How to Enable Secure Boot in BIOS for Windows 11 Upgrade

Select Language:

If you recently upgraded from Windows 10 to Windows 11 and noticed that your system is running version 23H, but the update for 24H2 isn’t available, you might face an issue with the Secure Boot option in your BIOS. Here’s a simple way to troubleshoot and activate Secure Boot.

First, check your BIOS settings. Even though your system runs in UEFI mode, sometimes the Secure Boot option remains disabled or greyed out. If you see that Secure Boot is disabled and not selectable, don’t worry—there are a few steps you can take.

Start by restarting your computer and entering the BIOS setup. Usually, this is done by pressing a key like F2, DEL, or ESC right after turning on your PC. Once inside the BIOS, look for the Secure Boot option. If it’s greyed out and you can’t change it, check whether your system has CSM (Compatibility Support Module) enabled or disabled. Secure Boot generally requires CSM to be turned off because it works only in UEFI mode.

Since you mentioned that your BIOS version is the latest (F.73) and TPM is enabled, the next step is to verify the Secure Boot configuration:

Ensure your system is set to UEFI mode and not Legacy Support. Sometimes this option is called CSM, and disabling it can make Secure Boot available.
Save any changes and restart into the BIOS.
Look for Secure Boot in the menu. If it remains greyed out, you might need to create or clear the Platform Key (PK). Usually, there is an option to ‘Clear Secure Boot keys’ if Secure Boot is already enabled but keys are missing.
Once the keys are cleared, you can try enabling Secure Boot again.

If this still doesn’t work, a common solution is to perform a BIOS reset or update. Since you already have the latest BIOS, a reset might help:

– In the BIOS, find the option to reset to default settings.
– After resetting, reboot and navigate back to Secure Boot settings.
– Try enabling Secure Boot once again.

Remember to save your settings before exiting. After enabling Secure Boot, you should be able to see the option for Windows to upgrade to version 24H2.

If you’re uncomfortable adjusting BIOS settings or if these steps don’t work, contacting your motherboard or PC manufacturer’s support can also help. They can guide you through specific steps based on your model.

By following these steps, you should be able to activate Secure Boot on your system and proceed with the latest Windows upgrade.