Security boot как отключить asus

Disable ASUS Motherboard's UEFI secure boot

Most new ASUS motherboards do not have the option to let users to turn off the UEFI secure boot. The “Secure Boot Enabled” is always greyed out and unable to change that option. Yet, we do have the option to disable the secure boot by clearing secure boot keys.

This is reversible so no need to worry about breaking the warranty or damaging the BIOS. BIOS’s Secure Boot menu should show Secure Boot state as “enabled” and Platform Key (PK) state as “loaded”

To disable the UEFI secure boot:

Make sure the “OS Type” is “Windows UEFI”

Enter “Key Management”

Select “Clear Secure Boot keys” (You will have the option “Install default Secure Boot keys” to restore the default keys after you cleared the Secure Boot Keys)

After you cleared the Secure Boot Keys, Secure Boot will be automatically disabled. You can set the OS Type to Other OS now.

How To Disable Secure Boot on an ASUS Motherboard

By default, many ASUS motherboards that sport UEFI BIOS have the Secure Boot mode enabled. However, disabling this mode can help you install Windows more easily or set up dual boot on your computer.

On many models, there is no way to directly disable the Secure Boot mode. Because of that, we’ll need to clear the keys that enable it from BIOS. Don’t worry, you can always reverse this process and enable Secure Boot without any problems. You also won’t void the warranty by disabling or enabling Secure Boot.

Before You Start

Before you disable Secure Boot mode on your computer with an ASUS motherboard, you should enable GPT partitions. For example, if you want to install a copy of Windows on your computer, you won’t be able to do it if the system is not in UEFI mode. The hard drive partition style needs to support this mode or be compatible with it.

When you enable UEFI mode, you’ll also enable GPT partitioning on your hard drive. This will allow you to create partitions bigger than 4GB and you’ll be able to have as many of them as you want. There are two ways to go about it – Command Prompt or a third-party app.

The Best Mining Motherboards

Command Prompt

If you opt to do this via Command Prompt, follow these steps.

1. Insert the Windows installation disk or plug in a USB stick and boot the computer in UEFI mode.
2. When the setup opens, press the Shift and F10 keys simultaneously. This will bring up the Command Prompt console.
3. Use the diskpart command to access the disk partition tool. Allow it to make changes to your computer.
4. Use the listdisk command to identify and list the disk format.
5. Pick the drive you’d like to format and to turn into GPT. Do it with following commands: Select disk <type the disk number here>, clean (this command wipes the disk), convert gpt (this one converts it to GPT).

Third-Party App

Jf you’re not willing to mess around with Command Prompt, you could use Partition Master by EaseUS to turn your hard drive into GPT. The app can also help delete, remove, wipe, merge, and create hard disk partitions.

The app’s available in three versions – Partition Master Pro (for a single computer), Partition Master Server (for servers), and Partition Master Unlimited (for multiple computers and servers). All three options are available with free trials. You can find them at EaseUS official site.

The Best RAM for Ryzen 9 5950x

Disabling Secure Boot

With all the preparations out of the way, it is time to disable the Secure Boot on your ASUS. Just follow these steps.

1. Plug a USB drive into your computer.
2. Open the Start menu and opt to reboot your computer.
3. Once the computer starts booting, press the DEL button on your keyboard to enter the BIOS. Depending on the model, you might need to press a different button.
4. Open the Advanced Mode. Most commonly, pressing the F7 key will do it. However, there are models with different keyboard shortcuts.
5. Open the Boot section.
6. Next, open the Secure Boot sub-menu.
7. In the OS Type section, select the Windows UEFI mode option from the drop-down menu.
8. Open the Key Management sub-menu.
9. Pick the Save Secure Boot Keys option.
10. Hit Enter.
11. When BIOS prompts you to pick a file system, you should opt for the recently plugged USB drive.
12. BIOS will then store DBX, DB, KEK, and PK key files onto the USB drive.
13. Next, you should delete the Platform Key. This will disable Secure Boot. Be careful not to delete any other keys.
14. To save your settings and exit BIOS, press the F10 key on your keyboard. This will restart your computer. Wait for it to boot outside of the Secure Boot mode.

