How to enable Secure Boot in BIOS settings

When we try to install Windows 11 or run Microsoft PC Health Check, or other third-party tools to check whether the current computer can run Windows 11, we may get such a result, "This PC cannot run Windows 11. The PC must support Secure Boot." What is Secure Boot? How do I fix the problem of "The PC must support Secure Boot"?

About Secure Boot?

UEFI has a firmware verification process (called "Secure Boot"), which is defined in chapter 27 of UEFI Specification Version 2.3.1 Errata C. Secure boot defines how the platform firmware manages security certificates, how to perform firmware verification, and defines the interface (protocol) between the firmware and the operating system. To put it plainly is to verify the hardware through the onboard TPM chip, and then start.
Please click here to learn more about What is UEFI.

Should I enable or disable the Secure Boot?

If you want to newly install Windows 11 operating system (not to upgrade from Windows 10 through the Insider Program), then the secure boot needs to be turned on, otherwise, the prompt "This computer must support secure boot" will appear.
If your computer is running Windows 7, the Safe Boot should be disabled.

How to enable Secure Boot?

We can enable the Secure Boot in the BIOS settings of the motherboard. For different brands of motherboards and computers, the way to activate the Secure Boot is slightly different. We will show how to turn on the Secure Boot of MSI, ASUS motherboards, and Lenovo, Dell, and HP notebooks. If your motherboard or computer is of other brands, please refer to the motherboard manual, or contact the motherboard manufacturer, or search through Google or Bing.

How to enable Secure Boot on MSI motherboard?

1. Press the power button to turn on the computer, and then immediately press the Delete key or F2 continuously until you enter the BIOS setup.
2. Select Settings, then select Security
3. Change Secure Boot to Enabled
4. Press F10 to save the settings, and then restart the system.
For earlier models, the location of the Secure Boot will be slightly different, it may be in Advanced - Windows OS Configuration - Secure Boot - Secure Boot - Enable.

How to enable Secure Boot on ASUS motherboard?

1. Before the laptop power on, press and hold the F2 button, then click the power button. (Do not release the F2 button until the BIOS screen display.)
2. go to the Advanced Mode by using Hot Key F7
3. Select Security, then select Secure Boot
4. Select Secure Boot, then select Enabled
5. Save & Exit Setup

How to enable Secure Boot on Lenovo laptops?

1. Press the power button to turn on the computer, and then immediately press F2 or Fn+F2 to enter the BIOS.
2. Select Security - Secure Boot, then select Enabled
3. Save changes and Exit
If it is a Think brand (ThinkPad, ThinkStation, ThinkCentre), please click the link below.
https://support.lenovo.com/us/en/solutions/ht509044/

How to enable Secure Boot on Dell laptops?

1. Press the power button to turn on the computer, and then immediately press F2 or F12 to enter BIOS.
2. Select Boot - Secure Boot, then select Enabled
3. Press F10 to save and exit

How to enable Secure Boot on HP laptops?

1. Press the power button to turn on the computer, and then immediately press the Esc key repeatedly until the Startup Menu opens.
2. Select the option BIOS Setup (F10)
3. Then select Advanced – Secure Boot Configuration
4. Click Configure Legacy Support and Secure Boot，then select Legacy Support Disable and Secure Boot Enable.
5. Save Changes and Exit


[Reference]
MSI Blog: How to check if your system is available for Windows 11
ASUS FAQ: Error message "Secure Boot Violation" appears in BIOS
Dell support: UEFI and Secure Boot FAQs
HP Custom Support: Secure Boot (Windows 10)