{"id":9899,"date":"2026-02-11T14:19:56","date_gmt":"2026-02-11T14:19:56","guid":{"rendered":"https:\/\/howtogeek.blog\/nl\/?p=9899"},"modified":"2026-02-11T14:19:56","modified_gmt":"2026-02-11T14:19:56","slug":"how-to-enable-or-disable-secure-boot-on-an-asrock-motherboard","status":"publish","type":"post","link":"https:\/\/howtogeek.blog\/nl\/how-to-enable-or-disable-secure-boot-on-an-asrock-motherboard\/","title":{"rendered":"How To Enable or Disable Secure Boot on an ASRock Motherboard"},"content":{"rendered":"<p>Figuring out how to toggle Secure Boot on an ASRock motherboard can be kinda confusing at first, especially if it\u2019s your first time poking around the BIOS\/UEFI menus. Usually, Secure Boot is all about making sure only trusted, signed drivers and OS components can boot up, preventing malware from sneaking in. But sometimes, you need to disable it\u2014for example, if you&#8217;re trying to run a dual-boot setup with Linux, or are installing certain tools that don\u2019t have signed drivers. The process sounds straightforward, but depending on your BIOS version and settings, it can get a bit tricky or even frustrating. So, here&#8217;s a kinda realistic walkthrough that\u2019ll hopefully help you get hands-on with the actual steps and options involved. And yes, on some machines, the menus are not super intuitive, so don\u2019t be surprised if you need to dig around or, sometimes, repeat a step.<\/p>\n<h2>How to Disable or Enable Secure Boot on ASRock Motherboard<\/h2>\n<h3>Method 1: Disabling Secure Boot (for dual boot, hardware changes, etc.)<\/h3>\n<p>This is the usual go-to, especially if you&#8217;re trying to run Linux or do something that\u2019s blocked when Secure Boot is active. The reason it helps is because when you turn Secure Boot off, it stops checking for signatures, letting unsigned software or drivers load. Expect a reboot after each change, and don\u2019t be alarmed if it takes a couple of tries to get things right. Sometimes the key to make it work is to get into the right menu or disable certain modes like CSM (Compatibility Support Module).<\/p>\n<ol>\n<li>Restart or power up your computer. Be ready to press <strong>F2<\/strong> or <strong>Del<\/strong> multiple times immediately after the logo appears. Some setups require quick fingers\u2014don\u2019t wait too long!<\/li>\n<li>As soon as you see the ASRock logo pop up, tap <strong>F2<\/strong> or <strong>Del<\/strong> to enter the BIOS\/UEFI. If you\u2019ve enabled fast boot, it might be tricky, so just keep pressing the keys repeatedly until you get in.<\/li>\n<li>If you land in EZ mode, press <strong>F6<\/strong> to switch to <strong>Advanced Mode<\/strong>. It\u2019s where the real magic happens.<\/li>\n<li>Navigate to the <strong>Security<\/strong> tab. This is usually at the top or side menu, sometimes hidden behind another menu or labeled differently, but it\u2019s usually pretty straightforward to find.<\/li>\n<li>Within Security, look for <strong>Secure Boot<\/strong>. It might be in a submenu \u2013 click on it.<\/li>\n<li>Set <strong>Secure Boot<\/strong> to <strong>Disabled<\/strong>. Then hit Enter to confirm. This will disable the secure checks for boot process.<\/li>\n<li>Finally, press <strong>F10<\/strong>, then confirm with <strong>Yes<\/strong> to save and exit. Your PC will reboot\u2014sometimes, you&#8217;ll see that Secure Boot remains enabled if certain settings like CSM or platform keys are still active. In those cases, you might need to disable CSM first.<\/li>\n<\/ol>\n<p>In some cases, especially if Secure Boot keys are still present, simply disabling it might not be enough. You might have to go the extra mile and clear the keys or switch the mode to <strong>Custom<\/strong> for full control\u2014kind of like doing a clean slate.<\/p>\n<h3>Method 2: Clearing Secure Boot Keys (more thorough, but use with caution)<\/h3>\n<p>This lets you remove existing keys, making Secure Boot effectively inactive. It\u2019s helpful if you\u2019re troubleshooting or want a real clean start, especially when you want to reinstall or reset Secure Boot. Be warned: if you\u2019re using custom keys, make sure you back them up because this process wipes them out. In some setups, clearing the keys is necessary before re-enabling Secure Boot or changing modes to meet UEFI requirements for Windows 11.<\/p>\n<ol>\n<li>Follow the same initial steps to get into <strong>Advanced Mode<\/strong> in BIOS\/UEFI.