How To Enable or Disable Secure Boot on an ASRock Motherboard

Figuring out how to toggle Secure Boot on an ASRock motherboard can be kinda confusing at first, especially if it’s your first time poking around the BIOS/UEFI menus. Usually, Secure Boot is all about making sure only trusted, signed drivers and OS components can boot up, preventing malware from sneaking in. But sometimes, you need to disable it—for example, if you’re trying to run a dual-boot setup with Linux, or are installing certain tools that don’t have signed drivers. The process sounds straightforward, but depending on your BIOS version and settings, it can get a bit tricky or even frustrating. So, here’s a kinda realistic walkthrough that’ll hopefully help you get hands-on with the actual steps and options involved. And yes, on some machines, the menus are not super intuitive, so don’t be surprised if you need to dig around or, sometimes, repeat a step.

How to Disable or Enable Secure Boot on ASRock Motherboard

Method 1: Disabling Secure Boot (for dual boot, hardware changes, etc.)

This is the usual go-to, especially if you’re trying to run Linux or do something that’s blocked when Secure Boot is active. The reason it helps is because when you turn Secure Boot off, it stops checking for signatures, letting unsigned software or drivers load. Expect a reboot after each change, and don’t be alarmed if it takes a couple of tries to get things right. Sometimes the key to make it work is to get into the right menu or disable certain modes like CSM (Compatibility Support Module).

1. Restart or power up your computer. Be ready to press F2 or Del multiple times immediately after the logo appears. Some setups require quick fingers—don’t wait too long!
2. As soon as you see the ASRock logo pop up, tap F2 or Del to enter the BIOS/UEFI. If you’ve enabled fast boot, it might be tricky, so just keep pressing the keys repeatedly until you get in.
3. If you land in EZ mode, press F6 to switch to Advanced Mode. It’s where the real magic happens.
4. Navigate to the Security tab. This is usually at the top or side menu, sometimes hidden behind another menu or labeled differently, but it’s usually pretty straightforward to find.
5. Within Security, look for Secure Boot. It might be in a submenu – click on it.
6. Set Secure Boot to Disabled. Then hit Enter to confirm. This will disable the secure checks for boot process.
7. Finally, press F10, then confirm with Yes to save and exit. Your PC will reboot—sometimes, you’ll see that Secure Boot remains enabled if certain settings like CSM or platform keys are still active. In those cases, you might need to disable CSM first.

In some cases, especially if Secure Boot keys are still present, simply disabling it might not be enough. You might have to go the extra mile and clear the keys or switch the mode to Custom for full control—kind of like doing a clean slate.

Method 2: Clearing Secure Boot Keys (more thorough, but use with caution)

This lets you remove existing keys, making Secure Boot effectively inactive. It’s helpful if you’re troubleshooting or want a real clean start, especially when you want to reinstall or reset Secure Boot. Be warned: if you’re using custom keys, make sure you back them up because this process wipes them out. In some setups, clearing the keys is necessary before re-enabling Secure Boot or changing modes to meet UEFI requirements for Windows 11.

1. Follow the same initial steps to get into Advanced Mode in BIOS/UEFI.
2. Go again to the Security tab, then select Secure Boot.
3. Set Secure Boot Mode to Custom. You might see options like Standard as well; choose what fits your goal.
4. Find and click on Clear Secure Boot Keys. It could be a button or a menu option.
5. Confirm with Yes when prompted. Expect your system to wipe out all current keys in this process. After that, your Secure Boot is effectively disabled, but the system still shows security options, just no enforced signatures.
6. Press F10 again, save, and exit. If you had keys before, now you’re starting fresh.

One side note—if after doing this, the system acts weird or refuses to boot, double-check if CSM or other legacy modes are turned on, and adjust accordingly. It’s kinda weird, but sometimes the BIOS settings are locked behind other toggles or require a full reset.

Method 3: Enabling Secure Boot (if you need it for Win 11 or security)

Turning it back on is pretty much a mirror of the disable process. But you’ll need to ensure you have the default Secure Boot keys installed and that your BIOS is in UEFI mode, not Legacy. Otherwise, you’ll get errors or it won’t activate properly.

1. Power up and access Advanced Mode again, just like before.
2. Navigate to the Security tab, then select Secure Boot.
3. Set Secure Boot to Enabled. If you get an error about missing keys, you’ll need to install or recreate Secure Boot keys.
4. If you see a message about needing to enroll keys or the system being in “User Mode, ” go ahead and do that: choose Install Secure Boot Keys, then confirm.
5. If the option to generate keys isn’t available, you can set Secure Boot Mode to Standard. That should generate default keys automatically, allowing activation.
6. After that, press F10, save, and exit. You may need to reboot and re-enter the BIOS if it sticks.

And for the Windows 11 install or upgrade, making sure the system is in UEFI mode and GPT format is essential. Also, disabling CSM (Compatibility Support Module) in BIOS might be necessary if you want to switch from Legacy to UEFI for secure boot activation.