Are you looking to upgrade your PC to Windows 11, but getting the error message “This PC can’t run Windows 11”? Don’t worry, as this is a common issue caused by not enabling two security settings, Secure Boot and TPM 2.0.
Secure Boot is an essential feature of Microsoft Windows 8 and later versions, which adds an extra layer of security to your PC. This feature works on top of UEFI, ensuring that the Windows operating system remains safe from malware. Secure Boot ensures that your device will only boot using trusted OEM software.
How Does Secure Boot Work?
After turning on your PC, the code execution process starts, which configures the processor, memory, and hardware peripherals to prepare for booting the operating system. During startup, Secure Boot checks for firmware code signatures present on hardware peripherals such as storage devices. It will only execute firmware modules with matching signatures.
Secure Boot works like a security gate, allowing only code with valid credentials to pass through and execute. Therefore, it blocks code with bad or no credentials from running, protecting the system from malicious attacks, rootkits, and illegal software upgrades that may occur before the OS is launched.
How to Enable Secure Boot in BIOS
Activating Secure Boot is essential to keep your PC secure from malware and other threats. Check out the steps below to enable Secure Boot on your Windows 10 laptop:
1. Restart the HP laptop and press the F2 or F10 button to enter the BIOS setup.
2. Go to Boot Options, choose Secure Boot using the arrow keys, and hit Enter.
3. Select Enabled and press Enter.
4. Press F10 and choose Yes to save changes.
How to Disable Secure Boot
Disabling Secure Boot is necessary when there are hardware configuration errors. You can disable Secure Boot in two ways:
1. Through Windows Setup
2. Through BIOS
Disabling Secure Boot Through Windows Setup
Follow the steps below to disable Secure Boot via Windows setup:
1. Press Windows + I to open Settings, then choose Updates & Security.
2. Select Recovery and click Restart now.
3. Select Troubleshoot, then Advanced options.
4. Select UEFI Firmware Settings, and hit enter then select Restart.
5. At startup, select boot F10 to enter BIOS Setup.
6. Go to the system configuration tab and select Boot Options using the arrow keys, then press Enter.
7. Select Secure Boot, choose Disabled, and press Enter.
8. Press F10 to save changes.
Disable Secure Boot Through BIOS
Follow the steps below to disable Secure Boot on your laptop from the BIOS:
1. Turn off your PC/laptop, then turn it on again. Press F10 or F2 on the keyboard to enter BIOS.
2. Navigate to the System Configuration tab and select Boot Options using the arrow keys and hit Enter.
3. Select Secure Boot and press Enter. Choose Disabled, and press Enter.
4. Press F10 to save and exit BIOS.
After disabling Secure Boot and updating other software and hardware, you won’t be able to re-enable it without restoring your PC to factory settings. It is crucial to be careful when adjusting BIOS settings, as they can disrupt your device.
In conclusion, Secure Boot is an essential feature that ensures your PC is safe from malware and other malicious threats. Therefore, enabling it is necessary to keep your device secure from cyber threats. This article has outlined the steps required to both enable and disable Secure Boot on your Windows 10 laptop. By carefully following these instructions, you can keep your PC safe and secure.