How to enable Secure Boot to install Windows 11

Windows 11 was officially released this Tuesday (5), bringing with it an extensive range of features. However, not all users were able to install it easily and, among the various causes for this problem, the absence of “Secure Boot” stands out — required by the company to obtain the operating system, both through Windows Update and through ISOs.

Fortunately, this problem can be solved quite simply by activating the feature in the BIOS of the computer or notebook that will receive Windows 11. However, before starting, it is important to point out that the process may vary by manufacturer of each device and, therefore, it is recommended to check their respective support page in case of doubts. Below is a list of support links that may be useful as examples:

That said, check out a brief guide to enabling the feature and allowing Windows 11 to install.

What is Secure Boot and what is it for?

Secure Boot, or “Secure Boot” in Portuguese, is a security feature released in 2012 for devices based on the “Unified Extensible Firmware Interface” platform, popularly known as UEFI.

In short, its function is to prevent malware from infecting a device even before your system boots. This is possible through the authentication of trusted signatures present in the software and internal components of the machines, as well as their respective drivers, which are evaluated by the resource and released to function if approved.

It is worth noting that the feature does not encrypt a device’s components and does not require a “Trusted Platform Module”, the popular “TPM”, to function.

Enabling Secure Boot in PC BIOS

1. Accessing the BIOS

To get started, you need to access your PC’s BIOS. This can be done by pressing one of the possible hotkeys during PC startup, they are “F1”, “F2”, “F8”, “F9”, “F10”, “DEL” or even “ESC”, depending on established by the device manufacturer.

Alternatively, you can also gain access by browsing through Windows 10. In this case, open the “Settings” application and follow the path Update & Security > Recovery” and select the “Restart now” option, housed in the “Advanced startup” section.

Path to access the BIOS through the application “Settings”, in Windows 10. (Source: TecMundo)Source: TecMundo

Once the PC starts, follow the path “Troubleshoot > Advanced Options > UEFI Firmware Settings > Restart”. Then the BIOS splash screen will appear — continue there, check out the next topic, and use the keyboard to navigate as per the shortcuts described in the interface.

2. Enabling UEFI Boot

Next, the next step is to change the BIOS boot method. On most PCs, this option can be found in the “Boot”/”Boot” section of the home screen, where some manufacturers provide the options “Legacy” (also called “CSM”), “UEFI” or a hybrid alternative among the two. Select the “UEFI” option, as it is the only option that has Secure Boot.

Boot options in a device's BIOS.  (Source: Oracle / Reproduction)Boot options in a device’s BIOS. (Source: Oracle / Reproduction)Fonte:  Oracle

In some cases, it may be necessary to save changes and restart the device. To avoid inconsistencies, perform this step and access the BIOS again — either via shortcuts during PC startup or from Windows 10. When you complete this step, stay in the initial settings screen and proceed to the last topic.

3. Enabling Secure Boot / Secure Boot

Now, if the computer meets the necessary requirements, the option to enable Secure Boot will be available in the “Security”/”Security” section of the BIOS — if not, perform a firmware update and try again. Activate it and save changes before restarting the device.

Option to enable the "Secure Boot" in the BIOS of a Lenovo device.  (Source: Lenovo / Reproduction)Option to enable “Secure Boot” in BIOS of a Lenovo device. (Source: Lenovo / Reproduction)Source: Lenovo

After completing the process, you can check if the feature is activated by accessing the “System Information”. To do this, start the “Run” application by right-clicking on the “Windows” symbol in the Taskbar or by clicking the “Windows key + R” shortcut. Next, type “msinfo32” into the text field and hit “Enter”. If successful, the “Secure Boot Status” cell will be flagged as “Enabled”.

Ahead, just go ahead and install Windows 11. If you’re still in doubt, check out our review about the new operating system from Microsoft.

Leave a Comment