<\/li>\n<li>Go again to the <strong>Security<\/strong> tab, then select <strong>Secure Boot<\/strong>.<\/li>\n<li>Set <strong>Secure Boot Mode<\/strong> to <strong>Custom<\/strong>. You might see options like <strong>Standard<\/strong> as well; choose what fits your goal.<\/li>\n<li>Find and click on <strong>Clear Secure Boot Keys<\/strong>. It could be a button or a menu option.<\/li>\n<li>Confirm with <strong>Yes<\/strong> when prompted. Expect your system to wipe out all current keys in this process. After that, your Secure Boot is effectively disabled, but the system still shows security options, just no enforced signatures.<\/li>\n<li>Press <strong>F10<\/strong> again, save, and exit. If you had keys before, now you\u2019re starting fresh.<\/li>\n<\/ol>\n<p>One side note\u2014if after doing this, the system acts weird or refuses to boot, double-check if CSM or other legacy modes are turned on, and adjust accordingly. It\u2019s kinda weird, but sometimes the BIOS settings are locked behind other toggles or require a full reset.<\/p>\n<h3>Method 3: Enabling Secure Boot (if you need it for Win 11 or security)<\/h3>\n<p>Turning it back on is pretty much a mirror of the disable process. But you\u2019ll need to ensure you have the default Secure Boot keys installed and that your BIOS is in UEFI mode, not Legacy. Otherwise, you\u2019ll get errors or it won&#8217;t activate properly.<\/p>\n<ol>\n<li>Power up and access <strong>Advanced Mode<\/strong> again, just like before.<\/li>\n<li>Navigate to the <strong>Security<\/strong> tab, then select <strong>Secure Boot<\/strong>.<\/li>\n<li>Set <strong>Secure Boot<\/strong> to <strong>Enabled<\/strong>. If you get an error about missing keys, you\u2019ll need to install or recreate Secure Boot keys.<\/li>\n<li>If you see a message about needing to enroll keys or the system being in \u201cUser Mode, \u201d go ahead and do that: choose <strong>Install Secure Boot Keys<\/strong>, then confirm.<\/li>\n<li>If the option to generate keys isn\u2019t available, you can set <strong>Secure Boot Mode<\/strong> to <strong>Standard<\/strong>. That should generate default keys automatically, allowing activation.<\/li>\n<li>After that, press <strong>F10<\/strong>, save, and exit. You may need to reboot and re-enter the BIOS if it sticks.<\/li>\n<\/ol>\n<p>And for the Windows 11 install or upgrade, making sure the system is in UEFI mode and GPT format is essential. Also, disabling CSM (Compatibility Support Module) in BIOS might be necessary if you want to switch from Legacy to UEFI for secure boot activation.<\/p>\n<div><strong>Extra tip<\/strong>: If you change hardware or BIOS updates cause the Secure Boot status to look inconsistent, sometimes a BIOS reset or update is needed. Windows might not recognize Secure Boot correctly if system settings weren\u2019t saved properly or if the firmware isn\u2019t up to date. Kind of annoying, but worth checking.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Figuring out how to toggle Secure Boot on an ASRock motherboard can be kinda confusing at first, especially if it\u2019s your first time poking around the BIOS\/UEFI menus. Usually, Secure Boot is all about making sure only trusted, signed drivers and OS components can boot up, preventing malware from sneaking in. But sometimes, you need [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-9899","post","type-post","status-publish","format-standard","hentry","category-how-to"],"acf":[],"_links":{"self":[{"href":"https:\/\/howtogeek.blog\/nl\/wp-json\/wp\/v2\/posts\/9899","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/howtogeek.blog\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/howtogeek.blog\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/howtogeek.blog\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/howtogeek.blog\/nl\/wp-json\/wp\/v2\/comments?post=9899"}],"version-history":[{"count":1,"href":"https:\/\/howtogeek.blog\/nl\/wp-json\/wp\/v2\/posts\/9899\/revisions"}],"predecessor-version":[{"id":9900,"href":"https:\/\/howtogeek.blog\/nl\/wp-json\/wp\/v2\/posts\/9899\/revisions\/9900"}],"wp:attachment":[{"href":"https:\/\/howtogeek.blog\/nl\/wp-json\/wp\/v2\/media?parent=9899"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/howtogeek.blog\/nl\/wp-json\/wp\/v2\/categories?post=9899"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/howtogeek.blog\/nl\/wp-json\/wp\/v2\/tags?post=9899"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}