+3 votes
33 views
Secure Boot Windows 11

in Windows11 by (551k points)
reopened | 33 views

1 Answer

+4 votes
Best answer

How to enable Secure Boot Windows 11

When Windows 11 was launched, one of the requirements that was mentioned the most and in which it was emphasized that it was mandatory to update or install Windows 11 was secure boot, it is an exclusive requirement for privacy reasons. Secure boot or Secure Boot has been integrated as a security feature which has the mission of protecting the startup or boot process of the operating system and the reason for this is that currently some attacks that are made to the system will be made to time to turn on the equipment and begin the entire boot process where the environment circumstances and load of services are critical..

 

To protect this start, secure boot makes use of digital signatures which are responsible for verifying the integrity and authenticity of the operating system components at this start, this results in no drivers or malicious software being loaded before full boot. Windows and with it the integrity of the data will be preserved.

 

 

Remember that when you press the power button on the computer, the firmware is responsible for verifying the signature of the bootable software components such as UEFI firmware drivers, EFI applications, and the operating system itself. When executing the analysis, if the signatures are valid, the equipment will turn on and the firmware will give way to the process that the operating system executes..

 

We can summarize that with secure boot there will be an extra measure of security against modern attacks such as the manipulation of the boot loader or the injection of malware which in some cases can take full control of the PC and the data of the user.

 

enable secure boot
In order to enable secure boot, you will need the following:

 

  • UEFI signature database with which the correct keys of the UEFI signature database (db) will be stored, since the system can start with it.
  • Firmware signing of all components using at least RSA-2048 with SHA-256.
  • A boot manager.
  • Rollback protection.
  • EFI_HASH_PROTOCOL which allows downloading cryptographic hash operations and the EFI_RNG_PROTOCOL.

 

 

TechnoWikis will explain the correct way to activate secure boot in Windows 11 and with this have improved security from boot..

 

 

To stay up to date, remember to subscribe to our YouTube channel!
SUBSCRIBE ON YOUTUBE

 

How to enable Secure Boot Windows 11

 

Step 1

The first thing will be to validate the current state of the secure boot, for this we enter "msinfo32" in the search engine and open the System Information utility:

 

image

 

Step 2

In the line "Secure Boot State" validate the current state:

 

image

 

Step 3

Now as it is deactivated it is time to activate it, for this we will go to the menu:
  • Start
  • Setting
  • System
  • Recovery

 

 

image

 

Step 4

We will see the following options. We click on "Restart now"

 

image

 

step 5

We must confirm the process to access in this mode:

 

image

 

step 6

The system will be rebooted:

 

image

 

step 7

We will see the following menu. We click on "Solve problems":

 

image

 

step 8

Then we click on "Advanced options":

 

image

 

step 9

Then we access a group of options. There we click on "UEFI Firmware Configuration"

 

image

 

step 10

and we will see the following. We click on "Restart"

 

image

 

step 11

and the system will access the UEFI, there, in this case, we will go to the "Security" section:

 

image

 

Note
The menu will depend on the base card model used.

 

step 12

Press Enter to see the following:

 

image

 

step 13

In "Secure Boot" in "Secure boot" we assign the value "Enabled":

 

image

 

step 14

We see the new set value:

 

image

 

step 15

We apply the changes with F10:

 

image

 

step 16

For other types of motherboard we will see a menu similar to this:

 

image

 

step 17

In the Security section we click on Secure Boot:

 

image

 

step 18

We will see this:

 

image

 

step 19

Press the Enter key to display the following window:

 

image

 

step 20

We select Enabled and press Enter:

 

image

 

step 21

We confirm the process:

 

image

 

step 22

The system will be rebooted:

 

image

 

Step 23

When logging in we open msinfo32 to see the current status of secure boot. We can see that its status is now Activated.

 

 

image

 

These are the steps to enable Windows 11 Secure Boot and have one of the best built-in security options.

 

 


by (3.5m points)
edited

Related questions

+4 votes
1 answer
+5 votes
1 answer
asked Jan 12, 2022 in Guides by backtothefuture (551k points) | 97 views
+5 votes
1 answer
asked Jan 15 in Windows11 by backtothefuture (551k points) | 21 views
+5 votes
1 answer
+5 votes
1 answer
asked Jan 11 in Windows11 by backtothefuture (551k points) | 24 views
Sponsored articles cost $40 per post. You can contact us via Feedback
10,632 questions
10,764 answers
510 comments
3 users