How to Enable or Disable Secure Boot on Your ASUS Motherboard: The Complete Guide

We’ve all been there. You’re excited to install Windows 11, try out a new Linux distro, or maybe even launch a specific anti-cheat protected game (looking at you, Valorant), and suddenly you hit a brick wall. A cryptic error message pops up telling you that “Secure Boot” is either required or preventing you from doing what you want.

It’s one of those moments that reminds us that modern computers are complex beasts. “Secure Boot” sounds important—and it is—but for many PC users, it’s just a toggle buried deep in a scary blue or gray menu called the BIOS (or UEFI).

If you own an ASUS motherboard, you are in luck. ASUS has one of the more user-friendly BIOS interfaces out there, but finding specific settings can still feel like navigating a maze. Whether you are trying to upgrade your OS or get your dual-boot setup working, this guide will walk you through enabling and disabling Secure Boot on your ASUS motherboard, step by step, without the jargon overload.

What is Secure Boot, and Why Do You Care?

Before we start mashing keys to get into the BIOS, let’s take a second to understand what we are actually touching.

Think of Secure Boot as a security guard at the entrance of a club. Its job is to check the ID of any software that tries to start up when you turn on your PC. If the software (like your Windows operating system) has a valid digital signature (a “valid ID”), the guard lets it in. If it’s an unsigned driver or a potential bootkit virus (a “fake ID”), Secure Boot blocks it to keep your system safe.

• Why Enable It? You need it for Windows 11. Microsoft made it a strict requirement for security reasons. It’s also required for some modern competitive games to prevent cheating.
• Why Disable It? You might need to turn it off if you are installing an older operating system (like Windows 7), using certain Linux distributions, or running specialized diagnostic tools that don’t have those digital signatures.

Now that we know the why, let’s get to the how.

Step 1: Entering the ASUS UEFI BIOS

The first hurdle is just getting into the menu.

1. Restart your computer.
2. As soon as the screen goes black and the ASUS logo begins to appear, start tapping the Delete key or F2 key repeatedly. Don’t hold it down; tap it like you’re trying to win a button-mashing mini-game.
3. If you timed it right, you will find yourself in the BIOS Utility.

Pro Tip: If you have “Fast Boot” enabled in Windows, your PC might boot too quickly for you to hit the key. In that case, hold the Shift key while you click Restart in Windows. Go to Troubleshoot > Advanced Options > UEFI Firmware Settings and click Restart. This will reboot you straight into the BIOS without the button mashing.

Step 2: Switching to Advanced Mode

Most modern ASUS motherboards launch into “EZ Mode” first. This is a simplified dashboard showing your temperature and fan speeds. Secure Boot is a deep system setting, so we need to go deeper.

Look at the bottom of the screen. You should see an option that says “Advanced Mode (F7)”.

• Click that button or simply press the F7 key on your keyboard.
• The screen should change to show tabs like “Main,” “Ai Tweaker,” “Advanced,” “Boot,” etc.

Step 3: Locating the Secure Boot Menu

This is where things can vary slightly depending on whether you have a generic ASUS board, a ROG (Republic of Gamers) board, or a TUF Gaming board. However, the logic remains the same.

1. Navigate to the Boot tab using your mouse or the arrow keys.
2. Scroll down the list. You are looking for a submenu called Secure Boot.
3. Click on it or press Enter.

Step 4: How to Disable Secure Boot

If you are here to turn it off (perhaps to install Linux), this is usually the trickier part because ASUS doesn’t always have a simple “On/Off” switch.

Inside the Secure Boot menu, look for an option called OS Type.

• To Disable Secure Boot: Change OS Type to “Other OS”.
  • What this does: It tells the motherboard, “Hey, I’m not just using standard Windows; I might be using something else, so relax the security checks.”
  • On some older models, you might actually see a “Secure Boot Enable” toggle. If you see that, just set it to Disabled. But for 90% of modern ASUS boards, switching to “Other OS” is the key.

Wait, is it actually off?

Sometimes, changing the OS type isn’t enough. You might need to clear the keys.

1. Look for Key Management inside the Secure Boot menu.
2. Select Clear Secure Boot Keys.
3. Confirm the action. This removes the digital signatures, effectively forcing Secure Boot off because it has nothing to check against.

Step 5: How to Enable Secure Boot (The Windows 11 Fix)

If you are here because Valorant won’t launch or Windows 11 says your PC isn’t supported, follow these steps carefully.

1. Go back to the Secure Boot menu (Boot > Secure Boot).
2. Change OS Type to “Windows UEFI Mode”.
   • This is the setting that tells the motherboard to enforce the security checks required by Microsoft.

Troubleshooting: “I enabled it, but it still says Disabled!”

This is the most common frustration for ASUS users. You set it to “Windows UEFI Mode,” save, restart, and Windows still says Secure Boot is off.

This happens because the “Keys” are missing. If you previously cleared them or updated your BIOS, the security keys might be gone.

1. Go to Key Management in the Secure Boot menu.
2. Look for an option that says “Install Default Secure Boot Keys”.
3. Click it and confirm.
4. You should see the status change from “Unloaded” to “Loaded” or “Active.”

Once the keys are loaded and the OS Type is set to Windows UEFI Mode, you are golden.

Step 6: Save and Exit

None of these changes stick unless you save them.

1. Press the F10 key.
2. A confirmation box will pop up showing you what you changed (e.g., OS Type: Other OS -> Windows UEFI Mode).
3. Click Ok.
4. Your computer will restart.

Checking Your Work

Once you are back in Windows, it’s good practice to verify that your fiddling actually worked.

1. Press the Windows Key.
2. Type System Information and hit Enter.
3. Look for Secure Boot State in the list.
   • If you wanted it on, it should say On.
   • If you wanted it off, it should say Off.

A Final Note on CSM (Compatibility Support Module)

If you have followed this guide perfectly and you still can’t change Secure Boot settings (maybe the option is grayed out), you likely have CSM enabled.

CSM is a legacy mode for very old operating systems. Secure Boot requires CSM to be DISABLED.

1. Go to the Boot tab in BIOS.
2. Find CSM (Compatibility Support Module).
3. Set Launch CSM to Disabled.
4. Save and Restart.
5. Go back into BIOS, and you should now have full access to Secure Boot settings.