How to enable secure boot in MSI

Enable Secure Boot MSI
Enable Secure Boot MSI

Secure boot is an essential feature you need to turn on if you want to install Windows 11 on your computer. It’s a very useful security feature that stops suspicious apps when you boot your computer.

Most of the latest motherboards have TPM and secure boot integrated on them. But old motherboards don’t have a secure boot. You can easily figure out whether your MSI motherboard has a secure boot or not.

What is Secure Boot?

Secure boot is a feature that only enables trusted software to boot. If you have any malicious software installed on your computer that is not recognized by the manufacturer, secure boot will prevent that application from loading when you start your computer.

Any motherboard release after 2016 most likely has secure boot and TPM features. Remember, if your sole purpose of enabling secure boot in your MSI motherboard is to Windows 11, then you need to enable both TPM and secure boot. 

How to enable Secure boot in MSI

Go to the BIOS


First step of enabling secure boot in the MSI motherboard is to go to the BIOS. To go there, restart your computer or click on the power button to start your computer. Continue pressing the Delete button before your computer boots.

It will take you to the MSI Click BIOS screen.

Enable Advanced Mode

Click on Advanced or Press F7

By default, the BIOS is in EZ mode. EZ Mode displays less options compared to the Advanced Mode. EZ Mode just contains some basic settings. To go to the Advanced Mode, press F7 or click on the Advanced at the top center.

Enroll All Factory Default Keys

Don’t worry if the step seems unfamiliar to you. We will walk you through every step. Click on the Settings from the left panel and go to Boot. Then tap on Boot mode select and choose UEFI.

Boot mode select MSI

Again click on Settings and go to Advanced. There are many options. Click on Windows OS Configuration.

Windows OS Configuration MSI

Click on BIOS UEFI/CSM Mode and select UEFI if CSM is selected. After selecting UEFI, Secure Boot will appear on your screen. Click on Secure Boot.

Go to Secure Boot MSI

Click on [Disabled] and select Enable. A pop-up will appear on your screen, click on Ok.

Click on Secure Boot MSI

Also make sure that the Secure Boot Mode is selected as Custom or else you will not be able to proceed further.

Now click on Enroll All Factory Default Keys. Click on Yes on the pop-up on your screen.

Enroll all Factory Default keys

Again go to MSI BIOS

After installing the keys, click on F10 to Save changes and reboot your computer. Again keep pressing the Delete button to enter into the BIOS screen. 

Enable UEFI Mode

Go to Settings > Boot and click on Boot mode select. Then choose UEFI. Now go to Settings > Advanced > Windows OS Configuration and click on BIOS UEFI/CSM Mode. Click on it and select UEFI

Go to Secure Boot MSI

Now press F10 to save the progress and reboot your computer. Keep pressing the Delete button again to go to the BIOS screen.

Enable Secure Boot in MSI

As UEFI mode is already enabled, it’s time to enable Secure Boot. Go to Settings > Advanced > Windows OS Configuration

Click on Secure Boot and tap on Secure Boot. Select Enable. Then press F10 and click on Yes to save progress and reboot your computer.

Enable Secure Boot MSI

Now your computer will have Secure Boot enabled when you boot your computer. 

Bottom Line

Secure Boot is one of the most useful technologies to prevent malicious software from loading on boot. And it’s a compulsory requirement of Windows 11. If you want to upgrade from Windows 10 to 11, you must have Secure Boot enabled. 

Every motherboard has its own BIOS settings. You have to know the exact steps for any particular manufacturer. For example, the process of enabling Secure Boot in Gigabyte motherboards is different from MSI motherboards. 

If your MSI motherboard has secure boot, you can enable it by following the methods above. Remember, you may need to skip some steps if your BIOS settings are already tweaked. 

But the summary is simple, you need to install Primary Keys and enable UEFI mode before you can enable secure boot. 

Posted by

Founder of Techinheart. A football lover & tech enthusiast.

Leave a Reply

Your email address will not be published. Required fields are marked *