Asus Uefi

Disable ASUS Motherboard's UEFI secure boot

Most new ASUS motherboards do not have the option to let users to turn off the UEFI secure boot. The "Secure Boot Enabled" is always greyed out and unable to change that option. Yet, we do have the option to disable the secure boot by clearing secure boot keys. This is reversible so no need to worry about breaking the warranty or damaging the BIOS.

BIOS's Secure Boot menu should show Secure Boot state as "enabled" and Platform Key (PK) state as "loaded"

Uefi Secure Boot

To disable the UEFI secure boot:

  1. Make sure the "OS Type" is "Windows UEFI"
  2. Enter "Key Management"
  3. Select "Clear Secure Boot keys" (You will have the option "Install default Secure Boot keys" to restore the default keys after you cleared the Secure Boot Keys)

Clear Secure Boot Keys

After you cleared the Secure Boot Keys, Secure Boot will be automatically disabled. You can set the OS Type to Other OS now.

Disabled Uefi Secure Boot State


  1. I will never buy anything from ASUS again. They make things sow complicated. Dell and Lenovo are the best. There everything is simple and clear. Let's be serious: Who is going to enter to your house and steal your compputer will know how to handle this stupid UEFI anyway. Sow there is no reason to make things more complicated than they are. At least if you want to come up with something, come up with something that make sense and has logic.

  2. Thanks! This is awesome, I had other OS and could install centos (not ubuntu), but minikube didn't work, now it does. Wasn't obvious to figure this out.

  3. i've got an Asus x541s i tried to install windows 8.1 pro OS but plays a message that can't install in MBR format only do i reset back my local disc C to GPT format.

  4. Should just the platform key be cleared, or all four of them. There are four keys listed (PK, KEK, DB and DBX, I believe) and I am not sure which ones need to be deleted to install Windows 7.

    1. You can test it out, because you can always restore those keys. What I know is Windows 7 does not require any of these keys.

  5. Hey there, I'm trying to install Ubuntu 16.04.1 on an ASUS A88X-PLUS. You were my last hope, but even after disabling secure boot my screen just goes black after I select "Install Ubuntu" from the USB drive. I used an ISO and Rufus to create the drive, worked fine for Windows, but somehow Ubuntu doesn't seem right.
    My screen goes black, as described, the drive keeps blinking for a while and then everything stops. The PC is running, but nothing happens. I also forced the internal GPU, in case that was in the way. There also isn't the usual graphic interface for installing Ubuntu I know from old computers we've had it running on, just a frame with 4 lines of text, so I believe it must be a booting problem.

    I just can't seem to find the correct search terms for the problem, maybe you can help, Sorry ๐Ÿ™

      1. Gee, that was the solution. I hope the APU will install later on, as the heavy graphics on Ubuntu were the main reason to upgrade the system - and the old GPU really sucks ๐Ÿ˜€


          1. Hi, im having the same problem Max had but i have a Gpu plugged in. I could use some help in the matter.

  6. Hi all,
    I tried the other OS boot option and PK keys unload d and I am now getting 0xc000000f error if I reset defaults I get the secure boot error...please help have school paper due!

  7. i'm sure that knave Gates is paying manufacturers to not make secure boot easily disabled. In fact all he has to do is pay off AMI and hes done, the creeping snake. I just bought an asus x99-a and support told me tough you cant turn secure boot off WTF... what are they getting out of that? they ain't saints either i'm sure

    1. Are you trying to install Windows 7 in UEFI? For W7 you will need to enable CSM and boot your computer then press F8 to launch the select boot device screen, select your installation drive with UEFI mark.

  8. I have a ASUS G11 and for the live of me cant install linux. I've disable the secuirty boot in the past but no luck. The only OS I can get to run is shitty WIN10. Anything else wont work..if someone have the same computer and have anything else other that WIN10,please advise me in how to to do so..Thank you for your time.

    1. have you selected the OS to other? unloaded the key? You may want to try Wendy's method: disable PCI Express power management in bios.

    2. Thanks for the reply everyone, I manage to fix the issue. I had to flash the bios with an update firmware. That seems to do the trick. Again Thank y'all

      1. I have an ASUS M32CD with the 602 UEFI version. This is the ONLY place I've found instructions for turning off secure boot on ASUS for newer ASUS UEFI.

        I keep getting an error when trying to boot a live DVD, even when it is set to Other OS, and I'm wondering if secure boot, my skylake chipset Nvidia graphics card or something else is the issue.

        1. The error that you get maybe because your turned off the legacy BIOS compatibility mode. You need to turn it on and chose UEFI boot from there for some live CD. Same for Windows 7 UEFI boot.

          1. I had to disable PCI Express power management in bios.

            Advanced - > Advanced/Platform Misc Configuration - > PCI Express Power Management (disabled)

      1. they appearing again after reboot (asus Gene VIII), damn uefi, that bloody microsft forcing to use only windows by that? shite, and burn in hell this jew william gates

        1. Somehow I didn't expect to hear racism spouted on a tech forum. But it certainly drives home how wrong that kind of remark is.

Leave a Reply

Your email address will not be published. Required fields are marked *