To enable Secure Boot on Windows 10, follow these steps:
- Check Current Status:
- Open the Run dialog (Windows Key + R), type "msinfo32", and press Enter.
- In the System Information window, look for "Secure Boot State." If it says Off, proceed to enable it.
- Access UEFI Firmware Settings:
- Open Settings > Update & Security > Recovery.
- Under Advanced Startup, click "Restart now."
- After restart, go to Troubleshoot > Advanced options > UEFI Firmware Settings, then Restart.
- Configure BIOS/UEFI:
- On reboot, enter BIOS/UEFI by pressing the key shown on your screen (commonly Delete, F2, or F10).
- Navigate to the Boot tab and disable CSM (Compatibility Support Module) to enable UEFI mode.
- Find Secure Boot settings and enable Secure Boot.
- Set OS type to "Windows UEFI mode" and Secure Boot mode to "Standard."
- If needed, install default Secure Boot keys.
- Save and Exit:
- Save changes and exit BIOS/UEFI setup (usually by pressing F10).
- The computer restarts; check again in System Information that Secure Boot State is On.
Additional Notes:
- Your system drive must use the GPT partition style for Secure Boot to work.
- If your BIOS mode is Legacy, you may need to convert your disk from MBR to GPT before enabling Secure Boot.
- The exact steps can vary by manufacturer; consult your PC or motherboard manual if unsure.
This process ensures your Windows 10 PC boots only using trusted software, enhancing security against malware and unauthorized code execution during startup.