Windows Installation: Opening UEFI, BIOS, and the Boot Menu

BIOS and UEFI: What's the Difference?

When you switch on a PC, a small piece of software built permanently into the motherboard (the mainboard) starts first. This software checks the hardware and then launches the operating system. It's called firmware.

BIOS (Basic Input/Output System) is the classic, very old form of this firmware. It's usually operated through a plain blue-and-gray text interface where only the keyboard works.

UEFI (Unified Extensible Firmware Interface) is the modern successor to BIOS. It offers a graphical interface (often with mouse support), supports large hard drives, and includes important security features such as Secure Boot. UEFI is mandatory for Windows 11.

Another term you may run into is Legacy BIOS or CSM (Compatibility Support Module). This is a compatibility mode that recreates old BIOS behavior inside UEFI. For Windows 11, this mode should generally be disabled, with pure UEFI mode active instead.

BIOS Setup vs. Boot Menu

These two things are often mixed up, but they're fundamentally different:

For a one-off Windows installation, the boot menu is usually enough: you simply select the USB drive there without changing anything permanently. You only need to go into Setup if you want to, say, enable TPM or Secure Boot, or permanently change the boot order.

Common Keys (F2, F12, Esc, Del)

To get into the firmware or the boot menu, press a specific key repeatedly right after powering on — often before the Windows logo appears. Commonly used keys include:

• Del – frequently used for BIOS/UEFI setup on desktop motherboards
• F2 – frequently used for setup on laptops
• F12 – frequently used for the boot menu
• F9, F10, F11, Esc – used for setup or the boot menu depending on the manufacturer

What You'll Need

• A PC running Windows 10 or Windows 11 (for the route via Windows Settings)
• Optional: your PC or motherboard manufacturer's manual (printed or as a PDF on the manufacturer's website)
• A bit of patience — firmware settings should be made calmly and attentively

Before You Start

• Write down which settings you change so you can undo them if needed.
• Only change the options you actually need (TPM, Secure Boot, boot order). Leave unfamiliar settings alone.
• Plug a laptop into its power adapter so it doesn't shut down while you're working in Setup.
• Keep the manufacturer's manual on hand in case menu items are named differently than described here.

Opening UEFI from Windows (Step by Step)

The most convenient way, without needing to catch the right key at startup: boot straight from Windows into the UEFI firmware. This works on both Windows 10 and Windows 11.

Enabling TPM 2.0

TPM (Trusted Platform Module) is a security chip, or security feature, that stores keys and certificates in a protected way. Windows 11 requires TPM 2.0. TPM is present on many PCs but disabled out of the box.

How to Check TPM in Windows

Press Windows key + R, type tpm.msc, and press Enter. The "Trusted Platform Module (TPM) Management" window shows whether TPM is ready and which specification version (ideally 2.0) is present.

How to Enable TPM in the Firmware

Open the UEFI firmware (see above) and look in the Advanced, Security, or Trusted Computing section for the TPM option. Important: the chip is named differently depending on the processor manufacturer:

• On Intel systems, often Intel PTT (Platform Trust Technology)
• On AMD systems, often AMD fTPM (Firmware TPM)
• Sometimes simply TPM Device, Security Device, or PTT

Set the option to Enabled, save, and restart. Afterward, check again in Windows with tpm.msc.

Enabling Secure Boot

Secure Boot is a UEFI security feature that stops manipulated or untrusted software from loading at startup. Secure Boot is also a requirement for Windows 11.

How to Check Secure Boot in Windows

Press Windows key + R, type msinfo32, and press Enter. In "System Information," the Secure Boot State line shows whether Secure Boot is on or off.

How to Enable Secure Boot in the Firmware

Open the UEFI firmware and look in the Boot, Security, or Authentication section for the Secure Boot option. Set it to Enabled. This often requires the PC to be running in pure UEFI mode (Legacy/CSM disabled).

Changing the Boot Order

The boot order determines which device the PC tries to start from first — for example, the USB drive instead of the internal hard drive. You need this to boot Windows from your installation drive.

There are two approaches:

• One-time (recommended): Open the boot menu at startup (see the key hints above) and select the USB drive there for this startup only. Nothing is changed permanently.
• Permanent: Open the UEFI firmware, go to the Boot section, and drag or move the USB drive to the top of the list. Save and restart.

Resetting Settings if Something Doesn't Work

If, after your changes, something no longer starts, or you clicked the wrong thing, you can usually reset the firmware to its factory settings without losing your data on the hard drive.

Look in the firmware for an entry such as "Load Setup Defaults," "Load Optimized Defaults," or "Restore Defaults" (often reachable via the F9 key — varies by manufacturer). Confirm, save with "Save & Exit" (often F10), and restart.

Common Problems

FAQ

Matching Licenses

If you're installing Windows afterward, make sure your license matches the edition you choose. That said, a license doesn't fix hardware incompatibility — TPM and Secure Boot need to be enabled in the firmware beforehand.

More Guides

Sources

• Microsoft – Enable TPM 2.0 on your PC: support.microsoft.com
• Microsoft – Windows 11 and Secure Boot: support.microsoft.com
• Microsoft – Windows 11 specifications and system requirements: microsoft.com
• Microsoft – Installing Windows 11: support.microsoft.com

Last updated: July 2026