No need to worry, it’s in your BIOS under security section. You can check if you set correct one by trying to change boot device: if there’s password prompt, you’re now safe from windows update “repair”.