How to Enable Secure Boot in Windows

What Secure Boot does for a gaming PC

Secure Boot is a security standard built into the UEFI firmware of modern motherboards. For gaming PCs, it adds protection without affecting performance. When enabled, it checks that every piece of software loaded during the boot process, from the firmware itself to the operating system kernel, carries a valid digital signature. If a piece of code is unsigned or signed by an untrusted source, the system halts the boot. This stops rootkits and other low-level malware from taking control before Windows loads.

Secure Boot does not interfere with game performance or frame rates, but it helps ensure that the environment where games run is secure. Windows 11 requires that the system firmware be Secure Boot capable, as stated in the official system requirements. When shopping for a new prebuilt gaming PC, check that it lists Secure Boot support and TPM 2.0 in its specifications.

What you need before enabling Secure Boot

Before you can enable Secure Boot, your gaming PC must meet a few conditions. The motherboard must use UEFI firmware rather than legacy BIOS. Most systems built in the last several years ship with UEFI. The firmware must also support Secure Boot, which is standard on UEFI 2.3.1 or later. Additionally, Windows 11 requires a Trusted Platform Module (TPM) version 2.0, and Secure Boot works alongside TPM to provide a secure boot chain.

If your gaming PC came with Windows 11 preinstalled, Secure Boot is likely already enabled. If you built the PC yourself or upgraded from an earlier version of Windows, you may need to turn it on manually. Consult our gaming motherboard guide for detailed instructions on navigating your UEFI setup.

How to enable Secure Boot in UEFI

Start by restarting your gaming PC. As soon as the screen lights up, press the key that opens the UEFI firmware interface. The correct key is usually shown briefly on the first screen or listed in the motherboard manual. Once inside, navigate to the section that contains the Secure Boot setting. The exact location varies by manufacturer, but it is often found under the Boot, Security or Authentication tab. See our best gaming motherboards for more details on common UEFI layouts.

Look for an option labeled "Secure Boot", "Secure Boot Mode", or something similar. If the option is grayed out, the firmware may be in CSM (Compatibility Support Module) mode. You may need to disable CSM first or switch the boot mode to UEFI-only. After setting Secure Boot to Enabled, save the changes and exit the UEFI setup. The system will restart automatically.

Some motherboards require you to set a Secure Boot mode to "Standard" or "Custom" rather than "Enabled". If you see that option, choose Standard. After saving, the PC will reboot with Secure Boot active.

How to verify Secure Boot is working in Windows

After the system boots into Windows, you can confirm that Secure Boot is on. Open the System Information tool. Press Windows + R, type "msinfo32", and press Enter. In the System Summary list, look for "Secure Boot State". It should read "On". If it says "Off", the setting did not take effect. Repeat the steps and ensure you saved the changes before exiting the UEFI firmware.

Another way is to use the Windows Security app. Open Windows Security, select Device Security, then Security processor details. Under Security processor features, look for Secure Boot. If it shows "On", the feature is active.

Common issues when enabling Secure Boot

If the Secure Boot option is missing or grayed out, the motherboard may be in legacy BIOS mode or have CSM enabled. Switch the boot mode to UEFI-only and disable CSM. Some older graphics cards that rely on legacy option ROMs may prevent booting with Secure Boot on, in which case you may need to update the GPU firmware or consider a newer card that supports UEFI. For a gaming PC aimed at competitive esports, a modern graphics card with UEFI support is recommended.

After enabling Secure Boot, some systems may fail to boot Windows. This can happen if the boot loader is not properly signed or if the system was installed in legacy mode. You may need to reinstall Windows in UEFI mode with Secure Boot enabled from the start. For a prebuilt gaming PC, check the manufacturer's support site for any firmware updates that improve Secure Boot compatibility.

• Secure Boot option not visible: Enter UEFI and look for a setting called "OS Type" or "Boot Mode". Set it to "Windows UEFI Mode" or similar.
• System fails to boot after enabling: Reset the UEFI to defaults, enable Secure Boot again, and ensure the boot drive is GPT partitioned.
• GPU not displaying: Some older GPUs lack UEFI support. A GPU upgrade may be needed.

Why Secure Boot matters for PC gaming

Rootkits and bootkits can compromise a gaming PC at a level that antivirus software cannot easily detect. By enabling Secure Boot, you close a common entry point for such malware. This is especially important if you download mods, use third-party launchers, or play online where account security matters. For streaming gameplay, a secure boot chain helps protect your streaming software and credentials.

When choosing a new gaming PC, look for systems that have Secure Boot and TPM 2.0 enabled by default. Many modern prebuilt desktops include these features, but it is always worth verifying in the specifications before purchase.

What to pick for your play

Questions

Does Secure Boot affect gaming performance?

No. Secure Boot only checks the boot process and does not interact with games or graphics performance. It runs before Windows loads and has no impact on frame rates, latency, or load times.

Can I enable Secure Boot on a PC that originally had Windows 10?

Yes, if the motherboard supports UEFI and Secure Boot. You may need to convert the boot drive from MBR to GPT and enable Secure Boot in the firmware before upgrading to Windows 11.

What if my motherboard does not have a Secure Boot option?

Motherboards older than about 2012 may lack Secure Boot. In that case, the system likely does not meet Windows 11 requirements. Consider upgrading to a newer motherboard that supports UEFI and Secure Boot.

Is Secure Boot the same as TPM?

No. Secure Boot is a UEFI feature that verifies the boot loader, while TPM (Trusted Platform Module) is a hardware chip that stores encryption keys and measurements. Both are required for Windows 11, and they work together to secure the boot process.

Do I need to enable Secure Boot if I only play games and never go online?

Even offline, malware can be introduced through USB drives or game installations. Secure Boot adds protection regardless of internet connectivity, so it is recommended for all gaming PCs.

Will enabling Secure Boot break my dual-boot setup with Linux?

Most modern Linux distributions support Secure Boot. You may need to enroll a Machine Owner Key (MOK) or use a signed bootloader like shim. Check your distribution's documentation for Secure Boot compatibility.