Windows 10: Asus Z370 Maximus X Motherboards

To confirm if secure boot is even on, open PowerShell and paste this in:

Check if Secure Boot is Enabled or Disabled in Windows 10 Windows 10 Tutorials

Code:

Confirm-SecureBootUEFI

If it's turned on it will comeback with True.
The Confirm-SecureBootUEFI cmdlet confirms that Secure Boot is enabled by checking the Secure Boot status on a UEFI computer.
If the computer supports Secure Boot and Secure Boot is enabled, this cmdlet returns $True.
If the computer supports Secure Boot and Secure Boot is disabled, this cmdlet returns $False.
If the computer does not support Secure Boot or is a BIOS (non-UEFI) computer, this cmdlet displays the following:
Cmdlet not supported on this platform.
If Windows PowerShell® is not run in administrator mode, this cmdlet displays the following:
Unable to set proper privileges. Access was denied.
This cmdlet requires that Windows PowerShell be run in administrator mode.

Kol12 said:

Yikes mine came back false.

Then you probably still have CSM(legacy BIOS for Win7, Linux, and non-UEFI USB ISO's) boot on, and TPM turned off.

To the best of my knowledge, Asus has made it a real pain to disable Secure Boot, but it is pretty straight forward.

To Disable Secure Boot:

1. In BIOS go to Secure Boot then go into Key Management
2. select "Save Secure Boot Keys"
3. Select your USB Drive
4. Save all 4 key types to the USB
5. Next Delete the Platform key (PK) only
6. Save and exit, Reboot into BIOS
7. Secure Boot should be disabled

To enable Secure Boot gain:

1. Go back to Key Management
2. Go to Load Default PK (Platform Key) and press enter
3. You will be given 2 options

• Yes will load the default key, Save and restart and Secure Boot should be enabled
• No should give you the option to load the keys you saved to the USB drive Select the USB drive Select the PK key and confirm it is a UEFI Secure Variable, confirm

Save and Exit, Secure boot should be enabled.

Hi,
Optimize default activates secure boot every time actually pretty annoying :)

Kol12 said:

Can anyone tell me based on this Bios shots what's missing to have Secure boot enabled?

Choose Windows UEFI mode, save setting with hitting your F10 key, and then it will reboot.

Hi,
Secure boot is already enabled you just need to switch from os type Other os too uefi mode to make win-10 happy.

CMS should then show disabled after you save and exit.