How to Enable Secure Boot on Windows 11: A Simple Aussie Guide

How to Turn On Secure Boot for Windows 11

Getting Secure Boot sorted on Windows 11 isn’t just a tick-the-box job — it’s an important step to tighten up your system’s security. If your PC’s been a bit dodgy lately, or some apps are playing up after updates, turning on Secure Boot could do the trick. Here’s how to do it, even if it takes a couple of goes to get through those confusing settings.

First up, to access the UEFI firmware settings, you’ll need to restart your PC. This part can be a bit tricky. You’ve got to press a specific key pretty much right when your machine boots up — usually it’s F2, F10, or DEL. It’s a bit of a race; miss the timing and you’re back in Windows, ready to try again. Some systems show a quick prompt with the key you need, but don’t rely on it — you might need to keep trying if your timing’s off.

If that method drives you mad, there’s an easier way through Windows 11 itself:

• Open Settings via Start > Settings.
• Go to System > Recovery.
• Under Advanced startup, click Restart now.
• When it restarts, pick Troubleshoot > Advanced options > UEFI Firmware Settings, then hit Restart.

Once you’re in UEFI, get ready for an interface that might feel a bit ancient. Use the arrow keys to navigate — the mouse isn’t always supported here. Find the “Boot” tab. Depending on your motherboard, it could look a bit different, so don’t stress if it looks a bit foreign. Usually, Secure Boot options are in the Boot section, but sometimes you’ll need to do a bit of digging.

Now, for the tricky part: finding the “Secure Boot” toggle. It might be tucked away under a submenu or not immediately obvious. You want to switch it from “Disabled” to “Enabled.” If it’s not there at all? That’s frustrating, but it usually means your system is still running in Legacy mode — not UEFI. Switching modes isn’t a simple flip of a switch and can affect your drive’s boot info or even wipe data if you’re not careful.

To switch from Legacy to UEFI:

• Look for an option called Boot Mode or Boot Type.
• Change it from Legacy to UEFI.
• Heads up: If your disk is formatted as MBR, you’ll need to convert it to GPT using the mbr2gpt.exe tool accessible via an admin Command Prompt:

mbr2gpt /convert /allowmbr /region:0

After saving your changes — usually by pressing F10 — and exiting, your PC will restart. Fingers crossed, Secure Boot will now be enabled. Just be careful — changing other settings can cause boot headaches or other issues that might need more troubleshooting to fix.

Once you’re back up and running, it’s a good idea to double-check if Secure Boot’s actually turned on. Type msinfo32 into the Windows search bar and hit Enter. Look for “Secure Boot State.” If it says “On,” you’re all set — your system’s now extra secure. If it’s not, you’ll need to go back and see what went pear-shaped.

You can also check via Command Prompt with:

PowerShell or Command Prompt (Admin):

Confirm Secure Boot status:
> bcdedit /enum {current} | find "SecureBoot"

If you see "SecureBoot = On," you’re good to go!

Or try this in PowerShell:

Get-SecureBootPolicy

Note: The Get-SecureBootPolicy cmdlet works on Windows 10 and 11 versions that support managing Secure Boot through PowerShell.

Getting Secure Boot up and running makes your Windows 11 machine tougher against malware and dodgy software. It’s not just about ticking boxes — it’s about adding extra layers of security, because all those small details really count in the digital world.

If this encourages someone to be a bit safer online, then happy days. A few hours saved for someone out there — spread the word!

• Check UEFI for Secure Boot options.
• Make sure you’re not on Legacy mode.
• Don’t forget to save your changes!
• Use msinfo32 to double-check Secure Boot is on.