How to disable Secure Boot on an ASUS motherboard step by step

If you're tinkering with your PC, want to install Linux, run Memtest86+, or start a tool from a USB driveYou'll likely encounter the dreaded Secure Boot feature on ASUS motherboards. And of course, until you fully understand it, it's quite daunting to touch anything in the BIOS for fear of your computer failing to boot. Here's how. How to safely disable Secure Boot on an ASUS motherboard.

On ASUS motherboards and equipment, the Secure Boot It is a UEFI firmware security feature Designed to prevent unsigned operating system loaders or drivers, or malware, from loading during the boot process. It's very useful for everyday use with Windows, but when you want to try other systems or utilities, it's usually the first obstacle you encounter.

What is Secure Boot on an ASUS motherboard and what is it used for?

Safe Starting is, in essence, a filter that only allows signed and trusted software to be launched via UEFI firmware, typically using Microsoft and manufacturer keys. This way, if malware attempts to hijack the boot process, the motherboard detects it as unauthorized and blocks it before the operating system even loads.

In ASUS equipment (laptops, desktops, AIOs and standalone motherboards), Secure Boot is enabled by default when Windows is installed in UEFI modeFor guides on how to activate this feature on Windows systems, you can consult How to enable Secure Boot in Windows 11This ensures that the Windows boot loader and the drivers involved during startup are properly signed and validated, reinforcing both the security and overall stability of the system.

This layer of protection has a direct consequence: any operating system, tool, or loader that does not have a valid signature or is not recognized by the Secure Boot keys It will not be able to start. This affects some Linux distributions, older versions of Windows, or utilities like Memtest86+ in certain versions that are not signed by Microsoft for Secure Boot; in these cases, it's advisable to check how Disable Secure Boot in order to start.

Therefore, although the official ASUS recommendation is Keep Secure Boot enabled if you don't have special needs.When you want to boot unsigned software or alternative operating systems, you often have to temporarily disable it or adjust its settings. If you need instructions on how to re-enable it, there is a helpful article on how to do so. How to enable Secure Boot in Windows 11.

When is it advisable to disable Secure Boot on an ASUS motherboard?

There are very specific situations in which Disabling Secure Boot on an ASUS motherboard is practical and even necessary.It's not about turning it off just for the sake of it, but about knowing when you really need it.

A very typical case is when you try booting a Linux distribution from a USB On an ASUS laptop or desktop, the system either ignores the USB drive or displays errors related to Secure Boot. Some modern distributions support Secure Boot (using shims and valid signatures), but others don't, or the ISO you burned isn't compatible. In those cases, check the Mistakes to avoid in Rufus It can save you trouble when creating the USB drive.

Another very common scenario is the use of diagnostic utilities such as Memtest86+Recent versions may not be signed for Secure Boot, and the tool's installer on the USB drive clearly warns you that it is required. Disable Secure Boot in the BIOS so that the unit can boot without problems; if you are working with older or specific versions of Windows, there are guides on how Disable UEFI Secure Boot.

It also comes into play when You reinstall Windows in a way other than the factory default.If you change your operating system (for example, switching from Windows to a Linux distribution) or install an OS not supported by Secure Boot, such as Windows 7, the firmware may detect inconsistencies in the boot keys and cause errors or prevent booting altogether. If you are considering forcing Windows 11 on unsupported computers, keep the following in mind: associated risks.

Finally, some users disable Secure Boot when performing intensive hardware tests (RAM, SSD, motherboard) or when using external repair and maintenance toolsWhile the problem is being resolved, having secure boot disabled prevents it from being an additional obstacle.

Risks and warnings before touching Secure Boot

Although it may seem like just another BIOS setting, Changing Secure Boot settings is not harmlessThere are a couple of things you should be clear about before you happily disable it on your ASUS computer.

First of all, Disabling Secure Boot reduces protection against low-level malware which tries to sneak into the boot chain. It's not that without Secure Boot your PC will automatically become infected, but you lose an important defense against rootkits and threats that act before the antivirus has a chance to boot.

Another key point is encryption: if your disk is protected with BitLocker or Windows Device EncryptionChanging critical BIOS settings (including those related to Secure Boot) can cause your system to prompt you for the recovery key at startup. Without that key, the drive's contents will remain locked. If you're unsure whether a problem originates from the BIOS, you can learn How to detect it without entering the BIOS.

Therefore, before touching anything, it is highly recommended Locate and safely store your BitLocker recovery keyYou can get it from your Microsoft account, a previously saved file, or a physical printout. If you installed Windows yourself, BitLocker might not be active, but on many modern laptops it is enabled almost automatically.

