Secure Boot

Secure Boot is a UEFI security feature that verifies trusted signatures on the bootloader and early operating-system components before allowing them to run. Windows reports its state in System Information, and Windows 11 expects supported hardware to have it available. An unsigned or incorrectly signed early-start package may be blocked while this protection is active, which is safer than loading unknown kernel code. If older hardware software claims Secure Boot must be disabled, first look for a current signed release from the PC or component maker. Record firmware settings and the BitLocker recovery key before changing boot security, because firmware changes can trigger drive-recovery checks even when no data is damaged.