How to Disable or Enable Secure Boot on Your Computer via ASUS UEFI BIOS Utility
How to Disable or Enable Secure Boot on Your Computer via ASUS UEFI BIOS Utility
ASUS UEFI BIOS Utility - Secure Boot enabled
Secure Boot is often enabled by default on ASUS motherboards with UEFI BIOS. I have Windows 10 on my new PC right now and wanted to have a dual-boot setup. For that, I needed to disable the secure boot on the machine.
This guide is created to reflect the process that I followed to disable the ‘Secure Boot’ on the UEFI BIOS on Asus X99-Deluxe motherboard.
Step-by-Step: Take Backup of Existing Keys and Disable Secure Boot
Plug in a USB drive. Restart your computer and enter into the BIOS by pressing the DEL key (In case you need to use any other key, keep an eye out for instructions on the first screen.) This should load up the UEFI BIOS interface.ASUS UEFI BIOS Utility Go into the Advanced Mode (F7 or any other key as specified).
ASUS UEFI BIOS Utility - Advanced Mode settings
Go into ‘Secure Boot’ option under the Boot section.ASUS UEFI BIOS Utility - Boot settings Ensure the proper OS Type is selected, and go into Key Management.
ASUS UEFI BIOS Utility - Secure Boot enabled
Select ‘Save Secure Boot Keys’ and press enter.
Save secure boot keys
Select the USB drive when asked to ‘Select a File System’.
Choose the USB
Four key files named PK, KEK, DB and DBX are saved to the USB.
Keys saved Delete Platform Key (PK) to disable secure boot. (Note: Do not delete other keys)
Delete Key
Save and restart to apply settings (usually F10) and boot with ‘secure boot’ disabled.
DIsable Secure boot on ASUS motherboard
Step-by-Step: Restore Keys and Enable Secure Boot
Follow steps 1 to 5 from the previous section. Use the USB drive that has the backed up keys Go to ‘Load Default PK’ and press enter. You have two options to set the new key.Load default key ‘Yes’ loads the default keys. Once done, save the configuration and restart to have secure boot enabled. ‘No’ lets you load the backed up keys. Select the USB drive that has the backup files.Select the USB to restore from Select the right file to restore (In this case – PK)Select the correct file Confirm that it is a ‘UEFI Secure Variable’ type.Select the key file type to restore Confirm that you want to update the PK file.Confirm that you want to set the new key Save and restart. ‘Secure Boot’ should be enabled now.
Concluding
That’s it. It is quite straightforward once you know the steps. If you needed to take some different steps to disable secure boot on your system, do share with our readers in the comments below. Tweet Share Pin +1 Stumble