• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

ASUS Updates Security Certificates of Motherboards, Graphics Cards, Mini PCs, Workstations and Servers

btarunr

Editor & Senior Moderator
Staff member
Joined
Oct 9, 2007
Messages
46,371 (7.67/day)
Location
Hyderabad, India
System Name RBMK-1000
Processor AMD Ryzen 7 5700G
Motherboard ASUS ROG Strix B450-E Gaming
Cooling DeepCool Gammax L240 V2
Memory 2x 8GB G.Skill Sniper X
Video Card(s) Palit GeForce RTX 2080 SUPER GameRock
Storage Western Digital Black NVMe 512GB
Display(s) BenQ 1440p 60 Hz 27-inch
Case Corsair Carbide 100R
Audio Device(s) ASUS SupremeFX S1220A
Power Supply Cooler Master MWE Gold 650W
Mouse ASUS ROG Strix Impact
Keyboard Gamdias Hermes E2
Software Windows 11 Pro
ASUS is releasing this advisory to provide information related to the new implementation of a tiered certificate structure that upgrades the security infrastructure of our expanding software ecosystem. The upgrade requires the current code-signing certificate of several ASUS products to be revoked. This revocation can cause some existing software utilities to trigger a Windows Security dialog box, and may prevent legitimate ASUS programs, such as Aura, AI Suite III, GPU Tweak II and others, from running normally when users attempt to execute the associated 'Setup.exe' or 'AsusSetup.exe' file.

The new versions of each ASUS software update, code-signed with a new digital certificate are now available for download at the link provided below. Once the latest version of the respective software is downloaded, the relevant program can be installed and run normally. Further information can be found in the Advisory FAQ section below. Users who have any inquiries or concerns are welcome to contact ASUS Customer Service. ASUS apologizes for any inconvenience caused by this update.

Updated Software List
Download links for each software program can be found here.

Advisory FAQ
What is a code-signing certificate?

Many companies, including ASUS, use electronic certificates to digitally 'sign' software code. These unique signatures provide users with an assurance that the code is legitimate, and has not been modified since being signed by the developer.

For more information, please follow the link below: https://www.digicert.com/blog/ms-smartscreen-application-reputation/
Is my current ASUS software safe to use?

Yes. All previously released ASUS software obtained from official sources, such as the official ASUS support website, ASUS Q-Installer, ASUS Armoury Crate, or an ASUS support CD, is safe and does not contain any malicious code. However, to account for the growth of our software ecosystem, we have implemented a new certificate infrastructure that requires a software update. Please use the links above to download the latest software for your system.


How does this affect me as a user?
You may encounter one of four different scenarios:
Scenario 1: ASUS software (such as Aura, AI Suite III, GPU Tweak II etc.)

Because the aforementioned software operates at the driver and service level, Windows may perform regular checks on the validity of the certificate when trying to run the program normally. Once the certificate has been revoked, Windows may prevent you from running the program altogether. In this case, you will need to download the newest code-signed version from the support page link listed above.


Scenario 2: Third-party drivers and software packed with ASUS products
The source code for third-party drivers and software are not produced by ASUS. As such, they will be code-signed by the third-party provider, and therefore are not affected by the revocation of the ASUS certificate. If you have existing drivers installed, you can continue to use them safely.
However, if you are trying to install third-party drivers or software from an ASUS support CD then you may still encounter a warning dialog. This is because the ASUS support CD provides a setup file called 'AsusSetup.exe' that may act as a shortcut to a 'Setup.exe' file created by a third-party provider. Because 'AsusSetup.exe' is code-signed by ASUS, you may encounter a warning message preventing you from proceeding with installation.
To proceed, either download the latest code-signed drivers from the support page link listed above or directly execute the third-party provider's 'Setup.exe' file - as this will bypass the ASUS installation program - 'AsusSetup.exe'.


Scenario 3: Running an ASUS support CD
Windows may prevent you from running an ASUS support CD normally. Please use the links provided in this advisory notice to download the latest versions of the appropriate program files for your ASUS product.


Scenario 4: Starting (booting) your PC
this question is dedicated for motherboards with Armoury Crate or Q-installer
After starting (booting) your PC for the first time, you may encounter a warning message preventing you from installing and running ASUS Armoury Crate. If this occurs you will need to update the BIOS to the latest version or disable this feature.
You can access the BIOS and disable this feature to prevent this message from continually popping up. To do this, first restart your PC, and then press the Delete (Del) or F2 key when prompted during the startup process. Now navigate to the 'Tools' tab and then select the 'ASUS Armoury Crate' category. Then choose the 'Disable the Download & Install ARMOURY CRATE app' option. To save these changes and restart the system, press the F10 key, then press Y when prompted. Alternatively, navigate to the 'Save and Exit' option within the BIOS menu, press the Enter key, then press Y to save changes and restart.


