Secure Boot Bypass
Generate a GUID & store it.
Open Powershell as admin, write [Guid]::newGuid()and see the results. Take a picture of that GUID with your phone in case we might need it later. Not always necessary, just on some specific Asus models.
Boot Into BIOS. (Just like before)
HOW TO EASILY BOOT INTO BIOS: YOUTUBE TUTORIAL HERE!
Secure Boot Configuration.
Go to Boot > Secure Boot > OS Type [Windows UEFI] & Secure Boot Mode [Custom]. Secure Boot mode can be found under "Boot configuration".
If there is no 'Secure Boot Mode', then skip this.
NOTE: Ensure all Default keys are installed. If it shows "0" at all, click "Install Default Keys". This is important for our Secure Boot bypass!
KEK Management
Now open 'KEK Management' - Choose "Append key" option. - Choose "No" to load the EFI from a file on external media. - Choose USB file system. - Choose the "{random}der" file. - Select the file format as "Public Key Certificate". - Enter the GUID (with hyphens) that you saved earlier then press enter. - Finally, press "Yes" to append KEK with content from the .der file.
YOU SHOULD SEE A 'SUCCESS' MESSAGE IF YOU DONE EVERYTHING CORRECTLY!
Boot Configuration.
Now set your USB / Partition as Boot priority #1 and Windows Boot Manager as #2. Click save and exit bios again, we are done now. You will boot EFI spoofed.
Note: This process is important for ASUS users. You would ALWAYS have to boot Windows from the Partition / USB. You cannot play Fortnite (or any other Game, that requires Secure Boot) without it. Sadly, there is no other way for this, other than buying a new motherboard.
Last updated