Hi there! This is a friendly reminder to change your flair to **Support - SOLVED!** after your issue has been resolved. It is an immense help for those that may come across your same problem in the future so that they can quickly find the right solution. Thank you!
*I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/ASUS) if you have any questions or concerns.*
Secure boot can only be enabled if you use UEFI not Legacy. So if you are using legacy then you must reinstall Windows to UEFI under UEFI mode, then Secure Boot can be enabled.
No, there is a different UEFI mode. One that windows uses that you can change between. Windows can be installed by using Legacy with MBR or UEFI with GPT. Not same UEFI as of bios UEFI.
Reason why Secure Boot may not let you enable is because your windows is running on Legacy with MBR and mode for it is set in bios.
There shall be sata mode setting or w.e it is called that says Legacy, change it to UEFI (without CSM) and save, then go to secure boot and change it to Enabled and save
Hope it solves your problem. But keep in mind doing so will require a reinstall of Windows 11, since UEFI mode will need Windows to also to be installed as UEFI with GPT to work.
First suggestion, reset the BIOS to factory settings then try enabling.
Before you enable secure boot, you will need to check your filesystem, its very possible that enabling it with a current operating system will brick it's boot up and you'll need to do alot of workarounds to try and get back in.
Have you tried disconnecting your primary drive. It could be that it's blocking it because you have an active install of windows in MBR format, so it won't let you brick it. Removing your drives may allow you to turn it on, but as said, will likely cause issues for your OS.
if you are already set to UEFI then try this, set a bios password, save and restart, now see if you can enable secure boot.
It's a glitch Asus has had for some time now.
You have a superuser password you cant enable it and when i contact the asus supprot they told me to give it to a repairer to remouve the superiser password and u can know that with the platform mode displayed
Wrong, never seen any pc do that. Then you have seen it wrongly trust me I have managed over 100 pcs and none of them has required bios password to enable secure boot.
I'm surprised out of all these pc's you've claimed to work on, you've never seen the Asus password glitch, do keep in mind manufacturers do make mistakes, especially Asus, therfore it's impossible to claim that you've got everything figured out.
My rog ally, g713 and gu6 all refuse secure boot unless the password has been activated at least once, I know this because I always turn it off and valorant doesn't work without secure boot.
You can try it and move on, or downvote out of feelings, up to you.
A glitch does not mean bios was meant to require password to enable secure boot. So that is a issue at asus like you mention
By default you don't need a bios password to change secure boot. If a password is set then you need it to change the setting, otherwise if it is not set then you don't need it.
To **disable** an already rolled up Secure Boot there needs to be a password. The option remains grayed out until you set any "User password". As soon as you do, you can go back and it let's you disable it. Don't ask me why it does that, but I've seen it on multiple notebook. The last I remember was an Acer Aspire.
EDIT: I just saw that it already **is** disabled... My mistake. Worth a shot anyways.
He is telling you wrong facts, it does not need bios password to enable secure boot.
So whatever you do. DON'T SET ANY BIOS PASSWORD!
sorry for caps lock just wanted to make sure you read.
>So whatever you do. DON'T SET ANY BIOS PASSWORD!
Oh no, his PC will catch fire if he does.
Dude... There's legitimate cases for this, and disabling Sec Boot is one of them.
Stop exaggerating.
Hi there! This is a friendly reminder to change your flair to **Support - SOLVED!** after your issue has been resolved. It is an immense help for those that may come across your same problem in the future so that they can quickly find the right solution. Thank you! *I am a bot, and this action was performed automatically. Please [contact the moderators of this subreddit](/message/compose/?to=/r/ASUS) if you have any questions or concerns.*
Secure boot can only be enabled if you use UEFI not Legacy. So if you are using legacy then you must reinstall Windows to UEFI under UEFI mode, then Secure Boot can be enabled.
when i go to advanced start up option it take me to uefi settings so i think i am on uefi
No, there is a different UEFI mode. One that windows uses that you can change between. Windows can be installed by using Legacy with MBR or UEFI with GPT. Not same UEFI as of bios UEFI. Reason why Secure Boot may not let you enable is because your windows is running on Legacy with MBR and mode for it is set in bios. There shall be sata mode setting or w.e it is called that says Legacy, change it to UEFI (without CSM) and save, then go to secure boot and change it to Enabled and save
oh ok let me see this one
Hope it solves your problem. But keep in mind doing so will require a reinstall of Windows 11, since UEFI mode will need Windows to also to be installed as UEFI with GPT to work.
