Purpose: Providing a Foundational Layer of Security

To protect our company’s data and devices, it’s critical to stop threats before they can even start. The “Secure Boot” health check verifies that your computer has a fundamental security feature that acts as a security guard during its startup process.

This is one of the most important security requirements for Windows 11, as it prevents sophisticated viruses from loading before your anti-virus software even has a chance to run.

How it Works: A Digital Bouncer for Your PC

Think of Secure Boot as a bouncer or security guard at the front door of your computer.

1. When you press the power button, this “bouncer” immediately gets to work, before Windows even begins to load.
2. It checks the “ID” of every piece of essential software that tries to run, including the core of the Windows operating system itself.
3. Only software with a legitimate, trusted digital signature from Microsoft or the computer manufacturer is allowed to load.
4. If it detects an unauthorized piece of software—like a hidden virus trying to take control—it stops the boot process cold, preventing the threat from infecting your system.

Our health check simply confirms that your computer has the capability to perform this critical security check at startup.

What Your Results Mean

The check verifies that your computer’s hardware is capable of using Secure Boot.

Status	What It Means	What To Do
PASS	Secure Boot Capable Your computer has the necessary hardware and firmware to use this essential security feature. It meets the modern standard for startup protection.	No action is required. Your device has the correct security foundation.
ACTION REQUIRED(Fail)	Secure Boot Not Supported Your computer’s hardware is older and does not support this critical security feature. This makes it more vulnerable to advanced threats and is not compatible with Windows 11.	This cannot be fixed with a software update. This is a hardware limitation. Please contact the IT Help Desk immediately to schedule a device replacement.

Frequently Asked Questions

Why is this so important? My computer has anti-virus software.

• Anti-virus software is essential, but it only starts running after Windows has loaded. Secure Boot protects you during the vulnerable first few seconds of startup, stopping a type of threat that traditional anti-virus programs can’t see.

Can you just install Secure Boot on my computer?

• Unfortunately, no. Secure Boot is a feature built directly into the computer’s core hardware and its startup instructions (firmware). If the computer was not manufactured with this capability, it cannot be added later.

My check passed. Does that mean Secure Boot is always on?

• It means your computer has the ability to use it, which is the most important part. For specific IT maintenance tasks, it may be temporarily disabled, but our check confirms your device has this non-negotiable security capability built-in.

How does this relate to the “Boot Method” (UEFI) check?

• They are part of the same security team. The modern UEFI boot method is the system that enables the Secure Boot “bouncer” to do its job. You need both to be compliant with modern security standards.