Restart the PC and enter the BIOS/UEFI setup
Find the Boot, Security, or Authentication tab
Set CSM or Legacy Boot to Disabled
Set Boot Mode to UEFI
Enable Secure Boot
If prompted, install or restore default Secure Boot keys
Save changes and exit BIOS/UEFI
Boot into Windows
Open System Information and confirm Secure Boot State is On