I have an ASUS ROG GL553VD and both Secure Boot and CSM are grayed out in the BIOS. CSM is disabled and I cannot enable it. I'm trying to install Windows 11, but the installer says the system does not meet the requirements. I've tried setting an administrator password, restoring the default Secure Boot keys, resetting BIOS settings, and updating the BIOS, but the options are still unavailable. I can enter the firmware settings through Windows' UEFI restart option or by pressing Delete during startup.
3 Answers
The GL553VD may not officially support all of Windows 11’s requirements, particularly TPM 2.0 or a supported processor. Even if you manage to enable Secure Boot, the installer may still reject the laptop. Check whether the firmware has Intel PTT or TPM enabled, and verify the processor and TPM version against Microsoft’s requirements before changing disk settings. Back up important files first, since switching installation modes or repartitioning can erase the existing installation.
CSM being disabled is usually correct for a modern Windows installation because Windows 11 requires UEFI mode. The important question is why Secure Boot is unavailable. Check the BIOS Security and Boot sections for options such as Device Guard, Kernel DMA Protection, or other firmware security controls, although those settings may not exist on every GL553VD BIOS version. Also make sure the laptop is completely powered off before starting it and entering the BIOS directly; entering firmware settings after a failed boot can sometimes leave configuration options locked.
If the goal is only to test Windows 11, the installer can sometimes be started with its hardware checks bypassed. From the Windows Setup screen, Shift+F10 should open Command Prompt; then Regedit can be used to create HKEY_LOCAL_MACHINESYSTEMSetupLabConfig with DWORD values named BypassSecureBootCheck and BypassTPMCheck, both set to 1. If Shift+F10 sends the laptop back to the boot-device menu instead, use a different installation USB or recreate the installer, because the current setup environment may not be loading correctly. This bypass is unofficial and does not make the hardware officially supported.
I can enter the BIOS either through Windows’ UEFI firmware restart option or by repeatedly pressing Delete during startup, but Secure Boot and CSM remain unavailable either way. My BIOS only shows administrator and user passwords, I/O interface security, and Secure Boot under the Security section.