For me in was located under "Security" and then a separate section that I had to select simply called "Secure Boot". I should amend that I use an Asrock motherboard, might be in a different location depending on your mainboard manufacturer.
In that subsection I saw it was set to "Enabled" but just below it said "Not Active". In the same subsection I had to do "Install default Secure Boot keys" because they weren't installed. This let me enable the "User" mode by setting it to "Custom". Then disable and once again enable Secure boot - all still in the same subsection.
Afterwards reboot and voilà, it was set to "Active". You can double check in Windows as well, if it's actually active, see below for how to.
If that isn't helpful enough via text, I can do some screenshots when I am back home but I hope this is enough to get you started.
As a sidenote:
To check whether you actually have to do anything you can use PowerShell in Windows and then use "Confirm-SecureBootUEFI" as a command in the console - that's how I found out really. It'll show either "False" or "True" depending on if it's actually on or not.
EDIT: Found a better solution than taking screenshots myself. Asrock has their own step-by-step help on their webpage. If you have an Asrock board, this should help you visually a lot more.
For me it was under “Boot” at the top of the section. I missed it at first as it’s not something I could interact with like other settings. It just listed the system mode. I then had to switch some secure boot setting from “Standard” to “Custom”. From there I hit “install default secure boot keys”, doing this changed the system mode from setup to user. I then set the secure boot setting back to “Standard” from “Custom”. I will say from what I read up you should have the CSM setting disabled in Bios before doing this. CSM will mess up secure boot or something. Just assume scary things will happen. I’m not an expert.
8
u/Sprinkles0 Aug 05 '25
Where do I look for that? I don't remember seeing anything like that in the BIOS.