How to Enable Secure Boot to Install Windows 11

Reboot to BIOS and look for the Secure Boot toggle

By
Jon Martindale
Headshot of Jon Martindale
Jon Martindale
Writer
    Jon Martindale has been a feature tech writer for more than 10 years. He's written for publications such as Digital Trends, KitGuru, and ITProPortal.
    lifewire's editorial guidelines
    Updated on December 18, 2023
    Reviewed by
    Ryan Perian
    Ryan Perian headshot
    Reviewed by Ryan Perian
    • Western Governors University
    Ryan Perian is a certified IT specialist who holds numerous IT certifications and has 12+ years' experience working in the IT industry support and management positions.
    lifewire's editorial guidelines

    What to Know

    • Access your UEFI/BIOS during startup using your system's specific key.
    • Search for Secure Boot among Security and Boot menus and set it to Enable.
    • You should now be able to proceed with your Windows 11 install.

    This article explains how to enable Secure Boot in your UEFI/BIOS so you can proceed with installing Windows 11.

    How Do I Enable Secure Boot?

    The most straightforward way to enable Secure Boot is to do so through the UEFI/BIOS. It's typically listed as one of the many options within that utility, so you can enable it simply by turning it on.

    1. Access UEFI/BIOS by restarting your PC and then pressing the right key that launches the utility. The key varies between systems, but common ones include Del, F2, and F10.

    2. If your UEFI/BIOS has a limited and advanced mode, switch to the Advanced mode.

    3. Look for a tab at the top of the screen that says Boot or Security. The Secure Boot option is likely within one of those menus.

      The motherboard being used for the purpose of this guide is an ASROCK B450M Pro 4. It has both a Security and Boot section, with the Secure Boot option being located in the Security menu. The location of Secure Boot in your UEFI/BIOS may vary.

    4. Look through the list of options in the current tab you're searching for until you find the Secure Boot option. If you can toggle it directly, select it, and choose Enable.

      Alternatively, if Secure Boot has its own submenu, navigate to that first, before selecting to enable it.

    5. If your UEFI/BIOS has a shortcut key for saving changes, press it. Alternatively, navigate to the Save and Exit tab and select Save.

    6. When you are satisfied that Secure Boot has been enabled, press the shortcut key to save and exit, or alternatively, navigate to the Save and Exit menu (or equivalent) and select Save and Exit. If asked to confirm you want to save, do so.

    Is Secure Boot Disabled?

    The easiest way to see if Secure Boot is disabled is to check System Information.

    1. Press Win+R to open the Run dialog box.

    2. Type msinfo32 and press Enter.

    3. From the System Summary tab, look for Secure Boot State on the right side. If it says Off, then Secure Boot is disabled.

      Secure Boot State highlighted in System Information
    FAQ
    • What if I can't enable Secure Boot in the UEFI/BIOS?

      If you can't find the Secure Boot option within your UEFI/BIOS, it's possible your system is too old to offer that functionality. It may be, however, you can enable that option by upgrading your UEFI/BIOS firmware. To see if that's possible, visit the website of your system or motherboard manufacturer, and see if there's an appropriate update for your device.

    • How do I disable Secure Boot?

      You can turn off Secure Boot using the same process as above. Follow Steps 1-3 to enter your BIOS, and then select Disable to turn it off.

    Was this page helpful?