Understanding the Secure Boot Restriction
The ASUS ROG Strix series uses a modern UEFI firmware that adheres strictly to Microsoft's Secure Boot standards. When this feature is active, the system verifies the digital signature of every bootloader against a database of trusted keys. Since many Linux distributions do not sign their kernels with a key present in the default UEFI database, the firmware considers them untrusted and excludes them from the visible boot list. This behavior is intentional to prevent unauthorized operating systems from loading during startup.
Users attempting to dual-boot or run Linux environments often encounter this "missing" menu when switching between Windows and Linux. The absence of the option does not indicate hardware failure or a corrupted bootloader. It simply reflects the current security policy of the motherboard. Disabling Secure Boot removes this verification step, allowing the BIOS to enumerate all attached storage devices and their partition tables regardless of signature status.
Navigating the ASUS UEFI Interface
To resolve this issue, you need to access the advanced settings within the BIOS. On the GL502V, the standard F2 key at startup may only open the basic EZ Mode. You must switch to Advanced Mode to find the security-related toggles. Press F7 immediately after the ASUS logo appears to enter Advanced Mode. If you are already in EZ Mode, look for a button labeled Advanced Mode usually located in the top right corner or accessible via the F7 shortcut.
Once in Advanced Mode, navigate using the arrow keys or mouse. The layout may vary slightly depending on the specific BIOS version installed on your device. However, the core structure remains consistent across the ROG Strix lineup. You will primarily interact with the Boot tab and the Security tab. Ensure that your keyboard language is set correctly if you encounter any input issues during navigation.
Locating the Secure Boot Toggle
In the Boot tab, look for an entry named Secure Boot. In some firmware versions, this might be nested under a submenu called Launch CSM or OS Type. If you see an option for OS Type, change it from Windows UEFI Mode to Other OS. This action automatically disables Secure Boot and enables compatibility mode for non-Windows operating systems. If no such toggle exists, proceed to the Security tab.
Inside the Security tab, locate the Secure Boot menu item. Select it and change the value from Enabled to Disabled. Note that on some ASUS motherboards, you may first need to set a Supervisor Password to unlock the ability to modify Secure Boot settings. This is a safety feature to prevent unauthorized changes. If prompted, create a simple password, remember it, and then proceed to disable Secure Boot. You can remove the password later if desired.
Applying Changes and Verifying Detection
After changing the setting, press F10 to save and exit. Confirm the action when prompted. The laptop will reboot into the BIOS setup screen again or directly into the operating system. Upon restarting, press F8 repeatedly during the POST phase to access the One-Time Boot Menu. You should now see entries for your Linux drive, USB installer, or network boot options alongside Windows Boot Manager.
If the options still do not appear, ensure that CSM (Compatibility Support Module) is enabled. Navigate back to the Boot tab and enable CSM. This allows legacy BIOS-style booting to coexist with UEFI. Save the changes and restart. For more details on handling detection issues, refer to our guide on BIOS No Longer Detects Second Drive in Dual Boot Windows-Linux Laptop.
Verify that your Linux drive is properly formatted with a GPT partition scheme if you intend to use UEFI native booting. Legacy BIOS mode requires MBR formatting. Mixing these configurations can lead to detection failures even after disabling Secure Boot. Check your disk management tools in Windows or Linux to confirm the partition table type matches your BIOS settings.
Re-enabling Security After Configuration
Disabling Secure Boot reduces the security posture of your system against rootkits and boot-level malware. If you wish to re-enable it later, you must first install a Linux distribution that supports Secure Boot, such as Ubuntu, Fedora, or Debian, which include signed kernels. Some users also choose to enroll custom keys, but this is complex and risky for average users.
For most gamers and developers using the GL502V, keeping Secure Boot disabled while running Linux is a stable and widely accepted configuration. It provides the flexibility needed for development environments without compromising daily Windows usage significantly. If you encounter issues updating the BIOS in the future, consult our article on Updating the UEFI / BIOS on an ASUS ROG MAXIMUS XIII HERO for general best practices on firmware management.
Frequently Asked Questions
Why did my boot options disappear suddenly?
Your boot options likely disappeared because Secure Boot was enabled or restored after a BIOS update. This feature filters out any bootloaders that lack a valid digital signature trusted by the UEFI firmware. Reverting to "Other OS" mode restores visibility to non-signed systems.
Can I keep Secure Boot enabled and still boot Linux?
Yes, but only if you use a Linux distribution that supports Secure Boot and has its kernel signed with keys enrolled in your UEFI. Most major distros like Ubuntu and Fedora support this. You must ensure the keys are properly installed before enabling the feature.
What if the Secure Boot option is grayed out?
If the option is grayed out, you likely need to set a Supervisor Password in the Security tab first. ASUS locks certain security settings until a user-defined password is established to prevent accidental modification. Set a password, disable Secure Boot, and then clear the password if you prefer not to use one.
Does disabling Secure Boot affect Windows performance?
No, disabling Secure Boot does not impact the performance or stability of Windows. It only affects the verification process during the boot sequence. Windows 10 and 11 will continue to function normally, though some enterprise security features may require Secure Boot to be active.
How do I access the boot menu without entering BIOS?
Press the F8 key repeatedly immediately after powering on the laptop, before the operating system loads. This opens the One-Time Boot Menu, allowing you to select a device for a single session. This method works regardless of Secure Boot status once the underlying device is detected.