Enabling Secure Boot

If you change your mind and wish to enable Secure Boot once more, here’s how to do it.

1. Plug a USB drive into the PC.
2. Launch the Start menu and select Restart from the Power menu.
3. When your computer starts booting, press DEL on the Keyboard (or another assigned key) to enter BIOS.
4. Press F7 (or another designated key) to enter the Advanced Mode section of the BIOS menu.
5. Open the Boot section.
6. After that, open the Secure Boot section.
7. Navigate to the OS Type option and pick Windows UEFI mode from the drop-down menu.
8. Next, head over to Key Management.
9. Scroll down to the Load Default PK option and hit Enter.
10. If you opt for Yes, you will load the default set of keys. When you’re done, save your settings and exit. Wait for the computer to reboot. If you choose No, you’ll be able to load the keys you backed up.
11. Assuming that you’ve picked No, you should now pick the USB drive with the keys from the list named Select a File System.
12. Next, select the PK key and click OK.
13. In the Select Key file type, opt for UEFI Secure Variable and hit OK.
14. When prompted Update ‘PK’ from selected file ‘PK’, select Yes.
15. Save your settings and exit. Wait for the computer to boot in the Secure Boot mode.

Take Control of Your Computer

Disabling the Secure Boot mode allows you to do so much more with your computer. The best thing about it is that it’s completely reversible and doesn’t void the warranty.

Have you tried disabling Secure Boot? Did you have any problems along the way? Let us know in the comments below.

How to Disable or Enable Secure Boot on Your Computer via ASUS UEFI BIOS Utility

Secure Boot is often enabled by default on ASUS motherboards with UEFI BIOS. I wanted to have a dual-boot setup on my new PC, and that is not possible when secure boot is enabled. That meant having to identify the Asus BIOS key for the motherboard, enter the Asus BIOS utility and disable secure boot on my Windows 10 running PC.

This guide is created to reflect the process that I followed to disable secure boot using Asus UEFI BIOS Utility on Asus X99-Deluxe motherboard. You can use this guide to identify the motherboard you have if you are not sure which one it is.

Prerequisite for Windows UEFI Mode: GPT Partition Style

Installing Windows on UEFI-based systems requires that your hard drive partition style has to support UEFI mode or at least be in a legacy BIOS-compatibility mode. You might run into an error as below, which indicates that your PC is booted in UEFI mode, but your hard drive does not support it.

“Windows cannot be installed to this disk. The selected disk is not of the GPT partition style”

The GPT partition style on your hard drive is required for the UEFI mode. Another advantage of GPT partition style is that you can set up drives of size greater than 4 GB, and have as many partitions on it as you need. The easiest way to apply the GPT partition style to your hard drive is to do it over the command prompt using the installation disk or let a Windows-based tool to handle it for you.

Two Ways to Convert Your Hard Disk to GPT Partition Style

Use a Software to Create a GPT Disk and Avoid Possible Data Loss.

If you want to convert a disk in use to the GPT format, all the data on the disk could be lost. You can avoid this problem by using a software like the Windows Partition Manager from EaseUS.

EaseUS partition master can help you convert the hard drive to GPT. In addition, it can help you create, merge, remove, delete or wipe partitions. It can also help you with data recovery in case of deleted or lost partitions. It has an effective free version as well and the pro version offers more advanced features like – converting to GPT partition style without data loss! It is not too expensive and can be a valuable addition to your toolkit.

This Windows Partition Manager has been mentioned by a few of our readers before, and another one emailed me recently mentioning how useful it was for him while setting up a dual boot system. He also mentioned that the support team from EaseUS was very helpful with any questions he had, and highly recommended the tool.

Convert Your Hard Drive to GPT Partition Style Using the Command Prompt

1. Plug-in the Windows setup disk or USB and boot your PC in UEFI mode.
2. Once in Windows setup, press shift + F10 to open a command prompt window.
3. Open the disk partition tool with diskpart.
4. List and identify the disk to format with list disk.
5. Select the drive to format and convert to GPT.
   select disk <disk number here>
   clean
   convert gpt
   exit
6. Close the command prompt and continue.

