
Tip
If you are installing Windows 7/8/10 from a USB flash drive in UEFI Boot Mode, then you need to have a UEFI Boot Mode compatible Windows 7/8/10 USB flash drive.
Here is more info:
UEFI Boot Mode (installing using the
GPT partition style) and
Legacy BIOS Boot Mode (installing using the
MBR partition style). ->
link
Asus motherboard with UEFI firmware. How to install Windows 7/8/10 64-bit in UEFI Boot Mode.
You do not need to change the default UEFI firmware (BIOS) settings.
Note: You need to select to boot from the UEFI type (marked UEFI in the boot menu) if you want to install
Windows 7/8/10 64-bit in UEFI Boot Mode (see screenshot below).
Note: You do not need to change the boot order of drives in your UEFI firmware settings.
- Connect your Windows 7/8/10 64-bit USB flash drive (
Note: FAT32 file system) or insert your Windows 7/8/10 64-bit DVD.
- Restart the computer.
- Press the correct key to enter the boot menu (for example, Asus F8 and Gigabyte F12).
- Select to boot from the "
UEFI: USB/DVD device name" (see screenshot below).
If you are booting from a Windows 7/8/10 64-bit USB flash drive in UEFI Boot Mode, then UEFI firmware run \efi\boot\bootx64.efi file.
Note: This file does not exist by default in the Windows 7 installation media, so you need to create this file by using the
Rufus program, if you want UEFI Boot Mode compatible Windows 7 64-bit USB flash drive.
If you are booting from a Windows 7/8/10 64-bit DVD in UEFI Boot Mode, then UEFI firmware run \efi\microsoft\boot\cdboot.efi file.
The Asus motherboard default UEFI firmware settings (see screenshots below).
Windows 7/8/10 64-bit will be able to be installed successfully in UEFI Boot Mode.
CSM (Compatibility Support Module) > Launch CSM
- [Auto]: The system automatically detects the bootable devices and the add-on devices.
- [
Enabled]: For better compatibility, enable the CSM to fully support the non-UEFI driver add-on devices or the Windows UEFI mode.
- [Disabled]: Disable the CSM to fully support the Windows Security Update and Security Boot.
Secure Boot > OS Type
- [
Windows UEFI Mode]: Execute the Microsoft Secure Boot check. Only select this option when booting on Windows UEFI mode or other Microsoft Secure Boot compliant OS.
- [Other OS]: Get the optimized function when booting on Windows non-UEFI mode, Windows Vista/XP, or other Microsoft Secure Boot non-compliant OS.
After the
Windows 8/10 64-bit installation is completed, you can check if
Secure Boot option is enabled in the UEFI firmware. Run the following command as administrator from the command prompt.
powershell confirm-SecureBootUEFI
The result should be
True.
Microsoft designed Secure Boot to protect the computer from low-level exploits and rootkits and bootloaders. A security process shared between the operating system and Unified Extensible Firmware Interface (UEFI, replacing the BIOS), Secure Boot requires all the applications that are running during the booting process to be pre-signed with valid digital certificates. This way, the system knows all the files being loaded before Windows 8/10 loads and gets to the login screen have not been tampered with.
If a bootloader has infected your computer and it tries to load during the boot-up sequence, Secure Boot will be able to undo all the changes and thwart the attack. Having Secure Boot means it is that much harder for attackers to try to compromise the start up sequence.

Tip
Asus UEFI setups allow for both UEFI and Legacy BIOS (aka CSM) booting to be enabled. In that case, Windows 7 can normally be booted with the motherboard's Secure Boot feature enabled as well, but without actually using it.
Note: If you are dual booting Windows 7 64-bit and Windows 8/10 64-bit.
You must select the following option.
Secure Boot > OS Type > Other OS (default: Windows UEFI mode).
Or you get the following error message when you start Windows 7.
File: \Windows\system32\winload.efi
Status: 0xc0000428
Info: The digital signature for this file couldn't be verified.