Furthermore, by modifying the boot mode or operating system type in the BIOS, An incorrect configuration can cause Windows to fail to boot. until you restore the proper setting. It doesn't usually break anything irreversibly, but it can give you quite a scare if you don't remember what you touched.

How to enter the BIOS/UEFI of an ASUS computer

Before disabling Secure Boot, you must Access the BIOS or UEFI utility of your ASUSThe procedure is similar, but varies slightly between laptops, pre-assembled desktops, and desktop motherboards.

On most ASUS laptops, AIOs, and gaming devices, with the computer completely powered off, you must Press and hold the F2 key on the keyboard and, without releasing it, press the power buttonWhen you see the BIOS screen, you can release F2 and start navigating through the settings.

In the case of ASUS desktop towers and many PC gaming motherboards, access is usually done with the key Delete (Supr) during startupTurn on your PC and repeatedly press Delete until the BIOS screen appears. On newer models, F2 may also work, but Delete is still the standard.

Once inside, you'll see that ASUS computers typically offer two types of UEFI interfaceThere is a simpler or EZ mode and an Advanced Mode. To change Secure Boot parameters, you usually need to enter this Advanced Mode by pressing the F7 key or clicking on the corresponding option at the bottom of the screen.

In the advanced interface you can move around using the arrow keys and the Enter keyOr, if your computer allows it, you can also use a mouse or touchpad. From there, the menu organization will depend on whether you're using a laptop, an ASUS OEM desktop, or a motherboard from the TUF, ROG, PRIME, etc. range.

Disable Secure Boot on ASUS laptops (Classic UEFI and MyASUS in UEFI)

On ASUS laptops and AIO computers, disabling Secure Boot is done from the sections of Security or Advanced Mode BootThe exact path changes slightly depending on whether your firmware uses the standard UEFI interface or the "MyASUS in UEFI" variant.

On models with a classic UEFI interface, once in advanced mode, you must access the Security tabWithin it you will find the Secure Boot option, which groups together the status, control and management of secure boot keys.

When you enter the Secure Boot menu, you'll see a section called, depending on the model, Secure Boot Control or similarThis setting is what actually enables or disables Secure Boot. If set to "Enabled," Secure Boot is enabled; if set to "Disabled," it is disabled.

It is important to know that the The Secure Boot status you see on the screen (active or not active) cannot be directly modifiedThis status updates automatically based on the Secure Boot Control settings and the keys present. After changing the setting, you must save the configuration and restart for the new status to take effect.

On devices with a MyASUS interface in UEFI, the workflow is virtually the same: You enter advanced mode, go to the Security tab, enter Secure Boot and change the Secure Boot Control parameter Use "Disabled" to turn it off or "Enabled" to turn it back on. The navigation may be slightly different, but the options are named almost the same.

Once the change has been made, to apply the adjustments you will need to Press F10 and confirm with OK or AcceptThe laptop will restart, and from that moment on, you will be able to boot from your USB drive with Linux, Memtest86+, or other tools that were previously blocked by Secure Boot.

Disable Secure Boot on ASUS desktop computers and motherboards

In ASUS desktop PCs and, especially, in gaming motherboards (TUF, ROG, etc.), Secure Boot control is usually found in the Boot tab of advanced mode.The logic is similar, but the name of the key setting changes: here, "OS Type" is used to determine whether secure boot is active or not.

With the system powered on and after pressing Delete (or F2) to enter the BIOS, access Advanced Mode and go to the Boot tabInside, locate the Secure Boot option and enter that submenu to see the available parameters.

In many ASUS motherboardsEspecially in models like the ROG MAXIMUS or TUF, the main option that controls behavior is OS TypeIt usually displays two typical values: "Windows UEFI mode" and "Other OS".

When the OS Type is set to Windows UEFI mode, Secure Boot is enabled and the firmware expects a Windows bootloader signed according to the installed keys. If you change that setting to Other OS, the Secure Boot status becomes disabled (off)allowing the startup of systems or tools that do not meet the signing requirements.

In this type of BIOS, you'll also see a field called Secure Boot State, usually grayed out and not editable. The state is synchronized with the presence of Secure Boot keys.If keys are installed, it will be displayed as "User"; if they have been removed, the status will change to "Setup". This cannot be changed directly, but rather through other settings and key management.

After changing the operating system type to "Other OS" to disable Secure Boot, make sure Save the changes with F10 and confirm.The computer will restart and allow booting from your USB drive or from unsigned alternative systems, such as Memtest86+ or certain Linux distributions.

