To turn on Secure Boot on an ASUS laptop or desktop, you need to enter the BIOS/UEFI, switch to advanced mode, go to the Security → Secure Boot section, and set Secure Boot Control (or similar) to Enabled, then save and exit.

What Secure Boot Does

Secure Boot is a firmware feature that only allows trusted, signed bootloaders and operating systems to start, helping block rootkits and other low‑level malware during startup.

Many games and Windows features (especially Windows 11) now check that Secure Boot is enabled, so turning it on is often required for compatibility.

Basic Steps on Most ASUS PCs

Exact wording varies slightly by model, but the flow is usually the same.

  1. Fully shut down the PC (not just restart).
  1. Turn it on and repeatedly press F2 (laptops) or Del/F2 (motherboards) until the BIOS/UEFI screen appears.
  1. Press F7 or click Advanced Mode to switch from EZ Mode to the advanced interface.
  1. Go to the Security tab and select Secure Boot.
  1. Open “Secure Boot Control” and change it from Disabled to Enabled.
  1. Press F10 (Save & Exit), confirm, and let the PC reboot into Windows.

After the reboot, you can check in Windows (System Information → “Secure Boot State”) to confirm it shows “On.”

If Secure Boot Is Greyed Out

On some ASUS boards/laptops, the Secure Boot option is visible but cannot be changed until a few prerequisites are met.

Common fixes:

  • Disable Compatibility Support Module (CSM) and use UEFI
    • In BIOS → Boot tab → set CSM to Disabled so the system runs in pure UEFI mode.
  • Use a GPT partition style
    • Secure Boot may require your system drive to be GPT, not MBR; Windows 10/11 tools can convert without reinstalling, but back up first.
  • Disable Fast Boot and set BIOS admin password if required
    • Some users report needing to disable Fast Boot or enter BIOS with an admin/supervisor password before Secure Boot becomes editable.

If the menu shows “Standard / Custom” instead of “Enabled / Disabled,” choose Standard , which means Secure Boot is active with the default key set.

Quick Troubleshooting Tips

  • If Windows fails to boot after enabling Secure Boot, re‑enter BIOS and temporarily disable it, then check that your Windows installation is UEFI‑compatible.
  • For older systems upgraded to Windows 11, enabling Secure Boot sometimes needs both:
    • CSM disabled
    • UEFI boot entry for your Windows drive selected as first boot device.

If you share your exact ASUS model (e.g., TUF, ROG, Prime, specific laptop series), more model‑specific menu names and steps can be outlined.

Information gathered from public forums or data available on the internet and portrayed here.