How to use Secure Boot on your PC

Friday, 16 May 2025

Learn about Secure Boot, an important security feature required to play some EA games.

Secure Boot is a security feature in Windows 11 and Windows 10 that ensures programs that run during your PC’s startup have a higher standard of trust and safety.

Heads-up: If you’re not used to navigating through your BIOS, you should contact a professional. Incorrectly configuring BIOS settings can cause issues with your computer, including failure to start up.

The setting to modify in a PC’s BIOS depends on the brand of your computer or its motherboard’s manufacturer. We highly recommend that you read your computer or motherboard manufacturer's support resources before updating any BIOS settings. EA doesn’t take responsibility if you change your BIOS settings.

Use these steps to enable Secure Boot on your PC, or check out our video.

On Windows 10 and Windows 11:

Select the Windows Key + R. This will open the Run Window.
Type msinfo32 and select the Enter Key or OK.
From the System Information window that opens, select System Summary.
Scroll down to find these values:
- BIOS Mode value should be UEFI
- Secure Boot State value should be On.

If Secure Boot State is Off, you can use Secure Boot after enabling it.
If Secure Boot State is Unsupported, check with your motherboard manufacturer’s specification sheet or manual to see if Secure Boot is supported.
If BIOS Mode is UEFI, then you can move on to how to enable Secure Boot.
If BIOS Mode is Legacy, you’ll need to check that the hard drive Windows is installed on is set up as GPT (GUID Partition Table) and not MBR (Master Boot Record).

The System Information window showing the System Summary on the left, both the BIOS Mode as UEFI and the Secure Boot State as On on the right.

Heads up: Your Windows install drive must be set up correctly to support Secure Boot. Secure Boot needs to use GPT (GUID Partition Table) instead of MBR (Master Boot Record).

First, check if TMP 2.0 is turned on and make sure the Windows disk is GPT and not MBR. You can jump straight to turning on Secure Boot if you’ve already done these steps.

Check if TPM 2.0 is enabled

Select the Windows key and R at the same time to bring up Run Windows.
Type tpm.msc and select the Enter Key.
Check the Status box to see if TPM is ready to use. If it’s ready to use, it’s time to check if your Windows disk is MBR or GPT.
If TPM isn’t ready, go to your manufacturer’s page on how to correctly enable TPM on your device:
- MSI
- Lenovo
- HP
- ASUS
- Dell

The TPM Management window showing the TPM Status as ready to use.

Check if your Windows disk is MBR or GPT

1. Select the Windows key and X at the same time, then choose Disk Management.

2. Find the disc that says OSDisk(C:), and right-click the left column, then select Properties.

The Disk Management window highlighting the Properties button in Step 2.

3. In the resulting Properties Window, select the Volumes tab.

4. Find Partition style.

If it says GUID Partition Table (GPT), no action is required.
If it says MBR, move on to the next step.

Only move on to step 5 if Partition style says MBR. If it says GPT, you’re ready to enable Secure Boot.

5. Select Windows and R, then type cmd and hit Ctrl + Shift + Enter to open an administrative command prompt.

An example of the administrative command prompt, showing the required commands described in Step 5.

Make sure the administrative command prompt says Administrator, then type mbr2gpt/validate/disk:0/allowFullOS and select Enter. The disk:0 part of the command should match the number listed in the Disk Properties window under the Volume tab.

6. In the same administrative command prompt, type mbr2gpt/convert/disk:0/allowfullOS and select Enter.

The disk:0 part of the command should match the number listed in the Disk Properties window under the Volume tab.

An example of the administrative command prompt, showing the required commands described in Step 6.

7. You might be required to switch the Firmware to boot to UEFI mode. Usually, this can be done through the BIOS Settings. Please refer to your computer’s brand or manufacturer’s support resources for detailed instructions if you need to switch your Firmware Settings:

Now that if your Windows disk is set to GPT and your BIOS is set to UEFI, you’re ready to enable Secure Boot.

Secure Boot is required to play some EA games, so if you’re getting a notification to turn it on, here’s how.

Before following these steps, make sure both TMP 2.0 and UEFI are enabled.

Remember—the BIOS menus for different brands and motherboard manufacturers can differ from those pictured here, so make sure to refer to your manufacturer’s support resources for specifics:

Select the Windows Key and search for Change Advanced Startup Options.
Next to Advanced startup select Restart now. Your computer will restart into Advanced Startup.

An example of the BIOS menu highlighting the Advanced startup button.

Select Advanced options.
Select UEFI Firmware Settings.

The Advanced options window, highlighting the UEFI Firmware Settings option.

Navigate to the Boot tab.
Secure Boot state should be Enabled.
- If it’s set to Disabled, change it to Enabled.
OS Type should be set to Window UEFI mode.
Go to the Exit tab and select Save Changes & Reset.
Select Ok.
Your PC will restart with Secure Boot turned on.

After enabling Secure Boot, try launching your game again.

Follow @EAHelp for everything from outage info to game news.
Subscribe to EA Help on YouTube for video walkthroughs and guides.

Was this article helpful?

0% of 0 players found this article helpful.

Not what you were looking for? Try searching again.