Windows 10: Enabling secure boot on fresh install?

Hello, I apologize if this is the wrong section to ask this. I just bought a blank laptop (ASUS Strix Scar GL503GE) and installed Windows 10. I turned off secure boot for the install because the machine wouldn't boot from the usb. Install went smoothly but when I went back to enable secure boot, I get "Invalid signature detected. Check Secure Boot Policy in Setup." It boots with secure boot disabled so I still have a working machine. After a bunch of searching online not finding much I tried resetting the factory keys which works for Platform Key and Authorized TimeStamps but Key Exchange Keys and Authorized Signatures are listed as "External" and attempts to reset them just get the message "Security Violation." What do I need to do to get secure boot working?

:)

 

Windows 8 Secure Boot Feature: Not So Secure?

So Linux is switching to secure boot also? Or they have to because of UEFI?

 

Windows 8 Secure Boot Feature: Not So Secure?

• Linux
• Linux
• Linux
• Linux
• Oh and OSX

Here is a statement from a Kernal Developer at Red Hat:

I'm not sure this exploits the legacy BIOS but rather it exploits the legacy boot method on MBR drives, injecting a signed key before the OS boots, which you are correct in that it has nothing to do with Windows 8. And the simplest fix would just be to require boot drives use GPT when Secure Boot is enabled in UEFI.

 

enable secure boot

Hi ShowMeGirl1

To enable Secure Boot, your PC must have UEFI BIOS and you need to boot your PC into BIOS

Start your PC, on the manufacturers logo screen, there is generally an indication of how to boot your PC into Setup - usually it is F2, or F12 . .

On the Manufacturers Screen, repeatedly press that appropriate key, so your system boots into BIOS

If you do have UEFI, you will see the Secure Boot and legacy Boot options, turn off Legacy Boot (if applicable) and turn on Secure Boot

Also Please Note: to enable Secure Boot, your hard drive must be GPT, not MBR!