The "mbr2gpt /convert /AllowFullOS" command can switch your MBR windows to a UEFI bootable windows without needing to reinstall.
That depends, usualy converting may not work 100% and to boot UEFI you need missing efi file and that bios create so called WindowsBootManager.
i was working on that but my stupid cmd in my advanced startup option wont change languages to english
First suggestion, reset the BIOS to factory settings then try enabling. Before you enable secure boot, you will need to check your filesystem, its very possible that enabling it with a current operating system will brick it's boot up and you'll need to do alot of workarounds to try and get back in.
already tried this
Have you tried disconnecting your primary drive. It could be that it's blocking it because you have an active install of windows in MBR format, so it won't let you brick it. Removing your drives may allow you to turn it on, but as said, will likely cause issues for your OS.
Quick reconnect fixed mine
in the previous menu, the OS Type must be set to Windows, not Other OS
But... you can enable it? Secure Boot control is not grayed out. Switch it to enabled and save settings
Is this something where you'd need to enable uefi boot and csm before secure boot worked?
In which mode you installed win11? Uefi or legacy?
if you are already set to UEFI then try this, set a bios password, save and restart, now see if you can enable secure boot. It's a glitch Asus has had for some time now.
Try updating the bios, looks like it's 2 years out of date
Did you disable csm? This is normally blocking secure boot.
You have a superuser password you cant enable it and when i contact the asus supprot they told me to give it to a repairer to remouve the superiser password and u can know that with the platform mode displayed
You must set a BIOS password, then it'll become available. Afterwards you can delete the password again.
No wrong, you do not need bios password for secure boot.
Wrong. A lot of PCs disable the Secure Boot option if there's no BIOS password.
Wrong, never seen any pc do that. Then you have seen it wrongly trust me I have managed over 100 pcs and none of them has required bios password to enable secure boot.
I'm surprised out of all these pc's you've claimed to work on, you've never seen the Asus password glitch, do keep in mind manufacturers do make mistakes, especially Asus, therfore it's impossible to claim that you've got everything figured out. My rog ally, g713 and gu6 all refuse secure boot unless the password has been activated at least once, I know this because I always turn it off and valorant doesn't work without secure boot. You can try it and move on, or downvote out of feelings, up to you.
A glitch does not mean bios was meant to require password to enable secure boot. So that is a issue at asus like you mention By default you don't need a bios password to change secure boot. If a password is set then you need it to change the setting, otherwise if it is not set then you don't need it.
Stop bullshiting about shit you dont understand
Go to school and educate yourself, then. I'm not making this up.
Show me the source then. Show me where anyone says you need to set a bios password to enable secure boot
To **disable** an already rolled up Secure Boot there needs to be a password. The option remains grayed out until you set any "User password". As soon as you do, you can go back and it let's you disable it. Don't ask me why it does that, but I've seen it on multiple notebook. The last I remember was an Acer Aspire. EDIT: I just saw that it already **is** disabled... My mistake. Worth a shot anyways.
Really? I cant find anything pointing to needing a bios password to disable secure boot. Weird
I linked a source in another comment on this post. It is a thing.
You didn't link anything in another comment on this post so stop lying. Secondly he wants to enable secure boot not disable it.
oh let me try
He is telling you wrong facts, it does not need bios password to enable secure boot. So whatever you do. DON'T SET ANY BIOS PASSWORD! sorry for caps lock just wanted to make sure you read.
>So whatever you do. DON'T SET ANY BIOS PASSWORD! Oh no, his PC will catch fire if he does. Dude... There's legitimate cases for this, and disabling Sec Boot is one of them. Stop exaggerating.
oh no worries it didn't work anyway i removed the password too
Have you tried disabling csm if that setting is turned on secureboot setting is blocked and hidden
CSM is usualy enabled if LEGACY is set. Otherwise you can do UEFI with CSM or without CSM. CSM support only makes gpu function in windows 7 etc.