Wiki Home Installation Asrock with UEFI SECURE BOOT

Asrock with UEFI SECURE BOOT

2025-11-21
diskless, boot, asrock, uefi, secure boot

The following provides detailed steps for configuring UEFI secure boot on Asrock motherboards, including importing the Youngzsoft certificate and setting secure boot options.

Bios configuration

  1. Before starting to configure the BIOS, prepare the USB for Secure Boot.
  2. To enter the BIOS Pres F6 to switch to advanced mode.(Figure 1)

Figure 1

  1. Open the Boot tab and enable the Boot From Onboard LAN option. (Figure 2)

Figure 2

  1. Go to the Advanced tab and select the ACPI Configuration option. (Figure 3)

Figure 3

  1. Enable two parameters: PCIE Devices Power On, I219 LAN Power On.(Figure 4)

Figure 4

  1. Next press F10 to save the configuration “Save changes & exit”

Enable Virtualization

  1. Enter Bios and then advance mode go to the Advanced tab and go to the Chipset Configuration option. (Figure 5)

Figure 5

  1. Enable the VT-d (Virtualization) option. (Figure 6)

Figure 6

  1. Next press F10 to save the configuration “Save changes & exit”

Enable Secure boot

  1. Go to advanced mode(Figure 7)

Figure 7

  1. Then select security and click on secure boot to enable it.(Figure 8)

Figure 8

  1. On the Secure boot mode select custom (Figure 9)

Figure 9

  1. Select the key management (Figure 10)

Figure 10

  1. Click on the Authorized Signatures (Figure 11)

Figure 11

  1. A popup window will open with 2 options select Append (Figure 12)

Figure 12

  1. Once Append will ask you to load factory reset click “NO” (Figure 13)

Figure 13

  1. You will get the option to load from the USB click enter to continue (Figure 14)

Figure 14

  1. Click on the usb that you have prepared from before with the Youngzsoft.cer (Figure 15)

Figure 15

  1. And select the Public key Certificate (Figure 16)

Figure 16

  1. Next will ask you to append the Youngzsoft.cer click YES (Figure 17)

Figure 17

  1. Your done save changed and exit (Figure 18)

Figure 18

Admin panel configuration

  1. Once the image is ready on the iCafeCloud admin panel in the Boot section , edit the client PC and select ipxe.pxe(BIOS) on the PXE field. (Figure 13)

Figure 13

Related: