The BootOptions control verifies that your computer's boot security features are properly configured. On Windows, this checks that Secure Boot is enabled. On macOS, this checks that System Integrity Protection and other boot security features are active.
Important: Boot security features protect your computer from the moment it starts up, before your operating system even loads. They prevent malicious software (including rootkits and bootkits) from loading during startup and tampering with your system at a fundamental level. Disabling these features is typically only done by advanced users for specific technical reasons, but it significantly weakens your computer's security.
Boot security features prevent sophisticated malware from loading before your operating system starts, where they would be nearly impossible to detect and remove.
These features verify that only trusted, unmodified software runs during startup, ensuring your system hasn't been tampered with by attackers or malware.
Boot security protects critical system files and processes from modification, even by users with administrator privileges, preventing accidental or malicious system damage.
System Integrity Protection (SIP) and secure boot settings are usually only disabled intentionally for specific development or troubleshooting purposes. Common reasons include:
In most cases, these features should be re-enabled after the specific task is complete.
After enabling boot security features, Citadel will automatically verify this control during its next check.