disabling secure boot

Page 1 of 3 123 LastLast
  1.    #1

    disabling secure boot


    Hello
    These are the instructions I received from the engineers at Asus regarding disabling secure boot. I can do so by clearing keys but that is not advised. I want to use various Linux distros which require that secure boot be disabled. My new board is Asus Tuf z390 Gaming Plus Wifi.
    Their directions below did not disable secure boot either. If you have any ideas I would appreciate them. The builder said he felt enabling CSM as Asus did should have disabled secure boot too.

    >>BIOS -> Boot -> CSM (Compatibility Support Module) -> Launch CSM -> Enabled


    1. Boot mode -> UEFI and Legacy
    2. Boot from Network -> Legacy (old drives); or UEFI mode (for NVME/SSD drives)
    3. Boot from Storage -> Legacy (old drives); or UEFI mode (for NVME/SSD drives)
    4. Boot from PCIE/PCI -> Legacy (old drives); or UEFI mode (for NVME/SSD drives)
    5. Go back to Boot -> Secure Boot -> OS Type -> Windows UEFI Mode (Windows 10/8.1/8) and Other OS (for Windows 7)<<
      My ComputerSystem Spec

  2. sygnus21's Avatar
    Posts : 1,854
    Windows 10 Pro x64 (1903)
       #2

    Why are you worried about Secure Boot? It should already be disabled. You can check this in Windows by going to Run, and typing "msinfo" (without quotes). When the System Information panel comes up, look to the right pane for Secure Boot state. If Secure Boot is on, it'll say on. If not it'll say unsupported or something to that effect - How to Check if Secure Boot Is Enabled on Your PC

    The simplest way to disable Secure Boot is the go into the BIOS and look for Secure Boot. Disable. Go to CSM. Enable. Save and exit. Done.

    Anyway be aware Secure Boot is disabled by default on new boards, so if you got a new Asus motherboard, there's a 99.999.999 percent chance Secure Boot is disabled. It's also disabled by default because it requires CSM to be disabled as well. CSM by default is enabled to insure your graphics card works out the box. The reason for that is because not all cards are UEFI compatible and if CSM was disabled by default, you could run into issues with non-UEFI based cards. And to get it working require a number of BIOS tweaks. Keeping things simple.

    Bottom line is Secure Boot should be disabled by default on all new boards. It is enabled by default by most laptop manufactures for security reasons, and could be enabled by a PC vendor if they chose to do so. Outside of that, if you bought a new motherboard, it should be disabled.

    Sorry for the long post, just needed you to understand somethings.
      My ComputersSystem Spec

  3.    #3

    Maybe I a missing something but out of the box secure boot is on per system information. It is doing its job. The issue is that Asus cannot disable it and neither can I unless secure keys are cleared which should only be done if corruption exists.
    Many Linux sticks are not signed and I cannot use them readily.
    >>I had said many Linux keys and I meant to say many Linux sticks<<
    Last edited by maranna; 4 Weeks Ago at 06:42.
      My ComputerSystem Spec

  4. Dude's Avatar
    Posts : 13,230
    Windows 10 Pro X64
       #4

    I would do some research, you can sign your keys

    booting a self-signed Linux kernel - Linux Kernel Monkey Log
      My ComputerSystem Spec


  5. Posts : 25,803
    windows 10 professional version 1607 build 14393.969 64 bit
       #5

    To see the status of secure boot before or after making changes you can check by
    a) launching msinfo32 > example: Secure Boot State Off
    b) running a powershell command:
    Confirm-SecureBootUEFI
      My ComputerSystem Spec

  6.    #6

    disable secure boot


    I started this thread so I thought it appropriate that I give what I think is the answer because I did lean on quite a few people and the thread was quite extensive. In order to disable boot on z 390 ASUS motherboard on my TUF Gaming Plus Wi-Fi set one has to go to firmware> Advanced. From advanced to secure boot and change secure boot mode from UEFI to other, exit and save changes. This disables secure boot. To enable it, the reverse is done. It can be verified through either system information or Security >Device. I hope this helps someone who follows me with this issue who wishes to use some Linux distros.
    Unfortunately, ASUS, and the builder did not provide the correct fix nor did any forums I tried including the ASUS forum.
      My ComputerSystem Spec


  7. ThrashZone's Avatar
    Posts : 4,742
    3-Win-7Prox64 2-Win10Prox64
       #7

    Hi,
    Interesting to disable secure boot all that is needed is to manage secure boot keys and delete secure boot keys.

