

Select the Secure Boot Mode setting and select Standard: Secure Boot Mode standardĬustom would allow us to set the keys used for attestation for Secure Boot. When you click into that Setting, you’ll be given the option to enable Secure Boot: Secure Boot settingsīut before we can just hit enable, first we need to configure the Secure Boot mode. Once you disable CSM Support, you’ll notice a Secure Boot setting has appeared: Secure Boot settings If you have no idea whether you’re booting from BIOS or UEFI, open the System Information app and check the BIOS Mode setting: System Information

After running that tool, just be sure to go back into your motherboard settings to Boot from the disk you just converted. If that’s the case, Microsoft has a command line tool called MBR2GPT, which you can run to convert your disk from BIOS to UEFI. Meaning if you disable the CSM Support setting you won’t be able to boot into your OS. Quick aside – if you were booting from BIOS instead of UEFI, you were actively using this CSM Support setting. CSM Support is used for booting from legacy devices, which is the exact opposite goal of Secure Boot.
