Secure Boot not being enabled means your system is not currently using the Secure Boot feature in the BIOS/UEFI firmware settings. To enable it, you typically need to:
- Enter BIOS/UEFI setup (commonly by pressing F2, Delete, or Esc on startup).
- Disable Compatibility Support Module (CSM) or set BIOS to UEFI mode.
- Navigate to the Secure Boot section in BIOS.
- Set OS Type to "Windows UEFI mode" or equivalent.
- Enable Secure Boot and, if necessary, restore or install default Secure Boot keys.
- Save and exit BIOS. After reboot, check "Secure Boot State" in system information for confirmation.
If Secure Boot is enabled in BIOS but not recognized by Windows, ensure Windows is installed in UEFI mode, your UEFI firmware is updated, and there is no interfering software blocking Secure Boot functionality. These steps may vary slightly by manufacturer and BIOS version but generally follow this pattern to enable Secure Boot successfully.