Secure Boot is a firmware feature that helps ensure your PC starts only trusted software. Windows 11 expects it, and some anti-cheats require it — so it is worth knowing how to check and enable it.
Check the current status
Press Windows + R, type msinfo32 and press Enter. In the System Information window, look at the "Secure Boot State" line. It will say On, Off, or Unsupported. If it already says On, there is nothing to do.
Where the setting lives
Secure Boot is a firmware setting. Restart and enter your BIOS/UEFI (usually a key like Delete, F2 or F10 pressed right after powering on). The Secure Boot option is typically under a "Boot" or "Security" section.
The important prerequisite
Secure Boot only works in UEFI mode, not the older Legacy/CSM boot mode. If your PC currently boots in Legacy mode, simply switching Secure Boot on will not work — and switching the boot mode on an already-installed Windows can stop it booting. Check first: if msinfo32 shows "BIOS Mode: UEFI", you are fine to enable Secure Boot directly. If it shows "Legacy", converting safely is a separate, more careful process and should be researched before touching it.
Enable and confirm
When the prerequisites are met, set Secure Boot to Enabled, save and exit. Let Windows boot, then run msinfo32 again to confirm "Secure Boot State: On". Some firmware also requires disabling CSM (the legacy-compatibility module) for the option to become available.
The takeaway
Enabling Secure Boot is straightforward when your PC already boots in UEFI mode — find the setting, switch it on, confirm with msinfo32. The one real caution is the UEFI-versus-Legacy prerequisite: check your BIOS mode first, because that is the part that can go wrong.