Open Start, type `msinfo32`, and press Enter
Check `BIOS Mode`
If `BIOS Mode` shows `Legacy`, restart and enter BIOS/UEFI setup
In BIOS/UEFI, disable `CSM` or `Legacy Boot`
Set boot mode to `UEFI`
Save changes and restart
Re-enter BIOS/UEFI setup
Find `Secure Boot`
Set `Secure Boot` to `Enabled`
If prompted, load default or factory Secure Boot keys
Save changes and exit
In Windows, open `msinfo32` again
Check `Secure Boot State` and confirm it shows `On`