How to Enter Asus BIOS

On Your Asus Laptop

1. Press F2, hold it and power on your laptop.
2. Keep the F2 key pressed till the Asus BIOS screen displays.

This approach should work on Windows 7 and earlier operating systems.

On Your PC With an Asus Motherboard

1. Power On your PC or if it is already on, restart it.
2. Wait for the screen with the Asus logo to display
3. Hit DEL key to load Asus BIOS utility. You have only a few seconds to do so before the operating system starts loading.

Note : Some Asus systems have the Esc or F10 keys as the Asus BIOS entry keys. Pay attention to the loading screen with the Asus logo. It should mention what specific key is to be used to enter Asus BIOS utility on your machine.

On Systems Running Windows 8 or Windows 10

Since Windows 8 and Windows 10 leverage Fast Startup, you would not be able to get to the BIOS during the system start-up sequence. Instead, you need to restart your computer to get there. Detailed steps can be seen in the video below.

Step-by-Step: Make A Backup of Existing Keys and Disable Secure Boot

1. Plug-in a USB drive.
2. R estart your computer and enter into the BIOS utility by pressing the Asus BIOS keyapplicable to your system. In my case, it was DEL. Keep an eye out for instructions on the first screen. This should load up the Asus UEFI BIOS utility interface .
3. Go into the Advanced Mode (F7 or any other key as specified).

1. Go into the ‘Secure Boot‘ option under the Boot section.
2. Ensure the proper OS Type is selected, and go into Key Management.
3. Select ‘Save Secure Boot Keys‘ and press enter.
4. Select the USB drive when asked to ‘Select a File System‘.
5. Four key files named PK, KEK, DB, and DBX are saved to the USB.
6. Delete Platform Key (PK) to disable secure boot. (Note: Do not delete other keys)
7. Save and restart to apply settings (usually F10) and boot with ‘secure boot’ disabled.

Step-by-Step: Restore Keys and Enable Secure Boot

1. Follow steps 1 to 5 from the previous section. Use the USB drive that has the backed up keys
2. Go to ‘Load Default PK‘ and press enter. You have two options to set the new key.
3. ‘Yes’ loads the default keys. Once done, save the configuration and restart to have secure boot enabled.
4. ‘No’ lets you load the backed up keys.
   1. Select the USB drive that has the backup files.
   2. Select the right file to restore (In this case – PK)
   3. Confirm that it is a ‘UEFI Secure Variable‘ type.
   4. Confirm that you want to update the PK file.
   5. Save and restart. ‘Secure Boot’ should be enabled now.

   That’s it. Enabling or disabling secure boot can appear to be a complicated process, but it is quite straightforward once you know the steps.

   Как отключить Secure Boot в BIOS ноутбука

   Доброго времени суток.

   Довольно часто многие пользователи задают вопросы насчет Secure Boot (например, данную опцию иногда требуется отключить при установке Windows). Если ее не отключить, то эта защитная функция (разработанная Microsoft в 2012г.) будет проверять и искать спец. ключи, которые имеются только у ОС Windows 8 (и выше). Соответственно, загрузить ноутбук с какого-либо носителя вы не сможете…

   В этой небольшой статье я хочу рассмотреть несколько популярных марок ноутбуков (Acer, Asus, Dell, HP) и показать на примере, как отключить Secure Boot.

   В ажная заметка! Чтобы отключить Secure Boot, необходимо зайти в BIOS — а для этого нужно нажать соответствующие кнопки сразу после включения ноутбука. Этому вопросу посвящена одна из моих статей — https://pcpro100.info/kak-voyti-v-bios-klavishi-vhoda/. В ней указаны кнопки для разных производителей и подробно рассказано, как войти в BIOS. Поэтому, в этой статье я на этом вопросе останавливаться не буду…

   (Скриншоты из BIOS ноутбука Aspire V3-111P)

   После того, как вошли в BIOS, необходимо открыть вкладку «BOOT» и посмотреть активна ли вкладка « Secure Boot «. Скорее всего, она будет не активной и ее нельзя будет изменить. Такое происходит из-за того, что не установлен пароль администратора в разделе BIOS « Security «.

