As part of the system requirements, alongside a Trusted Platform Module (TPM), a device must have “Secure Boot” enabled to install Windows 11.
Secure Boot is a security feature available on most modern hardware with UEFI firmware to provide a secure environment to start Windows and prevent malware from hijacking the system during the boot process. In other words, Secure Boot allows the computer to boot only with trusted software from the Original Equipment Manufacturer (OEM).
This article explains how to enable Secure Boot in your UEFI/BIOS so you can proceed with installing Windows 11.
How Do I Enable Secure Boot?
Using UEFI/BIOS is the most straightforward way to enable Secure Boot. It’s typically listed as one of the many options within the BIOS, so you can enable it simply by turning it on.
1. Startup, or restart your PC or laptop, and as soon as it starts to power on, repeatedly press the keyboard command to input the UEFI/BIOS. This is specific to your motherboard or system manufacturer, so the actual key can vary, but common ways include Del, F2, F10, F11, and F12.
2. Refer to your motherboard or system manual for specific instructions on how to access the UEFI/BIOS, you can also check your manufacturer’s website and use the Windows Boot Manager if you wish.
3. You can also switch to the Advanced mode if your UEFI/BIOS has a limited and advanced mode.
4. Look for a tab at the top of the screen for Boot, or Security. The Secure Boot option is likely within one of those menus.
5. The motherboard being used for the purpose of this guide and the screenshots is an ASROCK B450M Pro 4. It has both a Security and Boot section, with the Secure Boot option being located in the Security menu. The location of Secure Boot in your UEFI/BIOS may vary.
6. Look through the list of options in the current tab you’re searching for until you find the Secure Boot option. If you can toggle it directly, select it, and select Enable.
7. Alternatively, if Secure Boot has its own submenu, navigate to that first, before selecting to enable it.
8. If your UEFI/BIOS has a shortcut key for saving changes, press it. Alternatively, navigate to the Save and Exit tab, and select Save.
9. When you are satisfied that Secure Boot has been enabled, press the shortcut key to save and exit, or alternatively, navigate to the Save and Exit menu (or equivalent) and select Save and Exit. If asked to confirm you want to save, do so.
