Secure Boot in Windows 11 protects your computer from malware by disallowing it to capture the boot process. With the Secure Boot enabled on your computer, the system will check the software for authorisation from the manufacturer. If the software happens to be non-authorised, the boot process will not go forward.
Secure Boot is a Unified Extensible Firmware Interface (UEFI) security standard. UEFI is a pre-operating system software responsible for initiating hardware components on your device. The fundamental function of Secure Boot lies in validating the digital signatures of bootloaders and drivers loaded during the boot process.
In cases where the software lacks trust from the manufacturer, Secure Boot intervenes, blocking it and issuing an error message. Thus, Secure Boot shields the computer against boot kits, a form of malware that infiltrates the bootloader, eluding detection by antivirus software. Bootkits can alter the boot process, injecting malicious code into the system memory, thereby enabling hackers to attain complete control over the computer.
Secure Boot is also one of the conditions for installing Windows 11. In this article, we’ll explain how to enable Secure Boot in Windows 11.
Also read: Does Windows 11 need Antivirus?
Enable Secure Boot in Windows 11
Now that we have understood what Secure Boot is and why it is important for your device’s security, let us understand how to enable it.
But before that, you should know if the Secure Boot is already enabled. Here’s how to do that:
Step 1: Head to the taskbar search bar and type System Information. Then click on the result.
Step 2: Locate Secure Boot State and see what’s written before it. As you can see from the screenshot below, the Secure Boot State is Off on my device.
If you’re also seeing Off written in front of Secure Boot State, here’s what you should do to enable it:
Step 1: Shut down your computer and then press the power button again to restart it. Press F2, F12, or Delete when the computer starts to get to the BIOS. It depends on your device manufacturer. In case of confusion, head to your computer manufacturer’s website to check the BIOS key.
Step 2: To locate the Secure Boot, head to Security Settings. This will also depend on your manufacturer. Or, go to Secure Boot and change it to Enabled. Press on Save and Exit.
Easy right? The only catch is that the BIOS settings differ according to the manufacturer and device model. You may have to check with your device manufacturer or your computer’s booklet to know the exact process.
Also read: How to check CPU temperature in Windows 11?