    Other meaning OS type to Other OS instead of uefi mode or eufi only ?
      My ComputersSystem Spec

  8. ThrashZone's Avatar
    Posts : 4,742
    3-Win-7Prox64 2-Win10Prox64
       #8

    sygnus21 said: View Post
    Why are you worried about Secure Boot? It should already be disabled. You can check this in Windows by going to Run, and typing "msinfo" (without quotes). When the System Information panel comes up, look to the right pane for Secure Boot state. If Secure Boot is on, it'll say on. If not it'll say unsupported or something to that effect - How to Check if Secure Boot Is Enabled on Your PC

    The simplest way to disable Secure Boot is the go into the BIOS and look for Secure Boot. Disable. Go to CSM. Enable. Save and exit. Done.

    Anyway be aware Secure Boot is disabled by default on new boards, so if you got a new Asus motherboard, there's a 99.999.999 percent chance Secure Boot is disabled. It's also disabled by default because it requires CSM to be disabled as well. CSM by default is enabled to insure your graphics card works out the box. The reason for that is because not all cards are UEFI compatible and if CSM was disabled by default, you could run into issues with non-UEFI based cards. And to get it working require a number of BIOS tweaks. Keeping things simple.
    Bottom line is Secure Boot should be disabled by default on all new boards. It is enabled by default by most laptop manufactures for security reasons, and could be enabled by a PC vendor if they chose to do so. Outside of that, if you bought a new motherboard, it should be disabled.
    Sorry for the long post, just needed you to understand somethings.
    Hi,
    CMS enabled secure boot is still enabled too.
      My ComputersSystem Spec

  9.    #9

    CMS enabled does not disable secure boot on this board but thanks. The builder was surprised too.
      My ComputerSystem Spec

  10. ThrashZone's Avatar
    Posts : 4,742
    3-Win-7Prox64 2-Win10Prox64
       #10

    Hi,
    Maybe CMS disabled that kills all legacy os installing win-7... but still secure boot is a totally different feature
    I believe the exact wording is Clear secure boot keys. before secure boot is and shows as disabled.
      My ComputersSystem Spec


 
Page 1 of 3 123 LastLast

Related Threads
Hei, So I'm the guy who tried to move from Legacy to UEFI some days ago. I managed to move both Ubuntu and W10 to UEFI. More info on both of the situations here: Solved Can't boot into UEFI mode - Lenovo Z50-70 - Windows 10 Forums ...
hi all, can somebody tell me how to boot to windows 10 usb on hp pavilion x2 please i have tried everything i can think of but will it hell do it i have also disabled secure boot in bios but still wont boot from usb also tried different...
Control Panel\All Control Panel Items\Power Options\System Settings Unchecking the "Turn on Fast Startup" command in the above setting path does not do it. There is supposed to be a motherboard software for enabling a normal startup the next...
Boot mode uefi with secure boot disable in Installation and Upgrade
Ok im about to upgrade to win 10 then do a clean install afterwards of win 10, but i wanted to assure i have everything correct before i start. I updated again my profile with Belarc to assure i have a completed list of my software, i notice this...
Solved Turning off secure boot/fast boot required? in Installation and Upgrade
As I get ready to do a clean install of 10074 I am curious about the need to disable secure boot and fast boot options. If I do disable secure boot do I need to enable legacy boot? I have had limited success with previous installs to a 2nd hard...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 14:44.
Find Us