Windows 10: Asus Z370 Maximus X Motherboards
-
To confirm if secure boot is even on, open PowerShell and paste this in:
Check if Secure Boot is Enabled or Disabled in Windows 10 Windows 10 Tutorials
Code:
Confirm-SecureBootUEFI
If it's turned on it will comeback with True.
The Confirm-SecureBootUEFI cmdlet confirms that Secure Boot is enabled by checking the Secure Boot status on a UEFI computer.
If the computer supports Secure Boot and Secure Boot is enabled, this cmdlet returns $True.
If the computer supports Secure Boot and Secure Boot is disabled, this cmdlet returns $False.
If the computer does not support Secure Boot or is a BIOS (non-UEFI) computer, this cmdlet displays the following:
Cmdlet not supported on this platform.
If Windows PowerShell® is not run in administrator mode, this cmdlet displays the following:
Unable to set proper privileges. Access was denied.
This cmdlet requires that Windows PowerShell be run in administrator mode.

Last edited by Brink; 2 Weeks Ago at 09:29.
Reason: added tutorial link for more info
-
-
Kol12 said:
Does anyone know how to disable secure boot on the Maximus X Hero? Is secure boot an issue with this board when installing Windows?
On my X Hero I have the secure boot set to other OS in the bios.
-
Cliff S said:
To confirm if secure boot is even on, open PowerShell and paste this in:
Code:
Confirm-SecureBootUEFI
Yikes mine came back false.
-
-
Kol12 said:
Yikes mine came back false.
Then you probably still have CSM(legacy BIOS for Win7, Linux, and non-UEFI USB ISO's) boot on, and TPM turned off.
-
Cliff S said:
Then you probably still have CSM(legacy BIOS for Win7, Linux, and non-UEFI USB ISO's) boot on, and TPM turned off.
I will look, thanks.
-
To the best of my knowledge, Asus has made it a real pain to disable Secure Boot, but it is pretty straight forward.
To Disable Secure Boot:
- In BIOS go to Secure Boot then go into Key Management
- select "Save Secure Boot Keys"
- Select your USB Drive
- Save all 4 key types to the USB
- Next Delete the Platform key (PK) only
- Save and exit, Reboot into BIOS
- Secure Boot should be disabled
To enable Secure Boot gain:
- Go back to Key Management
- Go to Load Default PK (Platform Key) and press enter
- You will be given 2 options
- Yes will load the default key, Save and restart and Secure Boot should be enabled
- No should give you the option to load the keys you saved to the USB drive Select the USB drive Select the PK key and confirm it is a UEFI Secure Variable, confirm
Save and Exit, Secure boot should be enabled.
-
Hi,
Optimize default activates secure boot every time actually pretty annoying
-
Kol12 said:
Choose Windows UEFI mode, save setting with hitting your F10 key, and then it will reboot.
Hi,
Secure boot is already enabled you just need to switch from os type Other os too uefi mode to make win-10 happy.
CMS should then show disabled after you save and exit.