How to Enable Secure Boot on Windows 10

Shelly updated on Sep 28, 2025 to Partition Master | How-to Articles

How to enable Secure Boot on Windows 10? This post helps you figure out two prerequisites for Secure Boot, including a GPT Windows 10 system disk and an activated TPM 2.0. Meanwhile, this guide offers you specific steps to enable Secure Boot on Windows 10.

How to enable Secure Boot on Windows 10? In short, this post from EaseUS Software will guide you to find out two prerequisites for Secure Boot and enable Secure Boot on Windows 10.

Please go to your computer's UEFI firmware settings (BIOS) and select the Secure Boot option. The particular methods vary significantly depending on the manufacturer of your computer, but they all include restarting it, entering the BIOS/UEFI settings (typically by hitting F2, Delete, or another specified key during startup), and enabling Secure Boot in the Boot or Security options.

What is Secure Boot and 2 Prerequisites

Secure Boot is part of the UEFI (Unified Extensible Firmware Interface) specification. When enabled, it checks the digital signature of the operating system and drivers before loading them. There are two prerequisites before enabling Secure Boot. 

Prerequisite 1: Ensure your Windows 10 system disk is GPT🔥

If your Windows 10 system disk is an MBR disk, you need to convert it to a GPT disk. Based on our assessment, using a powerful partition manager like EaseUS Partition Master can easily help you solve this issue. 

Key features of EaseUS Partition Master: 

  • Resize/Extend partition to maximize disk space usage.
  • Clone the system or the hard drive to upgrade disks without reinstalling Windows.
  • Convert MBR disks to GPT disks for Windows 11 Upgrade.

Step 1. Install and launch EaseUS Partition Master on your computer.

Step 2. Open the Disk Converter tab, select "MBR => GPT" and click "Next" to continue.

Step 3. Choose the target MBR disk, and click "Convert" to start the conversion.

Prerequisite 2: Check if your Windows 10 has TPM 2.0 and How to Enable it

Here is a guide to help you check if your computer has TPM and if TPM2.0 is enabled on your PC. Here are the steps. 

Step 1. After signing into Windows, press Win + R > type tpm.msc in the Run window > click OK or press Enter to enter the TPM management console.

Step 2 (1). If you don't enable TPM, you may see the following error message. Compatible cannot be found. Compatible Trusted Platform Module (TPM) cannot be found on this computer. Please verify that this computer has 1.2 TPM and that it is turned on in the BIOS.

Step 2 (2). If you see a message confirming TPM is ready to use, check Specification Version under TPM Manufacturer Information to verify it is 2.0. If it is less than 2.0, your device does not meet the Windows 11 requirement.

If your computer has a TPM chip, you'll just need to confirm whether the Specification Version is 2.0. If yes, it means that your computer has TPM 2.0.

Step 3Steps to enable TPM 2.0:

  • Restart your computer > press F2, F10, F12, Delete, or Esc to enter Advanced Mode.
  • In the BIOS settings, find Trusted Platform Module (TPM) > select Enable or Activate. 
  • Save the changes you've made and exit the BIOS. After that, your PC will restart. 

3 Phases to Enable Secure Boot on Windows 10

How to enable Secure Boot on Windows 10? This part lists three phases for your reference. Please check them out below. 

🔍Beforehand: Check your current Secure Boot Status

If you're unsure whether Secure Boot is activated on your Windows 10, you can check first. Here are the steps.

Step 1. Please press Windows + R to open the Run window > type MSInfo32 > click OK or press Enter to open it.

Step 2. Under the System Summary tab, ensure your PC's BIOS mode is set to UEFI and Secure Boot State is enabled. Please note that if Secure Boot Start is not enabled, you need to activate it. 

Phase 1. Access UEFI Firmware Settings

How to enable Secure Boot on Windows 10? At the moment, the first phase guides you to open UEFI firmware settings. 

Step 1. Please press Windows + I to open Windows Settings > click Update & Security > select Recovery > click Restart now.

Step 2. On the next screen, click Troubleshoot > choose Advanced options > select UEFI Firmware Settings.

Step 3. Click Restart to open the UEFI settings > ready to change the setting. 

Phase 2. Enable Secure Boot

The following steps depict how to enable Secure Boot on Windows 10. Let's show how it works.

Step 1. Locate the Secure Boot setting: This is typically located under the Boot or Security tab, or in a comparable portion of the BIOS/UEFI interface.

Step 2. Disable CSM if present: If you see an option like Launch CSM or CSM Support, select Disabled.

Step 3. Enable Secure Boot: Set the Secure Boot order setting to Enabled or Standard.

Step 4. Save changes and exit: Under the Exit tab, click Save Changes and Reset. Then, your Windows 10 PC will restart.

Phase 3. Verify Secure Boot is Enabled

If you're unsure if you've successfully activated Secure Boot on your Windows 10, you can reopen the System Information window to check. 

Conclusion

How to enable Secure Boot on Windows 10? Before activating Secure Boot, your Windows 10 needs to meet two preconditions: your System disk is GPT and your TPM 2.0 is activated. Especially for an MBR disk. You need to convert MBR disks to GPT disks using a partition manager like EaseUS Partition Master. Then, you can follow the above three phases to enable Secure Boot. 

Frequently Asked Questions

1. Does enabling Secure Boot affect performance?
No, Secure Boot doesn't slow down your PC. It only runs during startup to check security signatures.

2. Is Secure Boot required for Windows 11?
Yes, Secure Boot is a mandatory requirement for Windows 11 installation.

3. Can I enable Secure Boot without reinstalling Windows?
Yes, but if you're switching from Legacy BIOS to UEFI, you might need to convert your drive to GPT first.