Toggle Secure Boot Settings in Asus UEFI BIOS

Buzz

UEFI is a modern standard replacing the outdated Legacy standard. Most new-generation computers come pre-installed with the UEFI standard, featuring the Secure Boot functionality. While Secure Boot offers many security benefits, it can hinder dual-booting. This article guides you on how to enable or disable Secure Boot through Asus UEFI BIOS.

Secure Boot is a feature on the UEFI standard that provides multiple layers of secure protection for your system, preventing deep-seated malicious code from infiltrating your machine. This article provides instructions using visuals from the Asus X99-Deluxe motherboard, with similar or slightly different procedures for other motherboards.

GUIDE TO DISABLE SECURE BOOT

Step 1: Prepare a USB drive, connect it to your computer. Then, boot up your computer and access the BIOS (note the first screen for the hotkey guide to enter BIOS)

Step 2: Access Advanced Mode(F7).

Step 3: In Advanced Mode, navigate to the Boot tab.

Step 4: Select the

Secure Boot option in the Boot tab.

Step 5: In the OS Type section, choose the correct UEFI operating system type. Then, move to the Key Management section.

Step 6: Select Save Secure Boot Keys to store the 4 keys (PK, KEK, DB, and DBX) on your USB, then press Enter.

Step 7: Choose the USB drive to save the boot keys and press OK.

Step 8: After saving the 4 boot keys, go back to the Key Management screen, choose Delete PK to remove the Platform Key and disable Secure Boot.

Step 9: Afterward, you can switch to the Exit tab, save the settings, and then restart your computer with Secure Boot disabled.

GUIDE TO RESTORE PLATFORM KEY AND ENABLE SECURE BOOT

Step 1: Connect the USB containing the 4 keys (PK, KEK, DB, and DBX) you previously saved to your computer.

Step 2: Go back to the Key Management section in the BIOS. Choose Load Default PK and press Enter.

Step 3: You can choose Yes to load default keys. Here, select No to load keys from the USB.

Step 4: Choose PK to restore the Platform Key.

Step 5: Select UEFI Secure Variable.

Step 6: Confirm the update of the Platform Key (PK) file and press YES, then press OK to complete enabling Secure Boot.

Afterward, you can switch to the Exit tab, save the settings, and then restart your computer after enabling Secure Boot. Enabling or disabling Secure Boot allows you to modify protocols with the hard drive, choosing the appropriate mode for optimal hard drive usage. Once you've set up Secure Boot on the motherboard, the next step is to convert the hard drive from MBR to GPT or vice versa to make it compatible with this mode. Best of luck in your endeavors!

Mytour's content is for customer care and travel encouragement only, and we are not responsible.

For errors or inappropriate content, please contact us at: [email protected]