How do I uninstall previous versions of Aura, AI Suite III, and LiveDash?
Windows may prevent you from uninstalling the related software due to the revoked certificates. In order to uninstall these programs, you will first have to disable Microsoft's User Account Control (UAC):

  • Type UAC in the search field of the Windows taskbar. (If the search field isn't visible, for Windows 10, right-click the Start button and choose Search; for Windows 7, left-click the Start button and choose Search)
  • Click 'Change User Account Control settings' in the search results.
  • To turn UAC off, drag the slider down to 'Never notify' and then click 'OK'.
  • You may be prompted to confirm your selection or enter an administrator password.
  • Reboot your computer for the change to take effect.

After disabling UAC, you can proceed with uninstallation. Remember to reset UAC settings to the previous level after the uninstallation completes.

View at TechPowerUp Main Site
 

TheLostSwede

News Editor
Joined
Nov 11, 2004
Messages
16,064 (2.26/day)
Location
Sweden
System Name Overlord Mk MLI
Processor AMD Ryzen 7 7800X3D
Motherboard Gigabyte X670E Aorus Master
Cooling Noctua NH-D15 SE with offsets
Memory 32GB Team T-Create Expert DDR5 6000 MHz @ CL30-34-34-68
Video Card(s) Gainward GeForce RTX 4080 Phantom GS
Storage 1TB Solidigm P44 Pro, 2 TB Corsair MP600 Pro, 2TB Kingston KC3000
Display(s) Acer XV272K LVbmiipruzx 4K@160Hz
Case Fractal Design Torrent Compact
Audio Device(s) Corsair Virtuoso SE
Power Supply be quiet! Pure Power 12 M 850 W
Mouse Logitech G502 Lightspeed
Keyboard Corsair K70 Max
Software Windows 10 Pro
Benchmark Scores https://valid.x86.fr/5za05v
Ah yes, all the bloatware I never installed in the first place anyhow.
At least they fixed it, for now...
 
Joined
Jun 24, 2011
Messages
120 (0.03/day)
Location
Germany
System Name MonsterPC
Processor AMD X7950X3D
Motherboard MSI MEG E670X ACE
Cooling Corsair Cappelix H150i
Memory 128GB DDR5 @5600
Video Card(s) AMD RX7900XTX
Storage 120TB HDD + 3x 2TB SSD RAID, External - 390 TB Various HDD drives
Display(s) C49RG90
Case BIG Tower
Audio Device(s) Creative X-FI 4 + SteelSeries Arctis Pro USB
Power Supply Corsair AX1200i
Mouse SteelSeries Rival710
Keyboard SteelSeries Apex Pro
VR HMD Valve Index
Software W10 x64
Ah yes, all the bloatware I never installed in the first place anyhow.
At least they fixed it, for now...
You know that ASUS also includes some payload already pre-integrated in the UEFI right?
Even after a clean install it gets installed (one exception is if you use Linux only).
 
Joined
Jun 15, 2016
Messages
1,042 (0.36/day)
Location
Pristina
System Name My PC
Processor 4670K@4.4GHz
Motherboard Gryphon Z87
Cooling CM 212
Memory 2x8GB+2x4GB @2400GHz
Video Card(s) XFX Radeon RX 580 GTS Black Edition 1425MHz OC+, 8GB
Storage Intel 530 SSD 480GB + Intel 510 SSD 120GB + 2x500GB hdd raid 1
Display(s) HP envy 32 1440p
Case CM Mastercase 5
Audio Device(s) Sbz ZXR
Power Supply Antec 620W
Mouse G502
Keyboard G910
Software Win 10 pro
Too complicated my head hurts! :p
 

TheLostSwede

News Editor
Joined
Nov 11, 2004
Messages
16,064 (2.26/day)
Location
Sweden
System Name Overlord Mk MLI
Processor AMD Ryzen 7 7800X3D
Motherboard Gigabyte X670E Aorus Master
Cooling Noctua NH-D15 SE with offsets
Memory 32GB Team T-Create Expert DDR5 6000 MHz @ CL30-34-34-68
Video Card(s) Gainward GeForce RTX 4080 Phantom GS
Storage 1TB Solidigm P44 Pro, 2 TB Corsair MP600 Pro, 2TB Kingston KC3000
Display(s) Acer XV272K LVbmiipruzx 4K@160Hz
Case Fractal Design Torrent Compact
Audio Device(s) Corsair Virtuoso SE
Power Supply be quiet! Pure Power 12 M 850 W
Mouse Logitech G502 Lightspeed
Keyboard Corsair K70 Max
Software Windows 10 Pro
Benchmark Scores https://valid.x86.fr/5za05v
You know that ASUS also includes some payload already pre-integrated in the UEFI right?
Even after a clean install it gets installed (one exception is if you use Linux only).

