How to Disable or Enable Secure Boot on Your Computer via ASUS UEFI BIOS Utility

Un article de Informaticiens département des sciences de la Terre et l'atmosphère
Aller à: navigation, charcher

How to Disable or Enable Secure Boot on Your Computer via ASUS UEFI BIOS Utility

ASUS UEFI BIOS Utility - Secure Boot enabled

Secure Boot is often enabled by default on ASUS motherboards with UEFI BIOS. I have Windows 10 on my new PC right now and wanted to have a dual-boot setup. For that, I needed to disable the secure boot on the machine.

This guide is created to reflect the process that I followed to disable the ‘Secure Boot’ on the UEFI BIOS on Asus X99-Deluxe motherboard.

Step-by-Step: Take Backup of Existing Keys and Disable Secure Boot

Plug in a USB drive.
   Restart your computer and enter into the BIOS by pressing the DEL key (In case you need to use any other key, keep an eye out for instructions on the first screen.) This should load up the UEFI BIOS     interface.ASUS UEFI BIOS Utility
   Go into the Advanced Mode (F7 or any other key as specified).

ASUS UEFI BIOS Utility - Advanced Mode settings

Go into ‘Secure Boot’ option under the Boot section.ASUS UEFI BIOS Utility - Boot settings Ensure the proper OS Type is selected, and go into Key Management.

ASUS UEFI BIOS Utility - Secure Boot enabled

Select ‘Save Secure Boot Keys’ and press enter.

Save secure boot keys

Select the USB drive when asked to ‘Select a File System’.

Choose the USB

Four key files named PK, KEK, DB and DBX are saved to the USB.

Keys saved Delete Platform Key (PK) to disable secure boot. (Note: Do not delete other keys)

Delete Key

Save and restart to apply settings (usually F10) and boot with ‘secure boot’ disabled.

DIsable Secure boot on ASUS motherboard

Step-by-Step: Restore Keys and Enable Secure Boot

Follow steps 1 to 5 from the previous section. Use the USB drive that has the backed up keys Go to ‘Load Default PK’ and press enter. You have two options to set the new key.Load default key ‘Yes’ loads the default keys. Once done, save the configuration and restart to have secure boot enabled. ‘No’ lets you load the backed up keys. Select the USB drive that has the backup files.Select the USB to restore from Select the right file to restore (In this case – PK)Select the correct file Confirm that it is a ‘UEFI Secure Variable’ type.Select the key file type to restore Confirm that you want to update the PK file.Confirm that you want to set the new key Save and restart. ‘Secure Boot’ should be enabled now.

Concluding

That’s it. It is quite straightforward once you know the steps. If you needed to take some different steps to disable secure boot on your system, do share with our readers in the comments below. Tweet Share Pin +1 Stumble