US Trends

how to turn on secure boot state windows 11

To turn on the Secure Boot state in Windows 11 , you must enable Secure Boot in your PC’s UEFI/BIOS firmware and make sure the system is using UEFI (not Legacy/CSM) with a GPT disk.

Below is a friendly, SEO‑ready “Quick Scoop” style guide for your post.

How to Turn On Secure Boot State in Windows 11

Secure Boot helps Windows 11 block untrusted bootloaders, rootkits, and low‑level malware by allowing only trusted, signed code during startup. Many users discover it only when Windows 11, anti‑cheat, or security features complain that “Secure Boot is not enabled.”

Quick Scoop

  • Goal: Change Secure Boot State from Off/Unsupported to On in Windows 11.
  • Where it’s done: In your PC’s UEFI/BIOS firmware, not inside normal Windows settings.
  • Must‑haves:
    • UEFI firmware (not Legacy BIOS/CSM).
* System disk formatted as GPT, not MBR.
  • Outcome: “Secure Boot State” shows On in System Information once correctly enabled.

This topic keeps popping up in Windows and gaming forums because new requirements (Windows 11, anti‑cheat, kernel‑level security) lean heavily on Secure Boot, especially through 2024–2025.

Step 1: Check Secure Boot State in Windows 11

First confirm what Windows thinks about your Secure Boot state.

  1. Press Windows + R , type msinfo32, and press Enter.
  1. In System Summary , find Secure Boot State.
  1. Also check BIOS Mode right above it.

You’ll typically see one of these:

What System Information Shows Meaning
Secure Boot State: On Secure Boot already enabled; no further action needed.
Secure Boot State: Off Firmware supports it, but it’s currently disabled.
Secure Boot State: Unsupported System is usually in Legacy/CSM mode or lacks required firmware features.
BIOS Mode: UEFI Good: system can use Secure Boot.
BIOS Mode: Legacy Secure Boot cannot work until you switch to UEFI and use GPT.
[3][5] If you already see **Secure Boot State: On** , your “Secure Boot state Windows 11” requirement is satisfied.

Step 2: Enter UEFI/BIOS Firmware Settings

To actually turn Secure Boot on, you must reboot into the firmware menu:

  • In Windows 11:
    1. Hold Shift and click Restart from the Start menu power icon.
2. Choose **Troubleshoot → Advanced options → UEFI Firmware Settings → Restart**.
  • Alternatively (classic way):
    • As the PC powers on, repeatedly tap Del , F2 , F10 , or Esc depending on your motherboard brand.

Once inside, most modern boards offer an Advanced/Expert mode where Secure Boot, CSM, and TPM settings live.

Step 3: Enable UEFI Mode and Disable Legacy/CSM (If Needed)

If Windows shows BIOS Mode: Legacy or Secure Boot State: Unsupported, Secure Boot will remain unavailable until the system boots in pure UEFI mode with a GPT disk.

Inside your firmware:

  • Look for a Boot or Advanced tab.
  • Find options like:
    • Boot Mode / OS Type / CSM Support / Legacy Support.
  • Typical changes:
    • Set Boot Mode to UEFI Only.
* Disable **CSM** or **Legacy Boot** entirely.

If your system disk is still MBR , many guides show using Microsoft’s mbr2gpt tool to convert to GPT before switching to UEFI, so Windows remains bootable. (Always back up important data first.)

Step 4: Turn On Secure Boot in Firmware

Once the system is in UEFI mode and CSM/Legacy is disabled, the Secure Boot option becomes usable.

In UEFI settings:

  1. Open the Boot , Security , or Authentication tab (wording differs by vendor).
  1. Find Secure Boot. It may be under a sub‑menu like Secure Boot Configuration.
  1. Change:
    • Secure Boot → Enabled.
 * If you see a mode such as **Standard / Custom** , choose **Standard** to load default keys.
  1. Press F10 or choose Save & Exit to reboot.

Some boards require you to first set a platform key (PK) or select an option like Install default Secure Boot keys , which loads the vendor’s trusted database.

Step 5: Confirm Secure Boot State is On

Back in Windows 11:

  1. Open System Information again (msinfo32).
  1. Check:
    • Secure Boot State: should now show On.
 * **BIOS Mode:** should show **UEFI**.

At this point, you’ve successfully turned on Secure Boot state Windows 11 , and apps, games, and Windows features that require it should stop complaining.

Common Issues and Forum‑Style Tips

Secure Boot troubles are a recurring forum discussion and a trending topic whenever big Windows 11 updates or anti‑cheat changes roll out.

Some of the most common scenarios:

  • “Secure Boot State: Unsupported” even on a modern board
    • Often caused by:
      • Legacy/CSM still enabled.
  * System booting from an MBR disk instead of GPT.
  • Secure Boot enabled in BIOS but Windows still reports Off
    • Users report this mismatch when:
      • Boot order points to an old/legacy entry.
  * Custom keys or unusual bootloaders are in use.
  • Secure Boot option greyed out
    • Guides suggest:
      • Enable UEFI first, then disable CSM, and only then does Secure Boot become editable.

These patterns appear frequently across tech support subreddits and YouTube tutorials focused on fixing the “Secure Boot state unsupported/off” message in Windows 11 and 10.

Why Secure Boot Matters in 2025–2026

Secure Boot has become more central in recent years:

  • Windows 11 baseline: Microsoft lists Secure Boot (plus TPM 2.0) as a core requirement for supported systems.
  • Gaming & anti‑cheat: Several modern anti‑cheat systems and kernel‑level protections prefer or require Secure Boot to reduce kernel tampering.
  • Security hardening: It blocks unsigned or tampered bootloaders, making rootkits and early‑boot malware much harder to deploy.

As long as hardware supports UEFI and GPT, enabling Secure Boot is one of the simplest ways to raise your Windows 11 security baseline.

Meta description (SEO):
Learn how to turn on Secure Boot state in Windows 11 with a step‑by‑step guide covering UEFI/BIOS settings, GPT/MBR checks, and common “Unsupported/Off” fixes, plus the latest forum discussion context.

Information gathered from public forums or data available on the internet and portrayed here.