How to Enable Secure Boot on Dell Devices for Windows 11

Overview

Secure Boot is a UEFI firmware feature that protects the boot process against malicious code such as malware and ransomware. To use Secure Boot on a Dell computer, the BIOS Boot Mode must be set to UEFI (not Legacy), and the Secure Boot option must be set to Enabled in the BIOS. You can confirm the current status in Windows by running msinfo32 and checking that BIOS Mode is UEFI and Secure Boot State is On.

Quick answers

What is Secure Boot?

Secure Boot is a security feature that checks the boot process on a computer to help block malicious code, including malware and ransomware, from loading at startup. Secure Boot depends on firmware and requires the computer BIOS to be set to UEFI mode. It does not work in Legacy boot mode.

Before you begin

1. Confirm Windows 11 compatibility. Older Dell computers may not meet Windows 11 system requirements. Check Dell Computers Tested for Update to Windows 11.
2. Check your current status using the steps in the next section. If Secure Boot State is already On, no change is needed.
3. Back up your personal data if BIOS Mode shows Legacy. Changing from Legacy to UEFI makes the current Windows installation unbootable and requires reinstalling Windows.

Check Secure Boot status in Windows

Question: How do I check if Secure Boot is enabled in Windows 11?

Answer: Use System Information (msinfo32). Secure Boot is enabled when BIOS Mode shows UEFI and Secure Boot State shows On.

1. Click the Windows button at the bottom left of the screen, or press the Windows key.
2. In the search bar, type msinfo32.
3. Press Enter. System Information opens with System Summary selected by default.
4. On the right side, find BIOS Mode and Secure Boot State.
5. Read the result using the table below.

Why does my Dell computer show Secure Boot State Off?

Question: Why does my Dell computer show Secure Boot State Off?

Answer: Secure Boot State appears as Off when Secure Boot is not enabled in the BIOS. Common causes:

1. Secure Boot is set to Disabled in the BIOS. Fix: follow the Enable Secure Boot in the Dell BIOS section.
2. The computer is in Legacy boot mode. Secure Boot requires UEFI. Check whether BIOS Mode shows Legacy in msinfo32. Fix: follow the Switch from Legacy to UEFI boot mode section, then enable Secure Boot.

Switch from Legacy to UEFI boot mode

Question: How do I switch from Legacy to UEFI on a Dell PC?

Answer: Follow the steps below.

1. Turn on or restart the computer.
2. Tap the F2 key when the Dell logo appears to enter the BIOS.
3. In the BIOS, find the Boot or Boot Sequence option.
4. Locate the Boot List option.
5. Change the option from Legacy to UEFI.
6. Select Apply or Save and Exit, depending on your computer.

Result: The computer is now in UEFI mode. Reinstall Windows, then follow the Enable Secure Boot in the Dell BIOS section if Secure Boot is not already on.

Enable Secure Boot in the Dell BIOS

Question: How do I turn on Secure Boot on my Dell laptop?

Answer: Follow the steps below. The BIOS must be in UEFI mode.

Prerequisite: BIOS Mode is UEFI. If it is Legacy, complete the steps in the Switch from Legacy to UEFI boot mode section first.

1. Turn on or restart the computer.
2. Tap the F2 key when the Dell logo appears to enter the BIOS.
3. In the BIOS, find the Secure Boot option.
4. Change Secure Boot to Enabled.
5. Select Apply or Save and Exit, depending on your computer.

Result: The computer restarts and boots to the Windows desktop. Verify the change with the steps in the Check Secure Boot status in Windows section.

Where is Secure Boot in the Dell BIOS?

Question: Where is Secure Boot in Dell BIOS?

Answer: Press F2 at the Dell logo to open the BIOS, then look for the Secure Boot option. It is typically found in the Boot Configuration area of the menu, and the exact name and location vary by model.

• The UEFI/Legacy setting is also under Boot Configuration.
• The Secure Boot mode is where you set it to Enabled.
• If you cannot find it, consult the System Manual for your model, for more information see Dell Knowledge Base article Manuals and Documentation for your Dell Product.

Troubleshooting

Frequently asked questions

How do I turn on Secure Boot on my Dell laptop?
Restart the laptop, tap F2 at the Dell logo, set Secure Boot to Enabled, and select Apply or Save and Exit. UEFI mode must already be active.

How do I check if Secure Boot is enabled in Windows 11?
Open msinfo32 from the Start search and check that BIOS Mode is UEFI and Secure Boot State is On.

Why does my Dell computer show Secure Boot State Off?
Secure Boot is disabled in the BIOS, or the computer is booting in Legacy mode. Switch to UEFI if needed, then enable Secure Boot.

How do I switch from Legacy to UEFI on a Dell PC?
In the BIOS, open Boot or Boot Sequence and change Boot List from Legacy to UEFI. Windows must be reinstalled afterward, so back up your data first.

Where is Secure Boot in Dell BIOS?
Open the BIOS with F2 and look for the Secure Boot option, typically in the Boot menu. Layout varies by model.

Do I need Secure Boot for Windows 11?
Windows 11 system requirements include Secure Boot capability.

Will enabling Secure Boot delete my files?
Enabling the Secure Boot option alone does not reinstall Windows. Switching from Legacy to UEFI does make the current Windows installation unbootable.