once in bios
boot tab > CSM
Disable launch CSM
Save and exit bios
And enter bios again
Boot tab > secure boot
Change OS type to windows UEFI
Open key management
Click on restore factory keys/install secure boot keys
if you dont see that option, its prob already installed so skip
and save and exit bios