How to Enable the Secure Boot Setting & TPM 2.0 on Windows

Download Article

Fix issues with your Windows 11 upgrade or Valorant game

Co-authored by Hannah Dillon Reviewed by Luigi Oppido

Last Updated: October 8, 2024 Fact Checked

Download Article

Enabling Secure Boot

|

Enabling TPM 2.0

Are you trying to enable Secure Boot? Secure Boot is a security feature that prevents malware from loading when your computer starts. If Secure Boot is not enabled in your PC's BIOS or UEFI, you will encounter errors when upgrading to Windows 11 or playing Valorant on a Windows 11 computer. In this article, we'll go over how to enable Secure Boot and TPM 2.0. Keep reading to learn how.

Quick Steps

Open Windows settings.
Navigate to Update & Security > Recovery.
Click Restart now.
Navigate to Troubleshoot > Advanced options > UEFI Firmware settings.
Press Restart if prompted.
Find and enable Secure Boot (usually found in Boot or Security).
Press F10 to save, then exit the BIOS and restart your PC.

Part 1

Part 1 of 2:

Enabling Secure Boot

Download Article

To do this, click the Windows (Start) button in the lower-left corner of the screen, then click the cogwheel icon.
This option will be towards the end of the list of options. It has an icon of two arrows going in a circle.

Advertisement
It's near the middle of the menu options and has an icon of a thin rectangle with a circular arrow above it.
This will immediately restart your PC, so save any open files before restarting to avoid losing any data or changes to them.
Once your PC restarts, you will be presented with a blue screen and several options to choose from.
6
Click UEFI Firmware settings. If your computer immediately restarts and enters BIOS, you can move to the next step. If not, click Restart and select BIOS setup, which will restart your computer into BIOS.
- If you have a Restart button but not a BIOS setup button, follow these instructions:
  - Navigate to Settings > Advanced > Windows OS Configuration. Depending on your computer, these menu items may have different names, but they should be similar.
  - Select Secure Boot and enable the Secure Boot setting, then restart your computer.
7
Find the Secure Boot setting and enable it. The Secure Boot setting is usually found in the Security or Boot/Boot options tab, but each motherboard's BIOS is laid out slightly differently. If you aren't sure where to find the Secure Boot setting, check your computer's manual or the manufacturer's website.
- To navigate the BIOS, use the arrow keys.
8
Press F10 to save your settings. If you are enabling Secure Boot to update to Windows 11, do not exit BIOS just yet. You will also need to enable TPM 2.0. Keep reading the next section to learn how.
- If you do not need to enable TPM 2.0, you can exit the BIOS and restart your computer.

Part 2

Part 2 of 2:

Enabling TPM 2.0

Download Article

1
Open the Security tab. You'll need to use the arrow keys to navigate the BIOS.
- If you exited the BIOS already, follow the steps above to get back into the BIOS.
This option may say "TPM," "Intel Platform Trust Technology (IPTT)," "AMD CPU fTPM", or "Trusted Platform Module (TPM)."
Press the Enter button to toggle on TPM 2.0.
You can now exit BIOS and restart your computer.^{[1]
X
Research source}