Secure Boot key management: deleting, restoring, and their impact

In addition to enabling or disabling Secure Boot, ASUS BIOSes offer advanced options for Secure Boot Key ManagementThis is where many users get scared when they see options like "Clear Secure Boot Keys" or "Reset to Setup Mode" without being clear about what they do exactly.

On laptops and all-in-ones with a classic UEFI interface, within the Secure Boot menu, when you enable Secure Boot Control, you will find a section for Key ManagementFrom there you can delete the current key databases and restore the factory keys.

The usual sequence for troubleshooting "Secure Boot not active" status issues consists of First enable Secure Boot Control, then go to Key ManagementThere, you usually have a "Reset To Setup Mode" option that erases the Secure Boot key databases, followed by another "Restore Factory Keys" option to reinstall the manufacturer's default keys.

When you choose "Reset To Setup Mode" or "Clear Secure Boot Keys" and confirm with Yes, All keys associated with Secure Boot are removedUntil they are restored, the firmware is considered to be in Setup mode and the Secure Boot status will not be the usual "User". Afterward, applying "Restore Factory Keys" or "Install Default Secure Boot Keys" reinstalls the original databases.

On desktop motherboards, especially when Secure Boot Mode is set to Custom, the process is similar: First, you can delete the keys with "Clear Secure Boot Keys" and then reinstall the default keys with "Install Default Secure Boot Keys".All of this is done from Key Management within the Secure Boot menu.

The real effect of deleting keys is not to destroy Windows or make your installation unrecoverable, but depriving the firmware of the information needed to validate signed chargersUsually, if you then restore the factory keys, the system will recognize the Windows loader again and everything will work normally.

Solution to the "Secure Boot Violation" error on ASUS computers

A relatively common problem with ASUS computers is that, during startup, a message appears like this: "Secure Boot Violation" that prevents entry into the operating systemThis usually indicates that something doesn't match between the Secure Boot keys and the installed system bootloader.

On machines with Windows 7, things are even clearer: Windows 7 does not support Secure BootCertain updates (such as KB3133977) can trigger boot errors if the BIOS attempts to enforce Secure Boot on a system that is not prepared for it. The result is a crash with the message "Secure Boot Violation."

On computers with Windows 8.1, 10 or 11, this error may also appear if you have reinstalled the operating system, changed version, or installed a different OS than the pre-installed oneThe firmware detects keys or signatures that do not match what it expects and, for security reasons, prevents booting.

The solution involves entering the BIOS and modify Secure Boot settingsASUS offers two alternative routes to disable the function depending on the model: do it from the Boot tab or from the Security tab, adjusting the parameters already mentioned.

If the menu is in Boot mode, you need to go to the Boot screen, select Secure Boot, and then... Change the OS Type option to Other OS to disable Secure BootRemember that if you remain in Windows UEFI mode, the feature will remain active.

In models where the setting is within Security, the path is to go to Security → Secure Boot and set Secure Boot Control to DisabledThis will stop the motherboard from performing secure boot checks and should allow the operating system to load again.

After making the necessary changes, all that remains is Save and exit using F10 and confirming with Accept or OK.If the problem stemmed from an incompatibility between Secure Boot and your system, the PC should start without the Secure Boot Violation warning.

Check from Windows if Secure Boot is enabled

If you're already using Windows and you're not sure whether The current state of Secure Boot is enabled or disabledYou can check this without entering the BIOS using a built-in system tool.

To do this, press the keys Press WIN + R to open the Run windowType msinfo32 and press Enter. This will open the System Information utility, which displays details about your computer's hardware and firmware.

In the right panel, look for the field "Secure Boot State"If it shows "Enabled" or "On," Secure Boot is enabled. If it shows "Disabled" or "Off," then Secure Boot is disabled in the BIOS.

This little trick is very useful for Quickly verify if the changes you made in the BIOS have been applied correctly without needing to revert to the firmware. It also ensures you remain protected with Secure Boot enabled even after you've finished using the tool or system that required disabling it.

Although many users choose to leave Secure Boot permanently disabled, it is highly recommended to Reactivate it once you're finished with the alternative system, memory test, or specific tool you needed to run.

Generally speaking, disabling Secure Boot on an ASUS motherboard is a reversible process and, if done carefully, shouldn't pose a serious problem for your Windows installation. Understanding what it does, how it interacts with the operating system, and how keys are managed allows you to navigate the BIOS safely, boot Linux, Memtest86+, or other utilities when needed, and maintain a... good level of protection in everyday life when you switch back to Windows.