While the requirement to upgrade a Windows 10 device to Windows 11 is only that the PC be Secure Boot capable by having UEFI/BIOS enabled, you may also consider enabling or turning Secure Boot on for better security.
Does Windows 11 need secure boot enabled?
As part of the system requirements, alongside a Trusted Platform Module (TPM), a device must have “Secure Boot” enabled to install Windows 11.
What boot method does Windows 11 need?
So you can see that since Windows 11 requires the UEFI boot mode, and the Secure Boot feature is associated with UEFI-based computers. It’s a necessary option for users to enable Secure Boot.
Which is better legacy or UEFI for Windows 11?
In general, install Windows using the newer UEFI mode, as it includes more security features than the legacy BIOS mode. If you’re booting from a network that only supports BIOS, you’ll need to boot to legacy BIOS mode. After Windows is installed, the device boots automatically using the same mode it was installed with.