   

   Чтобы его установить, следует открыть данный раздел и выбрать пункт « Set Supervisor Password » и нажать на Enter.

   

   Далее ввести и подтвердить пароль и нажать Enter.

   

   Собственно, после этого можно открыть раздел « Boot » — вкладка « Secure Boot » будет активна и ее можно переключить в Disabled (т.е. выключить, см. скриншот ниже).

   

   После проведенных настроек, не забудьте сохранить их — кнопка F10 позволит сохранить все произведенные изменения в BIOS и выйти из него.

   

   После перезагрузки ноутбука, он должен грузиться с любого* загрузочного устройства (например, с флешки с Windows 7).

   Некоторые модели ноутбуков Asus (особенно новые) ставят, порой, начинающих пользователей в тупик. На самом деле, как в них можно отключить защищенную загрузку?

   1. Сначала заходим в BIOS и открываем раздел « Security «. В самом низу будет пункт « Secure Boot Control » — его нужно переключить в disabled, т.е. выключить.

   Далее нажимайте кнопку F10 — настройки будут сохранены, а ноутбук отправиться перезагружаться.

   

   2. После перезагрузки снова войтдите в BIOS и затем в разделе «Boot» сделайте следующее:

   • Fast Boot — переводим в режим Disabled (т.е. отключаем быструю загрузку. Вкладка есть не везде! Если у вас ее нет — то просто пропустите эту рекомендацию);
   • Launch CSM — переключаем в режим Enabled (т.е. включаем поддержку и совместимость со «старыми» ОС и ПО);
   • Затем снова жмем F10 — сохраняем настройки и перезагружаем ноутбук.

   

   3. После перезагрузки входим в BIOS и открываем раздел « Boot » — в пункте « Boot Option» можно бужет выбрать загрузочный носитель, который подключен к USB порту (например). Скриншот ниже.

   

   Затем сохраняем настройки BIOS и перезагружаем ноутбук (кнопка F10).

   (Скриншоты с ноутбука Dell Inspiron 15 3000 Series)

   В ноутбуках Dell отключение Secure Boot, наверное, одно из самых простых — достаточно одного захода в Bios и ненужно никаких паролей администраторов и пр.

   После входа в BIOS — откройте раздел «Boot» и задайте следующие параметры:

   • Boot List Option — Legacy (этим мы включаем поддержку старых ОС, т.е. совместимость);
   • Security Boot — disabled (отключаем защищенную загрузку).

   

   Собственно, далее можно отредактировать очередь загрузки. Большинство устанавливает новую ОС Windows с загрузочных USB флешек — поэтому ниже привожу скриншот, какую строку нужно подвинуть на самый верх, чтобы можно было загрузиться с флешки (USB Storage Device).

   

   После введенных настроек нажмите кнопку F10 — этим вы сохраните введенные настройки, а затем кнопку Esc — благодаря ей вы выйдите из BIOS и перезагрузите ноутбук. Собственно, на этом отключение защищенной загрузки на ноутбуке Dell — завершено!

   После входа в BIOS, откройте раздел « System Configuration «, а затем перейдите во вкладку « Boot Option » (см. скриншот ниже).

   

   Далее переключите « Secure Boot » в Disabled, а « Legacy Support » в Enabled. Затем сохраните настройки и перезагрузите ноутбук.

   

   После перезагрузки появиться текст «A change to the operating system secure boot mode is pending…».

   Нас предупреждают о внесенных изменениях в настройки и предлагают подтвердить их кодом. Просто нужно ввести код, показанный на экране и нажать на Enter.

   После этого изменения ноутбук перезагрузиться, а Secure Boot будет отключен.

   Чтобы загрузиться с флешки или диска: при включении ноутбука HP нажмите на ESC, а в стартовом меню выберите пункт «F9 Boot Device Options», дальше сможете выбрать устройство, с которого хотите загрузиться.

   Похожие публикации:

   1. Acpi pnp0a0a windows 7 asus что за драйвер
   2. Asus ao help что это
   3. Asus device activation что это
   4. Asus gpu tweak ii что это за программа