Enable Secure Boot on enrolled Windows device
Secure Boot is a security standard developed by members of the PC industry to help ensure that a device boots using only software that's trusted by the original equipment manufacturer (OEM). Your organization's device management policies may require you to enable it on your enrolled Windows device. Devices that don't meet this requirement may be unable to access work or school resources.
Enable Secure Boot
To enable secure boot on your PC, you can either:
- Contact your support person for help.
- Enable Secure Boot from the PC BIOS menu. For step-by-step instructions, see Re-enable Secure Boot.
Check Secure Boot status
To check the status of Secure Boot on your PC:
- Go to Start.
- In the search bar, type msinfo32 and press enter.
- System Information opens. Select System Summary.
- On the right-side of the screen, look at BIOS Mode and Secure Boot State. If Bios Mode shows UEFI, and Secure Boot State shows Off, then Secure Boot is disabled.
Next steps
- For more detailed information about the Secure Boot feature, see the Windows Developer Hardware docs.
- Still need help? Contact your support person if you're having trouble enabling Secure Boot or if it appears enabled already. Sign in to the Company Portal website to check for your support person's contact information.
Feedback
Coming soon: Throughout 2024 we will be phasing out GitHub Issues as the feedback mechanism for content and replacing it with a new feedback system. For more information see: https://aka.ms/ContentUserFeedback.
Submit and view feedback for