accessing UEFI Settings

Since the process varies by manufacturer, the most reliable way to enter these settings from within Windows 11 is through the Recovery menu:

  • Go to Settings > System > Recovery.
  • Click Restart now next to Advanced startup.
  • Once the blue menu appears, navigate to Troubleshoot > Advanced options > UEFI Firmware Settings and click Restart.

Enabling Secure Boot in Firmware

Once your computer restarts into the BIOS/UEFI interface, follow these general steps:

  • Locate Security or Boot Tabs: Look for a menu labeled "Security," "Boot," or "Authentication".
  • Disable CSM: If you see a setting for CSM (Compatibility Support Module) or Legacy Boot , you must set it to Disabled ; Secure Boot cannot run while these are active.
  • Toggle Secure Boot: Find the Secure Boot option and change it from Disabled to Enabled.
  • Save and Exit: Press F10 (on most systems) to save your changes and restart your computer.

Troubleshooting Common Issues

Issue| Cause| Solution
---|---|---
Option Greyed Out| Administrative password or "User Mode"| Set a BIOS supervisor password or change Secure Boot from "Custom" to "Standard" 110.
Legacy BIOS Mode| Old partition style (MBR)| Your drive must be GPT; use the mbr2gpt tool to convert it before switching to UEFI mode 13.
Active but Off| Factory keys not installed| Select "Restore Factory Keys" or "Install Default Secure Boot Keys" within the UEFI menu 10.

Information gathered from public forums or data available on the internet and portrayed here.