Secure Boot must be enabled before an operating system is installed. If an operating system was installed while Secure Boot was disabled, it will not support Secure Boot and a new installation is required. Secure Boot requires a recent version of UEFI.

What happens if I enable Secure Boot?

When enabled and fully configured, Secure Boot helps a computer resist attacks and infection from malware. Secure Boot detects tampering with boot loaders, key operating system files, and unauthorized option ROMs by validating their digital signatures.

Should I leave Secure Boot enabled?

Secure Boot is an important element in your computer's security, and disabling it can leave you vulnerable to malware that can take over your PC and leave Windows inaccessible.