Fast & Safe Guide: How to Enable Secure Boot on Windows 10

If you need to enable Secure Boot for Windows 11 or Valorant, follow our step-by-step guide to check your BIOS, safely format to GPT, and turn on Secure Boot.

By Lucas    Updated on April 16, 2026

🧐 Quick Answer:

How to turn on Secure Boot in Windows 10:

  1. Press Win + R, type msinfo32, and check if your BIOS Mode is UEFI. (Secure boot cannot run on Legacy/MBR).
  2. If your drive is MBR, use AOMEI Partition Software to convert your MBR disk to GPT without losing data.
  3. Go to Settings > Update & Security > Recovery > Advanced Startup.
  4. Select Troubleshoot > Advanced Options > UEFI Firmware Settings.
  5. In your BIOS, find the Secure Boot toggle (usually under the Boot or Security tab), set it to Enabled, and save your changes.

Whether you are trying to upgrade your PC to Windows 11 or to launch modern video games like Valorant or EA Sports FC, only to be hit with an error code, you have likely discovered that your computer needs Secure Boot enabled.

Secure Boot is a critical security standard developed by members of the PC industry to help ensure that a device boots only with software trusted by the Original Equipment Manufacturer (OEM).

While turning it on sounds as simple as flicking a switch, many Windows 10 users find the option greyed out, hidden, or completely unsupported. In this comprehensive guide, we will walk you through exactly how to prepare your PC and safely enable Secure Boot without losing any of your data.

Phase 1: Check Your Current Secure Boot Status

Before we go digging into complicated BIOS menus, we need to check if your system is already capable of supporting Secure Boot.

Step 1. Press the Windows Key + R to open the Run box.

Step 2. Type msinfo32 and press Enter to open the System Information window.

Step 3. In the right-hand panel, locate Secure Boot State.

  • If it says On, you are already good to go.
  • If it says Off, you need to turn it on in the BIOS (Proceed to Phase 3).
  • If it says Unsupported, this means your computer is currently running in Legacy BIOS mode. You have a roadblock you must fix first. (Proceed to Phase 2).

Phase 2: Convert MBR to GPT via AOMEI Partition Software

If your Secure Boot State says "Unsupported," it is because Secure Boot strictly requires UEFI firmware. You cannot use UEFI firmware if your Windows 10 hard drive is formatted using the older MBR (Master Boot Record) partition style. You must convert it to GPT (GUID Partition Table).

🚨 WARNING: Microsoft provides a native command-line tool MBR2GPT to convert with diskpart, but if you type the commands incorrectly or use the diskpart clean command, you will permanently delete all data on your computer.

To completely bypass the risk of data loss and complicated command-line syntax, the smartest method is to use AOMEI Partition Software Professional. This powerful GUI tool allows you to change your system disk from MBR to GPT in just three simple clicks, keeping all your files, games, and OS perfectly intact.

AOMEI Partition Software

A safe and reliable disk partition management tool that helps you migrate OS to SSD or HDD, reorganize disk space, and improve overall PC performance.

 

Download, install, and launch AOMEI Partition Software.

Step 1. On the main interface, right-click your Windows system disk (usually Disk 0) and select "Convert to GPT".

Step 2. Click OK on the confirmation prompt.

Step 3. Click Apply in the top-left corner, and then click Proceed.

The software will rapidly rebuild your partition table safely. Once finished, your computer is fully prepped for UEFI and Secure Boot.

Phase 3: How to Enable Secure Boot in BIOS

Now that your disk is properly formatted as GPT, you can safely switch to UEFI mode and toggle Secure Boot on. Because PCs boot up too fast to manually hit the BIOS key (like F2 or DEL) these days, Windows 10 provides a built-in shortcut.

Step A: Enter the UEFI/BIOS Environment

Step 1. Click the Windows Start button and select the Settings gear icon.

Step 2. Go to Update & Security > Recovery.

Step 3. Under the Advanced startup section, click Restart now.

Step 4. When the blue screen appears, navigate to Troubleshoot > Advanced options > UEFI Firmware Settings.

Step 5. Click Restart. Your PC will now automatically reboot directly into your BIOS menu.

Step B: Enable Secure Boot (By Motherboard Brand)

Every motherboard manufacturer designs their BIOS differently. Here is where to find the Secure Boot setting for the most popular brands:

  • ASUS: Press F7 to enter Advanced Mode. Navigate to the Boot tab > Secure Boot. Change "OS Type" to Windows UEFI mode.
  • HP: Navigate to the Security tab or Boot Options. Find Secure Boot and change the drop-down to Enabled. (You may need to disable "Legacy Support" first).
  • Dell: Expand the Secure Boot section in the left-hand menu. Click Secure Boot Enable and check the box for Enabled.
  • Gigabyte: Navigate to the BIOS tab or Boot tab. Ensure "CSM Support" is Disabled. Then, find Secure Boot and set it to Enabled.

Once you have enabled the setting, press F10 to save your changes and exit. Your PC will restart, and Secure Boot will now be successfully running on Windows 10.

🔧 Troubleshooting: Why is Secure Boot Greyed Out?

Sometimes, you will reach the BIOS menu only to find you cannot click on the Secure Boot option. Here are the two most common fixes:

  • CSM is Enabled: The Compatibility Support Module (CSM) allows older Legacy devices to run on modern motherboards. Secure Boot and CSM cannot run at the same time. You must find CSM in your Boot menu and select Disable before the Secure Boot option will unlock.
  • No Administrator Password Set: For security reasons, some laptop manufacturers (like Acer) require you to set a BIOS Administrator Password before they allow you to alter security states. Go to the Security tab, set a simple supervisor password, and the Secure Boot option will become clickable.

Conclusion

Enabling Secure Boot on Windows 10 is essential for heavy gamers and users looking to upgrade to Windows 11. While navigating the BIOS can feel intimidating, the most critical step is ensuring your hard drive is formatted correctly beforehand.

By checking your status with msinfo32 and utilizing AOMEI Partition Software to safely change your disk to GPT, you eliminate the risk of system crashes or data loss. Download AOMEI today to prepare your PC, enable Secure Boot, and future-proof your system with just a few clicks

FAQs: Secure Boot in Windows OS

1. Does enabling Secure Boot delete data?

No, simply turning on Secure Boot in your BIOS will not delete any files. However, if you are forced to use the Windows command line to convert your disk from MBR to GPT beforehand, you could lose data. Always use a safe tool like AOMEI Partition Software to handle the conversion.

2. Can I run Windows 10 without Secure Boot?

Yes. Windows 10 operates perfectly fine without Secure Boot enabled. However, if you wish to upgrade to Windows 11 via Windows Update, or play modern anti-cheat games like Valorant, Secure Boot is a mandatory requirement.

3. What happens if I enable Secure Boot on an MBR drive?

If you manage to force your BIOS into UEFI/Secure Boot mode while your Windows installation is still on an MBR drive, Windows will fail to boot, and you will receive a black screen or a "Boot Device Not Found" error. You must convert the disk to GPT first.

Lucas · Editor
I prefer peaceful and quiet life during vacation,but sometimes I watch football match if my favorite club performs brilliantly in that season. And I love reading, painting and calligraphy, thus I send my friends festival handwriting cards every year.