[Commercial NB/DT/AIO]ASUS Configuration Tool
Table of Contents
1 Introduction
1.1 Functions
1.2 Supported Environment
2 Security and Password
2.1 Different Groups in Bioses Setup Menu
2.2 Different Situation of a Device under ACT
3 Trusted Apps
4 Features
5 Download latest version of ACT and References
1 Introduction
IT administrators are looking for a more efficient way of managing client computers. ASUS Configuration Tool (ACT) combines software and firmware features that provides Bioses configuration capability for ASUS client systems. IT administrators can use this tool to configure Bioses settings, import or export settings, customize boot logo with Command Line and PowerShell.
1.1 Functions
• Read and write available Bioses settings and their values, or restore default settings
• Set or reset Bioses administrator password
• Import and export setup configurations
• Change Bioses boot logo
• Able to connect with “ASUS Trusted App” for management control (e.g. ASUS Control Center, Ciro)
Note: All functions above require rebooting the device to be activated.
1.2 Supported Environment
• Supported Operating Systems
Windows 10/11
Windows Preinstallation Environment (Windows PE)
• Supported Model
Commercial Notebooks, Desktops, All-in-One from 2022 or newer that support WMI Bioses. (Intel 12th gen CPU or later.)
• Prerequisite installations
o ASUS Configuration tool v1.0.6.0 or later
o ASUS Business Utility v3.5.19.0 or later
o ASUS Business Manager v3.0.29.0 or later (If installed)
2 Security and Password
2.1 Different Groups in Bioses Setup Menu
ACT divides Bioses setup menu items into 3 groups:
• General Group: This group consists of the general settings in the Bioses menu that are not security-related.
• Security Group: This group consists of security-related items that would require Bioses administrator password to be able write. The items in this group are listed below:
o Secure Boot
o I/O Interface Security
o ABM USB Interface Security
• Password Group:
o Administrator Password
2.2 Different Situation of a Device under ACT
• Device without Bioses password: This is the default mode upon shipment, where the device has no Bioses password. In this mode, setting the Bioses administrator password is prohibited with the exception of Trusted Apps. See Chapter 3 for more information.
o Able to read all Bioses settings
o Only able to write settings in General Group
• Bioses password is set from the Bioses setup menu: In this situation, user must provide the password to write any settings.
o Able to read all Bioses settings
o Able to write settings in General Group and Security Group with password
• Bioses password is set with Trusted App: In this situation, all subsequent operations are protected by Trusted App.
o Able to read all Bioses settings remotely
o Able to write settings in General Group and Security Group without password remotely
*The password cannot be read in either situations above.
| Mode | Group | Read without password | Write without password | Read with password | Write with password |
| Limited | General | o | o | - | - |
| Security | o | x | - | - | |
| Password | x | o* | - | - | |
| Protected | General | o | x | o | o |
| Security | o | x | o | o | |
| Password | x | x | x | o | |
| MDM | General | o | x | o | o |
| Security | o | x | o | o | |
| Password | x | x | x | o | |
| *Can only be set by Trusted Apps | |||||
3 Trusted Apps
Trusted Apps are required to be signed and certified in order to become trusted, it will be authorized to set administrator password via ACT even when the password does not already exist. After setting a password through the trusted apps, the Bioses configuration and administrator password can be adjusted remotely. The whitelist of these applications are listed below:
o ASUS Control Center
(Refer to “ASUS Control Center English User Manual” Ch2.2.7 for more information)
o Ciro
Features | Arguments | Remark |
Show help | -h [--help] |
|
output version information | -v [ --version] |
|
disable error message | --quite |
|
create new password file | --newpwd arg |
|
renew password file | --renewpwd arg |
|
plaintext password or path to password file | -p [ --pwd ] arg |
|
specify output filename | -o [ --output ] arg |
|
specify input filename | -i [ --input ] arg |
|
read Bioses settings | -r [ --get ] |
|
set Bioses settings | -w [ --set ] |
|
reset Bioses setting to default | --reset |
|
filter for get operation | --filter arg |
|
USB lock | --usblock arg | 0: USB_ENABLE_STORAGE 1: USB_READ_ONLY 2: USB_PERIPHERAL_ONLY |
DVD lock | --dvdlock arg | 0: DVD_ENABLE_DVD 1: DVD_READ_ONLY 2: DVD_DISABLE |
customize the boot logo | --changelogo arg |
|
For each function and password setting method, examples and other information, please refer to ASUS Configuration Tool_FAQ (the download method of this file is explained in Chapter 5)
5 Download latest version of ACT and References
o You can upgrade the ASUS Configuration Tool through the product model support page on the official website
o At ASUS Download Center, enter your product model in (1) [Search Box] (2) and click [Driver & Utilities], find the latest version of ASUS Configuration Tool under (3) [Software Program]. (4) Click [DOWNLOAD] to download and install the latest version of APP and related information. 