How to Enable Secure Boot on ASUS Motherboards and Laptops

Secure Boot is a UEFI security feature that ensures your PC boots only with trusted, digitally signed software. It’s required for features like Windows 11 upgrades, certain anti-cheat systems, and device security protections. If you’re using an ASUS motherboard or laptop, enabling Secure Boot is straightforward—but only if your system is correctly configured for UEFI.

This guide explains what Secure Boot needs, why it may be disabled, and how to enable Secure Boot on ASUS systems safely, step by step.

What Secure Boot Requires (Before You Start)

Before enabling Secure Boot on an ASUS system, make sure:

• You are using UEFI mode (not Legacy/CSM)
• Your system disk uses GPT, not MBR
• Windows is already installed in UEFI mode
• You are running Windows 11 or Windows 10 (UEFI)

If any of these conditions aren’t met, Secure Boot will remain unavailable or greyed out.

1. Check If Secure Boot Is Currently Disabled

1. Press Windows + R, type msinfo32, and press Enter.
2. Look for:
   • BIOS Mode → should say UEFI
   • Secure Boot State → likely Off

If BIOS Mode shows Legacy, Secure Boot cannot be enabled yet.

2. Enter ASUS UEFI BIOS

1. Shut down your PC completely.
2. Power it on and immediately start tapping Del or F2.
   • Del → Most ASUS desktop motherboards
   • F2 → ASUS laptops

You should now be inside the ASUS UEFI BIOS interface.

3. Switch to Advanced Mode

1. If you see EZ Mode, press F7 to switch to Advanced Mode.
2. This is required to access Secure Boot options.

4. Disable CSM (Critical Step)

Secure Boot cannot work with CSM enabled.

1. Go to the Boot tab.
2. Find CSM (Compatibility Support Module).
3. Set Launch CSM to Disabled.
4. Press F10 to save if prompted, then re-enter BIOS if required.

Disabling CSM forces the system into full UEFI mode.

5. Enable Secure Boot on ASUS Systems

Now you can enable Secure Boot.

1. Go to Boot → Secure Boot.
2. Set OS Type to:
   • Windows UEFI mode
3. Open Key Management.
4. Select Install Default Secure Boot Keys.
5. Confirm the action.

Without installing default keys, Secure Boot will remain inactive.

6. Save and Exit BIOS

1. Press F10.
2. Confirm Save & Exit.
3. Let the system boot into Windows.

7. Verify Secure Boot Is Enabled

After Windows loads:

1. Press Windows + R, type msinfo32, and press Enter.
2. Confirm:
   • Secure Boot State → On

If it shows On, Secure Boot is successfully enabled.

Secure Boot on ASUS Laptops (Notes)

On ASUS laptops:

• Secure Boot is usually under Boot → Secure Boot Control
• Some models require setting an Administrator password in BIOS first
• Touchpad may stop working temporarily in BIOS—use keyboard navigation

How to Check Disk Format (GPT or MBR)

1. Press Windows + X → Disk Management.
2. Right-click your system disk → Properties.
3. Go to Volumes.
4. Check Partition style:
   • Must be GUID Partition Table (GPT)

If it’s MBR, Secure Boot cannot be enabled without conversion.

Wrapping Up

Enabling Secure Boot on ASUS motherboards and laptops is safe and fully supported—as long as your system is properly set up for UEFI + GPT. The key steps are disabling CSM, setting Windows UEFI mode, and installing default Secure Boot keys.

Once enabled, Secure Boot adds an extra layer of protection to your system and ensures compatibility with modern Windows security features.