Wiki Home Installation ASUS with UEFI SECURE BOOT

ASUS with UEFI SECURE BOOT

2024-07-11
diskless, boot, asus, uefi, secure boot

The following provides detailed steps for configuring UEFI secure boot on Asus motherboards, including importing the Youngzsoft certificate and setting secure boot options.

Bios configuration

  1. Before starting to configure the BIOS, prepare the USB for Secure Boot.
  2. Enter Bios and press F7 to switch to advanced mode.(Figure 1)

Figure 1

  1. Open the Advanced tab and go to the Network Stack Configuration option. (Figure 2)

Figure 2

  1. Enable the Network Stack option. Additional settings will open. (Figure 3)

Figure 3

  1. In the list of additional settings, find IPv6 PXE Support and disable it. (Figure 4)

Figure 4

  1. Go to the Boot tab, then to the CSM (Compatibility Support Module) parameter. (Figure 5)

Figure 5

  1. Make sure the Launch CSM option is disabled.(Figure 6)

Figure 6

  1. Next press F10 to save the settings, the PC will automatically reboot.(Figure 7)

Figure 7

Enable Virtualization

  1. Enter bios and then advance mode and open the Advanced tab and go to the CPU Configuration option. (Figure 8)

Figure 8

  1. Scroll down to the bottom to find the Intel (VMX) Virtualization Technology option and enable it. (Figure 9)

Figure 9

  1. Next press F10 to save the settings, the PC will automatically reboot.

Enable secure boot

  1. On Bios press F7 for Advanced mode(Figure 10)

Figure 10

  1. Navigate to “Boot” and click on the secure boot. (Figure 11)

Figure 11

  1. Select OS type “Windows UEFI mode” and secure boot mode “Custom”.(Figure 12)

Figure 12

  1. Next click on the Key management. (Figure 13)

Figure 13

  1. On the list with the option to select ,click on the “DB Management”. (Figure 14)

Figure 14

  1. On DB Management select Append key.(Figure 15)

Figure 15

  1. The Append key will ask to load factory default select No. (Figure 16)

Figure 16

  1. Next select the USB you prepared earlier as requested on the start of the manual .(Figure 17)

Figure 17

  1. Next select the Youngzsoft.cer file  ( You can find if on the start of the manual) (Figure 18)

Figure 18

  1. On input file format select “Public key Certificate”. (Figure 19)

Figure 19

  1. Next it will ask to append the key select Yes. (Figure 20)

Figure 20

  1. Save and exit changes. (Figure 21)

Figure 21

Admin panel configuration

  1. Once the image is ready on the iCafeCloud admin panel in the Boot section , edit the client PC and select ipxe.pxe(BIOS)on the PXE field. (Figure 22)

Figure 22

Related: