How to Turn On Secure Boot in Windows 11: A Step-by-Step Guide

By / September 8, 2025

Windows 11 has introduced stricter system requirements compared to its predecessors, and one of the most important among them is Secure Boot. If you’ve tried installing or upgrading to Windows 11, you’ve probably noticed that Microsoft requires Secure Boot to be enabled.

But what exactly is Secure Boot? Why is it important? And how can you turn it on if it’s disabled on your PC? Don’t worry—I’ll walk you through everything in this step-by-step guide.

What is Secure Boot?

Secure Boot is a security feature built into modern PCs with UEFI (Unified Extensible Firmware Interface). Its main job is to ensure that only trusted operating systems and drivers load when you start your computer.

Think of Secure Boot like a security guard at the entrance of your PC—it checks everyone (software, drivers, firmware) before allowing them inside. If something suspicious tries to sneak in, Secure Boot blocks it.

Why is Secure Boot Important in Windows 11?

Microsoft made Secure Boot mandatory in Windows 11 for several reasons:

  • Prevents Malware Attacks: Stops rootkits and bootkits from hijacking your system during startup.

  • Ensures System Integrity: Verifies that the operating system hasn’t been tampered with.

  • Required for Windows 11 Installation: Without Secure Boot, you may not pass the system requirements check.

  • Better Compatibility: Works with TPM 2.0 to provide advanced security features.

How to Check if Secure Boot is Enabled

Before we jump into enabling Secure Boot, let’s check its status on your PC.

Method 1: Using System Information Tool

  1. Press Windows + R, type msinfo32, and hit Enter.

  2. In the System Information window, look for Secure Boot State.

    • If it says On → Secure Boot is already enabled.

    • If it says Off → Secure Boot is disabled.

    • If it says Unsupported → Your hardware doesn’t support Secure Boot.

Method 2: Using Windows Security Settings

  1. Open Settings > Update & Security > Windows Security.

  2. Click Device Security.

  3. Under Secure Boot, you’ll see if it’s enabled or not.

Requirements for Enabling Secure Boot

Before enabling Secure Boot, make sure you have the following:

  • A UEFI-based motherboard (not Legacy BIOS).

  • TPM 2.0 enabled (also required by Windows 11).

  • A compatible Windows installation (some older operating systems may not boot with Secure Boot enabled).

How to Enable Secure Boot in Windows 11

Enabling Secure Boot requires entering your computer’s UEFI firmware (BIOS) settings. Don’t worry—it sounds scary, but it’s straightforward if you follow the steps.

Step 1: Restart and Enter BIOS/UEFI

  1. Click Start > Power > Restart.

  2. While your PC is booting, press the specific key to enter BIOS (usually F2, F10, F12, Del, or Esc depending on the manufacturer).

    • ASUS: F2 or Del

    • Dell: F2

    • HP: Esc or F10

    • Lenovo: F1 or F2

    • MSI: Del

Step 2: Switch from Legacy BIOS to UEFI (If Needed)

If your system is using Legacy BIOS, Secure Boot won’t work.

  1. In BIOS, look for Boot Mode or UEFI/Legacy Boot.

  2. Change the setting to UEFI Only.

  3. Save changes and restart.

⚠️ Important: If Windows is installed in Legacy mode, you may need to convert your disk from MBR to GPT before switching to UEFI. (Windows has a built-in tool mbr2gpt for this.)

Step 3: Locate Secure Boot Settings

  1. In BIOS, navigate to the Boot, Security, or Advanced tab (varies by manufacturer).

  2. Look for Secure Boot.

  3. If Secure Boot is Disabled, change it to Enabled.

Step 4: Configure Secure Boot Keys (If Needed)

Sometimes, Secure Boot won’t enable until you set default keys.

  1. Under Secure Boot settings, find Install Default Keys or Reset to Factory Keys.

  2. Apply the changes.

  3. Save and exit BIOS.

Step 5: Save and Restart

Once you enable Secure Boot:

  1. Press F10 (or the key for “Save and Exit” on your BIOS).

  2. Restart your computer.

  3. Windows should now boot normally with Secure Boot enabled.

Troubleshooting Secure Boot Issues

Sometimes, enabling Secure Boot can cause problems. Here’s how to fix them:

1. Secure Boot Option is Grayed Out

  • Make sure UEFI mode is enabled.

  • Convert your disk to GPT if it’s still MBR.

2. Windows Doesn’t Boot After Enabling Secure Boot

  • Your OS may not support Secure Boot (e.g., Windows 7).

  • Boot into BIOS again and disable Secure Boot.

3. Secure Boot Says “Unsupported”

  • Unfortunately, this means your hardware is too old to support it.

How to Disable Secure Boot (If Needed)

Sometimes you may need to disable Secure Boot—for example, if you want to install Linux or older Windows versions.

Steps:

  1. Enter BIOS using your system’s key.

  2. Navigate to Secure Boot.

  3. Change setting from Enabled to Disabled.

  4. Save and exit.

Benefits of Enabling Secure Boot

  • Stronger protection against malware.

  • Ensures your system meets Windows 11 requirements.

  • Provides compatibility with new apps and features.

  • Works hand-in-hand with TPM for better encryption and security.

Risks of Disabling Secure Boot

  • Leaves your system open to boot-level malware attacks.

  • Some apps and games with anti-cheat may refuse to run.

  • May prevent you from installing Windows 11 updates in the future.

Conclusion

Secure Boot is more than just a Windows 11 requirement—it’s a powerful security feature that helps protect your computer from hidden malware attacks. Enabling it may feel technical, but once you understand the steps, it’s simple and safe.

By following this guide, you can check if Secure Boot is enabled, turn it on via BIOS/UEFI, and troubleshoot common issues. While it’s possible to run Windows without Secure Boot, enabling it ensures better security, compatibility, and compliance with Microsoft’s latest OS.

FAQs

Q1: Is Secure Boot required for Windows 11?
Yes, Microsoft requires Secure Boot to be enabled for Windows 11 installation.

Q2: Will enabling Secure Boot erase my data?
No, it won’t delete files. However, if you switch from Legacy to UEFI, you may need to convert your drive from MBR to GPT.

Q3: Can I install Linux with Secure Boot enabled?
Yes, many Linux distributions support Secure Boot, but some may require disabling it.

Q4: My Secure Boot option is missing—what should I do?
Check if your motherboard supports UEFI. If it only supports Legacy BIOS, Secure Boot won’t be available.

Q5: What happens if I disable Secure Boot after enabling it?
Windows 11 will still run, but you may lose certain security protections and could face issues with future updates.

Related Posts:

Scroll to Top