Last Updated on October 8, 2026
With security being an ever growing issue these days, we all need to make sure that our computers are protected from things such as viruses, malware, ransomware, phishing attacks and even other people. When Microsoft released Windows 11, they made it a requirement that your computer had things such as a TPM (Trusted Platform Module) and UEFI (Unified Extensible Firmware Interface).
Another requirement for Windows 11 is to have the secure boot option enabled in your UEFI settings. Secure boot is a security feature built into modern Windows systems that helps prevent unauthorized or malicious software from loading during the system’s boot process. It works by only allowing trusted software (like drivers, bootloaders, and the OS itself) that is signed with valid digital certificates to run during startup. It blocks bootkits, rootkits, and other low-level malware that try to load before the operating system, where antivirus software can’t detect them. It’s also something you can use when running older versions of Windows such as Windows 10.
Method 1: Use the System Information Tool
1. Open System Information
The first method we will be using to find out if secure boot is enabled is by using the Windows System Information tool. You can access this interface quickly by typing system information directly into the taskbar search box. Click the application icon to launch the detailed hardware overview window.
2. Locate the Secure Boot State
Then you can click on System Summary on the left hand navigation pane. Scroll down the main window to Secure Boot State and it will say either on or off. This gives you an immediate answer regarding your current firmware security status.
Method 2: Check Windows Security Center
1. Launch Device Security
Another method you can use to find your secure boot status is to go to the Windows Security Center. Click on Device security on the left hand side of the dashboard. This specific area handles core isolation and trusted platform module features.
2. Verify the Secure Boot Section
Look closely at the resulting page for a specific section dedicated to secure boot. If you have a section for secure boot visible on the screen, then it’s enabled. If you do not see the secure boot section at all, that means it is not enabled.
Method 3: Run a PowerShell Command
1. Open PowerShell as Administrator
Finally, you can open an administrative PowerShell window to see if secure boot is enabled on your computer. Right click your Start button and choose the Windows Terminal or PowerShell admin option. This elevated prompt allows you to query the motherboard firmware directly.
2. Execute the Status Command
Type the Confirm-SecureBootUEFI command into the prompt. Once you type in the command and press enter, you will be given a result that says True if it’s enabled and False if it is not enabled. This is the fastest method for power users who prefer the command line.
Firmware Requirements and Troubleshooting
1. Understand UEFI Limitations
Since secure boot is implemented at the firmware level of your computer, it’s not something you can add if you do not have it. Your computer must also be using UEFI and not running an older legacy BIOS configuration. You also need to be running A 64-bit OS installed in UEFI mode such as Windows 11.
2. Check Your Firmware Type
You can check to see if your computer is using UEFI from the System Information tool as well. Look for the BIOS Mode entry right above the secure boot status line. It must say UEFI for these modern security features to function properly.
3. Enable Secure Boot in BIOS
If your computer has the option to use secure boot but it is disabled, then you will need to go into the UEFI\motherboard settings and enable it. If Windows was installed in Legacy (BIOS) mode, you will also need to convert your disk from MBR to GPT before Secure Boot can be enabled. This partition conversion is mandatory for modern boot security.
For additional training resources, check out our online IT training courses.
Check out our extensive IT book series.
