Direct answer: To enable Secure Boot on ASUS systems, you typically enter the BIOS/UEFI setup, switch to Advanced/Boot settings, enable Secure Boot, and set OS Type to Windows UEFI mode. Save changes and reboot. If Secure Boot shows as “Not Active” or you don’t see Secure Boot options, install or reset the Secure Boot keys to defaults, or ensure the system is using a UEFI boot mode with a GPT disk. On some ASUS boards, you access BIOS by pressing Delete or F2 during startup, then use F7 for Advanced Mode, navigate to Boot > Secure Boot, choose OS Type (Windows UEFI mode to enable, Other OS to disable), and save with F10. If you’re using TPM/fTPM, you may need to enable TPM first, then Secure Boot, particularly on newer ASUS boards. Context and steps by scenario
- If Secure Boot is not visible or editable:
- Enter BIOS, enable Advanced Mode, go to Boot or Security sections, and look for Secure Boot or Key Management.
- If keys are missing, install default Secure Boot keys (often labeled Install Default Secure Boot Keys) and then re-enter Secure Boot to enable.
- Ensure the OS Type is set to Windows UEFI mode to activate Secure Boot; selecting Other OS may disable it.
- Save changes and reboot.
- If Secure Boot is active but reporting as Setup or User:
- This usually means Secure Boot keys are present or absent; verify keys in the Key Management area and respond accordingly (Install Default Keys if missing, or Clear Secure Boot keys if you intend to reconfigure).
- If enabling TPM/fTPM is required:
- Some ASUS systems combine TPM setup with Secure Boot. Enable TPM/fTPM in the BIOS (often under Security or Advanced > Trusted Computing), then enable Secure Boot afterwards.
Common gotchas
- System must boot in UEFI mode with a GPT disk for Secure Boot to be effective.
- Some older ASUS models require the Del key (instead of F2) to access BIOS, or require temporarily using a dedicated “Advanced Mode” button after entering the BIOS.
- After enabling Secure Boot, re-check Windows Security or a system info page to confirm that Secure Boot is On.
If you’d like, provide your exact ASUS model (motherboard or laptop) and the BIOS interface language, and the current Secure Boot status you see (On/Off/Not Active, under which tab), and the disk partition style (GPT/MBR). A model-specific, step-by-step guide can be tailored.
