How to Enable Secure Boot in ASRock BIOS for Windows 11

Published

On this page

If your ASRock rig is blocked by a “Secure Boot is not enabled” or anti-cheat error, you just need to enable Secure Boot in BIOS. Modern anti-cheats — Valorant (Vanguard), Fortnite, Call of Duty / Warzone (Ricochet), and Faceit — require Secure Boot on Windows 11. Here’s the process for ASRock boards.

How to Enable Secure Boot in ASRock BIOS for Windows 11

Written for ASRock motherboards (Taichi, Steel Legend, Phantom Gaming, Pro) on modern UEFI BIOS. Use the brand-specific guide for other boards. Secure Boot pairs with TPM 2.0 — see How to Enable TPM in ASRock BIOS for Windows 11 if you haven’t enabled it.

Quick checklist before you touch BIOS

  • Back up important data first.
  • Confirm your drive is GPT, not MBR — Secure Boot requires UEFI + GPT.
  • Connect keyboard and monitor directly (no remote access).
  • Update Windows so anti-cheat services detect the change.

Step 1 – Check whether Secure Boot is already on

  1. Press Win + R, type msinfo32, press Enter.
  2. Check BIOS Mode (UEFI) and Secure Boot State (On).

If BIOS Mode is Legacy, convert to UEFI/GPT first. If it’s UEFI but Secure Boot is Off, just change the BIOS setting below.

Step 2 – Enter the ASRock BIOS

  1. Fully shut down your PC.
  2. Power on and repeatedly tap F2 (sometimes Del) at the ASRock logo.
  3. Use the top menu tabs to navigate (ASRock uses a tabbed Advanced layout).

Step 3 – Disable CSM

Secure Boot won’t enable while CSM is active.

  1. Go to the Boot tab.
  2. Open CSM (Compatibility Support Module).
  3. Set CSM to Disabled.

If Windows stops booting afterward, your drive is MBR. Boot into Windows, run mbr2gpt /validate then mbr2gpt /convert from an elevated command prompt, then retry.

Step 4 – Enable Secure Boot on ASRock

  1. Go to the Security tab.
  2. Open Secure Boot.
  3. Set Secure Boot to Enabled.
  4. If it’s greyed out, choose Enroll all Factory Default keys (or Install default Secure Boot keys) and confirm, then enable again.

Step 5 – Save and reboot correctly

  1. Press F10 to Save & Exit.
  2. Confirm Secure Boot = Enabled and CSM = Disabled.
  3. Select Yes and boot into Windows.

Step 6 – Verify Secure Boot in Windows 11

  1. Press Win + R, type msinfo32, press Enter.
  2. Confirm Secure Boot State: On and BIOS Mode: UEFI.

Restart your game — Vanguard, Ricochet, and EAC checks should pass.

Troubleshooting on specific ASRock lineups

Taichi / Steel Legend / Phantom Gaming

All options are exposed. Disable CSM under Boot, then enable Secure Boot under Security. Use Enroll all Factory Default keys if locked.

ASRock Pro / budget boards

These sometimes ship in CSM mode. Disable CSM, convert the drive to GPT if needed, then enable Secure Boot.

Secure Boot stays greyed out

CSM is still on or keys are missing. Disable CSM, then enroll factory default keys before toggling Secure Boot.

Does Secure Boot affect gaming performance?

No. Secure Boot validates the boot chain at startup only — no FPS or latency cost in Fortnite, Apex Legends, or Warzone. It simply lets modern anti-cheats run.

Pair this with:

Summary – ASRock Secure Boot for Windows 11

  • Disable CSM under the Boot tab.
  • Set Secure Boot to Enabled under the Security tab.
  • Enroll factory default keys if greyed out.
  • Verify with msinfo32 → Secure Boot State: On.

Once enabled, your ASRock PC passes the Secure Boot checks Valorant, Fortnite, and Call of Duty require — with no performance loss.