Configure UEFI firmware for Windows 11
UEFI setup readies and secures a machine before Windows loads: enable the TPM and Secure Boot (the Windows 11 requirements), confirm the boot mode is UEFI (Secure Boot needs it), enable CPU virtualization, set a supervisor password, and Save and Exit so the changes survive the restart. This lab uses the simulated setup screen; a real board uses the same tabs.
Steps
- 1
On the Security tab, enable the TPM (TPM, Intel PTT, or AMD fTPM).
- 2
On the Boot tab, turn on Secure Boot.
- 3
Set the boot mode to UEFI (not Legacy or CSM).
- 4
On the Advanced / CPU Configuration tab, enable Intel VT-x or AMD-V.
- 5
On the Security tab, set a Supervisor (setup) password.
- 6
Save and Exit (F10) and confirm the settings are retained after restart.
What you should see
After Save and Exit the firmware reports the settings saved and retained after restart. The verification confirms the TPM, Secure Boot, UEFI boot mode, virtualization, and the firmware password are all in place.