[Commercial NB/DT/AIO]ASUS Bioses Config Tool

Table of Contents          
1 Introduction          
  1.1 Features           
  1.2 Supported Environment             
2 Security and Password Management          
  2.1 Bioses Setting Groups          
  2.2 Different Situation of a Device under ACT                  
3 Trusted Applications          
4 Features Overview

5 Download the latest version of ASUS Bioses Config Tool

1 Introduction          
IT administrators are constantly seeking more efficient ways to manage client devices. The ASUS Bioses Config Tool (ACT) integrates both software and hardware capabilities to provide Bioses configuration for ASUS client devices. With this tool, IT administrators can configure Bioses settings, import/export configurations, and customize boot logos.        
1.1 Features          
• Read and write available Bioses settings and values, or restore to default
• Set or reset Bioses administrator password
• Import and export configuration settings
• Change the Bioses boot logo
• Integrate with trusted applications (e.g., ASUS Control Center, Ciro) for management control
Note: All functions require a system reboot to take effect.         
1.2 Supported Environment          
• Supported Operating Systems
Windows 10/11
Windows Preinstallation Environment (Windows PE)
• Supported Models
Functionality support may vary depending on the model’s release time and specifications. Please refer to the actual model for details.
Supported on ASUS commercial notebooks, desktops, and All-in-One PCs (2022 or newer) with Intel 12th Gen CPUs or later that support WMI Bioses.
• Prerequisite Installations
【For WMI Interface version below 3.0】
o ASUS Business Utility v3.5.15.0 ~ v3.0.18.0
o ASUS Business Manager v3.0.24.0 ~v3.0.28.0 (only required if already installed on the system)
【For WMI Interface version 3.0 or above】
o ASUS Business Utility v3.5.19.0 or later
o ASUS Business Manager v3.0.29.0 or later (only required if already installed on the system)
【For WMI Interface version 4.0 or above】
o ASUS Business System Control Interface (BSCI) v0.4.3.0 or later
o ASUS Business Manager v3.0.32.0 or later (only required if already installed on the system) 

                
2 Security and Password Management          
2.1 Bioses Setting Groups          
【For WMI Interface version below 3.0】
ACT divides Bioses settings into 3 groups：
• General Group: Includes non-security-related Bioses settings.
• Security Group: Includes security-related items that require the Bioses admin password to write. Items include:
o Secure Boot 
o I/O Interface Security 
o ABM USB Interface Security
• Password Group:
o Administrator Password       
2.2 Different Situation of a Device under ACT          
【For WMI Interface version ≤ 3.0】
• Default Mode (No Bioses admin password set):
This is the default mode with no Bioses password set. Setting the Bioses admin password is not allowed (except through trusted applications).
o Can read all Bioses settings
o Can only write settings in the General Group
• Protected Mode (Bioses admin password set via Bioses menu):
User must provide the correct password to modify any setting. 
o Can read all Bioses settings
o Can write settings in both General and Security Groups with password
• MDM Mode (Bioses password set via trusted app):
All operations are protected by trusted applications.
o Can read all Bioses settings remotely. 
o Can write General and Security Group settings remotely without password.
Note: In all cases above, passwords cannot be read or written directly.
【For WMI Interface version ≥ 4.0】
• Default Mode (No Bioses password):
The default mode with no password set. Most settings are accessible for read/write.
Recommendation: Set a Bioses admin password after custom configuration to enhance security.
• Protected Mode (Bioses password set):
Provides basic protection. Bioses settings are readable by all users, but only those with the admin password can modify or enroll.
• Enrolled Mode (Password set with provisioning):
Bioses admin password is set and provisioning enrollment is completed. All Bioses operations are protected by digital signature verification for security and integrity.
 

3 Trusted Applications          
Trusted applications must be signed and verified to gain access privileges. Even if the device has no password, trusted apps can set the Bioses admin password via ACT. Once set, Bioses configurations and password can be remotely managed.
Whitelisted applications include:
o ASUS Control Center
o Ciro       
 

4 Features Overview

Function availability may vary by model and specifications.
ACT Graphic Interface
After installation, search for "ASUS Bioses Config Tool" in the desktop search bar and Run as Administrator to launch ACT.

The main page lists all Bioses configuration items.

Under Security, you can set Bioses Admin Password, enroll certificate, and then change device mode.

Under Optional Settings, you can modify the boot logo.

Exported JSON file can be customized.

ACT Command Line

For full usage, password setup methods, examples, and more details, please refer to ACT help string or ASUS Bioses Config Tool_FAQ.

5 Download the latest version of ASUS Bioses Config Tool  
You can upgrade/download to the latest version of ASUS Bioses Config Tool via the product support page on the official ASUS website. 

1. At the ASUS Download Center:
2. Enter your product model in the Search box

3. Click Driver & Tools

4. Under Software and Utility, find the latest version of ASUS Bioses Config Tool
5. Click Download to install the latest version