The following provides detailed steps for configuring UEFI secure boot on Asus motherboards, including importing the Youngzsoft certificate v2 and setting secure boot options.

Bios configuration

  1. Before starting to configure the BIOS, prepare the USB for Secure Boot.
  2. Enter Bios and press F7 to switch to advanced mode.(Figure 1)

Bios configuration

Figure 1

  1. Open the Advanced tab and go to the Network Stack Configuration option. (Figure 2)

Bios configuration

Figure 2

  1. Enable the Network Stack option. Additional settings will open. (Figure 3)

Bios configuration

Figure 3

  1. In the list of additional settings, find IPv6 PXE Support and disable it. (Figure 4)

Bios configuration

Figure 4

  1. Go to the Boot tab, then to the CSM (Compatibility Support Module) parameter. (Figure 5)

Bios configuration

Figure 5

  1. Make sure the Launch CSM option is disabled.(Figure 6)

Bios configuration

Figure 6

  1. Next press F10 to save the settings, the PC will automatically reboot.(Figure 7)

Bios configuration

Figure 7

Enable Virtualization

  1. Enter bios and then advance mode and open the Advanced tab and go to the CPU Configuration option. (Figure 8)

Enable Virtualization

Figure 8

  1. Scroll down to the bottom to find the Intel (VMX) Virtualization Technology option and enable it. (Figure 9)

Enable Virtualization

Figure 9

  1. Next press F10 to save the settings, the PC will automatically reboot.

Enable secure boot

  1. On Bios press F7 for Advanced mode(Figure 10)

Enable secure boot

Figure 10

  1. Navigate to “Boot” and click on the secure boot. (Figure 11)

Enable secure boot

Figure 11

  1. Select OS type “Windows UEFI mode” and secure boot mode “Custom”.(Figure 12)

Enable secure boot

Figure 12

  1. Next click on the Key management. (Figure 13)

Enable secure boot

Figure 13

  1. On the list with the option to select ,click on the “DB Management”. (Figure 14)

Enable secure boot

Figure 14

  1. On DB Management select Append key.(Figure 15)

Enable secure boot

Figure 15

  1. The Append key will ask to load factory default select No. (Figure 16)

Enable secure boot

Figure 16

  1. Next select the USB you prepared earlier as requested on the start of the manual .(Figure 17)

Enable secure boot

Figure 17

  1. Next select the Youngzsoft certificate v2 file  ( You can find if on the start of the manual) (Figure 18)

Enable secure boot

Figure 18

  1. On input file format select “Public key Certificate”. (Figure 19)

Enable secure boot

Figure 19

  1. Next it will ask to append the key select Yes. (Figure 20)

Enable secure boot

Figure 20

  1. Save and exit changes. (Figure 21)

Enable secure boot

Figure 21

Admin panel configuration

  1. Once the image is ready on the iCafeCloud admin panel in the Boot section , edit the client PC and select ipxe2026.pxe(UEFI)on the PXE field. (Figure 22)

Enable secure boot

Figure 22