Guide to Checking and Enabling SecureBoot

As Windows 10 reaches the end of its support life, many users are exploring the upgrade to Windows 11. However, this new operating system comes with stringent hardware requirements, including the necessity for a Trusted Platform Module (TPM) and Secure Boot.

Secure Boot, first introduced in conjunction with Windows 8 in 2012, is a crucial element of UEFI (Unified Extensible Firmware Interface).Its primary purpose is to ensure that your system boots up using authorized and trusted firmware and bootloaders. Although most contemporary PCs support Secure Boot, many have it disabled by default. This was manageable during the Windows 10 era, but with the arrival of Windows 11, having Secure Boot disabled could prevent you from upgrading.

Moreover, Secure Boot is now a requirement for certain video games as advanced anti-cheat systems depend on low-level security features. Popular titles such as the latest entries in the Call of Duty and Battlefield series will not launch unless your system has both TPM and Secure Boot activated.

Checking Your Secure Boot Status

To quickly verify if Secure Boot is enabled on your system, press Win + R and type msinfo32, then hit Enter. In the default view under the System Summary tab, look for the Secure Boot State. If it indicates Yes, Secure Boot is enabled and you are all set.

How to check if SecureBoot is enabled in Windows

Another method involves running PowerShell as an administrator. Here, type Confirm-SecureBootUEFI and press Enter. The response will be either True (indicating Secure Boot is enabled) or False (indicating it is not).

If you have the Steam client installed, you can confirm Secure Boot status by navigating to Help > System Information. Scroll to the Operating System section to see the Secure Boot status.

You could also utilize the third-party tool, WhyNotWin11, which you can download for free from GitHub. This app not only checks Secure Boot status but also examines whether your hardware meets Windows 11’s other requirements. It offers additional information and insights to assist users in resolving compatibility issues, making it especially useful for those less familiar with technical specifications.

How to Enable Secure Boot

If your system shows that Secure Boot is disabled, the only way to enable it is through your BIOS/UEFI settings. Restart your computer and access UEFI (usually, pressing the Del key works, but be sure to check your specific user manual if needed).Many modern motherboards provide both a standard and an expert mode, where vital settings such as TPM and Secure Boot might be found.

Keep in mind that UEFI interfaces can differ based on the motherboard brand and model. Typically, you will want to locate settings related to Boot. Look specifically for Secure Boot within this section and change it to enabled. Be sure to save your changes and restart your system.

Note: Enabling Secure Boot on a system that solely runs Windows—without modifications—should not impact your existing installation. However, on dual-boot systems that include Linux or modified versions of Windows, enabling Secure Boot could potentially cause booting complications.

After enabling Secure Boot, you can recheck its status using any of the previously mentioned methods. If Secure Boot was the sole barrier to upgrading to Windows 11 or running certain games, you should now be able to proceed with the upgrade and launch your games without further issues.

Source & Images