To “get” Secure Boot, you don’t install it as software—you enable it in your PC’s UEFI/BIOS, as long as your hardware and Windows are compatible.

What Secure Boot Is

  • Secure Boot is a UEFI firmware feature that only allows trusted, signed bootloaders and drivers to run when your PC starts.
  • It helps block rootkits and some low-level malware, and is required by features like Windows 11’s “Secured-core” and some anti-cheat / game protections.

Check If You Already Have Secure Boot

On Windows 10/11:

  1. Press Windows key + R, type msinfo32, press Enter.
  1. In “System Information”, find “Secure Boot State”.
 * “On” → you already have Secure Boot enabled.
 * “Off” → it’s supported but disabled.
 * “Unsupported” → your system likely cannot use Secure Boot (legacy BIOS, old hardware, or CSM/Legacy mode).

Prerequisites Before Enabling

Make sure:

  • Your system is using UEFI (not Legacy/CSM) and the disk is GPT; older MBR/Legacy setups often break if you flip Secure Boot on.
  • You have a full backup of important files and a recovery drive before changing firmware settings.
  • Any very old operating systems (like Windows 7 or unsigned Linux distros) may not boot with Secure Boot enabled unless you configure custom keys or use a compatible shim.

How to Enable Secure Boot (General Steps)

The exact keys and menus differ by brand, but the flow is similar on most PCs.

  1. Restart into firmware setup
    • Restart your PC and repeatedly press the setup key when the logo appears. Common keys:
      • Dell: F2.
   * HP: F10.

   * ASUS: F2 or Delete.

   * Many others: Esc, F1, F12, or Del. It should be shown briefly on the splash screen.
  1. Switch to advanced/UEFI mode
    • If your firmware has an “Easy” and “Advanced” mode, switch to Advanced.
 * Find a section called **Boot** , **Security** , or **Advanced**.
  1. Disable CSM / Legacy Boot (if present)
    • Look for CSM , “Compatibility Support Module”, or “Legacy Boot”.
 * Set CSM/Legacy to **Disabled** so the firmware runs pure UEFI mode.

 * Warning: if Windows was installed in Legacy/MBR mode, this can make it unbootable until you convert the disk and reinstall or repair.
  1. Enable TPM if needed
    • Some “Windows 11 ready” firmwares expect TPM/”PTT” enabled along with Secure Boot.
 * This is usually under **Security** or **Trusted Computing**. Turn TPM/AMD fTPM/Intel PTT **On**.
  1. Turn on Secure Boot
    • In the Boot or Security tab, find Secure Boot.
 * Set Secure Boot to **Enabled**.
 * If there is an **OS Type** option, choose something like “Windows UEFI mode”.

 * If you see “Install Default Secure Boot Keys” or “Factory Keys”, choose that to load the standard vendor + Microsoft keys.
  1. Save and exit
    • Press the indicated key (often F10) to save changes and reboot.
  1. Verify in Windows
    • After boot, run msinfo32 again and confirm “Secure Boot State: On”.

Brand-Specific Notes (Quick)

From common vendor docs and guides, the naming is usually like this:

  • Dell
    • Tap F2 at boot → “Boot Configuration” → toggle Secure Boot → F10 to save.
  • HP
    • Tap F10 at boot → Advanced → “Secure Boot Configuration” → Enable Secure Boot → F10 to save.
  • ASUS
    • Tap F2/Delete at boot → Advanced Mode (F7) → Boot tab → Secure Boot → Enabled → F10 to save.

If You Get Errors or Windows Won’t Boot

Common issues:

  • Black screen / “No bootable device”:
    • Often means Windows is installed in Legacy/MBR mode and cannot boot with CSM disabled + Secure Boot on.
* You may need to:
  * Re-enable CSM/Legacy and disable Secure Boot to get back in, or
  * Convert the system to UEFI/GPT using tools and then reinstall or repair Windows.
  • Game launchers or anti-cheat still complaining:
    • Double-check msinfo32 “Secure Boot State: On”, and ensure there isn’t a “User mode” vs “Standard mode” limiting keys on some firmwares.

Quick SEO-Focused Notes

  • Focus keyword “how to get secure boot ” maps to enabling Secure Boot in UEFI, not downloading it; it is a firmware feature provided by your motherboard and CPU platform.
  • As of late 2025 and early 2026, Secure Boot is still a trending requirement for Windows 11, many anticheats, and some EA games and launchers.

If your firmware menus look very different or you’re afraid of changing boot settings, the safest move is to photograph each page before changing anything so you can undo it if needed.

TL;DR: You “get” Secure Boot by using a UEFI-capable PC, booting into firmware setup, disabling CSM/Legacy, enabling Secure Boot with default keys, then confirming “Secure Boot State: On” in msinfo32—not by installing an app.