How To Enable Secure Boot For Windows 11

Windows xi has strict installation requirements. Microsoft demands that users enable Trusted Platform Module (TPM) and Secure Boot before they tin install Windows 11.

What Is Secure Boot?

Secure Boot is a characteristic found in all modern computer motherboards. It prevents third-party software and code from existence executed during the system boot.

With Secure Kicking enabled, the system only allows Original Equipment Manufacturer (OEM) and Microsoft signed software to run.

How to Cheque Secure Boot State on Windows ten

Before moving forward, we have to check the electric current state of your computer's Secure Boot. Follow these steps to discover out if you lot have information technology enabled.

Click on the Showtime button.
Type in Organization Information in the search and click the top result.
Click on Organization Summary to the left of the new window.
Expect for Secure Kick State to the right at the bottom of the list of your PC'due south specs.

If Secure Kick State is On and BIOS Mode UEFI, you don't need to alter anything.

However, if Secure Boot State is Off and BIOS Mode is UEFI, you can follow the instructions in the next section to enable Secure Kick.

Enable Secure Boot on Windows 10 So You Can Upgrade to Windows 11

Enabling Secure Boot requires access to your motherboard settings.

Beware that any incorrect configuration can prevent your computer from booting. Then do not change your motherboard settings unless strictly necessary.

The steps in this section assume you take a UEFI installation and UEFI BIOS way enabled.

If you're running on legacy BIOS style, yous may demand to convert your bulldoze from MBR to GPT. Yet, the conversion is unnecessary if you're performing a make clean install.

To enable Secure Boot on computers with UEFI on, follow these steps.

Click on the Windows button.
Click on the Setting icon.
Click on Update & Security.
Click on Recovery at the menu's lesser.
Click on Restart Now in the Advanced startup section.
Click on Troubleshoot later your computer restarts.
Click on Advanced options.
Click on UEFI Firmware Settings.
Restart to change UEFI firmware settings.
Open the kick or security page of your BIOS. (This page changes based on manufacturer and bios version)
Observe the Secure Boot pick and press enter.
Select Enabled and press enter.
Exit the menu.
Salvage your changes and reboot the figurer.

How to Enable Secure Boot on Startup

If you're having bug enabling Secure Kick through Windows recovery, you can directly turn it on during the arrangement boot.

Follow these steps to access your motherboard'south BIOS and enable Secure Boot.

Shut downward your computer.
Press the Power button to turn it back on.
You lot should see the motherboard'southward manufacturer splash screen.
Look for the primal you need to press to enter the BIOS.
Keep pressing the BIOS key until you enter setup style. (Some common keys to access the bios are Delete, Esc, F10, and F12)
Open the boot or security page, depending on the manufacturer.
Await for the Secure Kicking and press enter.
Select Enabled and printing enter.
Exit the menu.
Save your changes and reboot the computer.

If you can't identify the fundamental to access your motherboard's BIOS, check the manufacturer's manual to find the setup primal.

Converting MBR to GPT Segmentation

If you followed the previous steps and found out that the UEFI Firmware Settings were missing, your deejay partition style is Main Boot Record (MBR) and needs to be converted to GUID Sectionalization Table (GPT) to support UEFI.

Backup your data and follow these steps to convert your partition style.

Click on the Windows push.
Click on the Setting icon.
Click on Update & Security.
Click on Recovery at the menu'due south bottom.
Click on Restart Now in the Advanced startup department.
Click on Troubleshoot after your computer restarts.
Click on Advanced options.
Click on Command Prompt.
Select an administrative account. (We'll crave administrator privileges to convert the partitioning)
Type the mbr2gpt /validate command and press enter to validate the driver.
The control will return a Validation completed successfully bulletin if the disk is eligible.
Type the mbr2gpr /convert control and printing enter to brainstorm the conversion process.
Look for the Conversion completed successfully message to ensure proper conversion.
Blazon exit and printing enter to shut the window.
Restart your computer to utilise the changes.