How To Enable Secure Boot On Windows 10/11 To Protect Your PC Against Malicious Software.

How to Enable Secure Boot on Windows 10 or 11

Introduction

Secure boot adds an extra layer of security by verifying that only trusted programs launch during bootup. It helps prevent malware, root kits, and other malicious software from taking control before the OS loads.

Pros and Cons

• Pros: Enhances system security and stability.
• Cons: Restricts installation of older Windows versions (e.g., Windows 7) and alternative OS like Linux, and some unsigned programs or drivers.

Checking Current Secure Boot State

1. Click the Start menu.
2. Type "System Information" and press Enter.
3. Look for the "Secure Boot State" item to check if it is enabled or disabled.

Entering UFI BIOS from Windows

• Windows 11:
  1. Open Settings.
  2. Click System > Recovery > Restart Now (under Advanced startup).
• Windows 10:
  1. Open Settings.
  2. Click Update & Security > Recovery > Restart Now (under Advanced startup).

Configuring Secure Boot in UFI BIOS

1. Enter advanced startup options and select "Troubleshoot" > "Advanced Options" > "UFI Firmware Settings" > Restart.
2. On BIOS, locate "Compatibility Support Module (CSM)" under Boot settings.
   • CSM must be disabled as secure boot only works in UFI mode.
3. Find the "Secure Boot" option under Boot or Security settings.
4. Configure Secure Boot:
   • OS Type: Set to Windows UFI mode.
   • Secure Boot Mode: Choose Standard or Custom.
     • If Custom, open Key Management to install default keys or create your own.
5. Save changes and restart PC.

Verifying Secure Boot is Enabled

1. Open "System Information."
2. Verify "Secure Boot State" is enabled.

Conclusion

This guide walks you through enabling secure boot on a Windows PC, enhancing security by ensuring only trusted software loads during bootup.