Hi Zijie Wang,
Thank you for reaching out to Microsoft Community.
Please boot the device to the UEFI screen. You may check this page for the steps on How to get to the UEFI settings. Once you are on the UEFI screen, go to Security then enable the Secure Boot option. Click Change Configurationthen set it to Microsoft only or Microsoft & third party CA. Choose Exit > Restart now. Click Yes if prompted.
If this answer your question, we highly encourage you to inform our Community by clicking on Yes or marking my post as an answer. This will help other members who may have the same issue as you. Otherwise, don't hesitate to update us so we can further assist you.
Kind Regards,
Marrion Y.