Nope, not on my board, I don't have any Asus software running. Maybe I'm just lucky?
 

silentbogo

Moderator
Staff member
Joined
Nov 20, 2013
Messages
5,474 (1.44/day)
Location
Kyiv, Ukraine
System Name WS#1337
Processor Ryzen 7 3800X
Motherboard ASUS X570-PLUS TUF Gaming
Cooling Xigmatek Scylla 240mm AIO
Memory 4x8GB Samsung DDR4 ECC UDIMM
Video Card(s) Inno3D RTX 3070 Ti iChill
Storage ADATA Legend 2TB + ADATA SX8200 Pro 1TB
Display(s) Samsung U24E590D (4K/UHD)
Case ghetto CM Cosmos RC-1000
Audio Device(s) ALC1220
Power Supply SeaSonic SSR-550FX (80+ GOLD)
Mouse Logitech G603
Keyboard Modecom Volcano Blade (Kailh choc LP)
VR HMD Google dreamview headset(aka fancy cardboard)
Software Windows 11, Ubuntu 20.04 LTS

FreedomEclipse

~Technological Technocrat~
Joined
Apr 20, 2007
Messages
23,371 (3.76/day)
Location
London,UK
System Name Codename: Icarus Mk.VI
Processor Intel 8600k@Stock -- pending tuning
Motherboard Asus ROG Strixx Z370-F
Cooling CPU: BeQuiet! Dark Rock Pro 4 {1xCorsair ML120 Pro|5xML140 Pro}
Memory 32GB XPG Gammix D10 {2x16GB}
Video Card(s) ASUS Dual Radeon™ RX 6700 XT OC Edition
Storage Samsung 970 Evo 512GB SSD (Boot)|WD SN770 (Gaming)|2x 3TB Toshiba DT01ACA300|2x 2TB Crucial BX500
Display(s) LG GP850-B
Case Corsair 760T (White)
Audio Device(s) Yamaha RX-V573|Speakers: JBL Control One|Auna 300-CN|Wharfedale Diamond SW150
Power Supply Corsair AX760
Mouse Logitech G900
Keyboard Duckyshine Dead LED(s) III
Software Windows 10 Pro
Benchmark Scores (ノಠ益ಠ)ノ彡┻━┻
Can't certificates get overwritten by malicious code anyway? Updating it might stop it this time around unless there's some serious encryption going on
 
Joined
Aug 20, 2007
Messages
20,784 (3.41/day)
System Name Pioneer
Processor Ryzen R9 7950X
Motherboard GIGABYTE Aorus Elite X670 AX
Cooling Noctua NH-D15 + A whole lotta Sunon and Corsair Maglev blower fans...
Memory 64GB (4x 16GB) G.Skill Flare X5 @ DDR5-6000 CL30
Video Card(s) XFX RX 7900 XTX Speedster Merc 310
Storage 2x Crucial P5 Plus 2TB PCIe 4.0 NVMe SSDs
Display(s) 55" LG 55" B9 OLED 4K Display
Case Thermaltake Core X31
Audio Device(s) TOSLINK->Schiit Modi MB->Asgard 2 DAC Amp->AKG Pro K712 Headphones or HDMI->B9 OLED
Power Supply FSP Hydro Ti Pro 850W
Mouse Logitech G305 Lightspeed Wireless
Keyboard WASD Code v3 with Cherry Green keyswitches + PBT DS keycaps
Software Gentoo Linux x64
Can't certificates get overwritten by malicious code anyway? Updating it might stop it this time around unless there's some serious encryption going on

Overwriting the certificates wouldn't do anything for malware writers. They'd need ASUS's private keys...

Which aparently, were already leaked once, or they would not be revoking their old cert.
 
Joined
Jun 24, 2011
Messages
120 (0.03/day)
Location
Germany
System Name MonsterPC
Processor AMD X7950X3D
Motherboard MSI MEG E670X ACE
Cooling Corsair Cappelix H150i
Memory 128GB DDR5 @5600
Video Card(s) AMD RX7900XTX
Storage 120TB HDD + 3x 2TB SSD RAID, External - 390 TB Various HDD drives
Display(s) C49RG90
Case BIG Tower
Audio Device(s) Creative X-FI 4 + SteelSeries Arctis Pro USB
Power Supply Corsair AX1200i
Mouse SteelSeries Rival710
Keyboard SteelSeries Apex Pro
VR HMD Valve Index
Software W10 x64
+1 toomanyletterz


Or if you are running anything but their Z390 boards, or if you have a CSM windows install.

True to the first part, but who installs Windows in BIOS/Legacy/CSM mode these days... Faster boot FTW ! ;-)
 
Joined
Sep 27, 2014
Messages
550 (0.16/day)
Not all devices can boot in Fastboot. RAID cards, some video cards (ATI)...

I am using GPU Tweak II.
 
Last edited:
Joined
Jan 10, 2011
Messages
1,326 (0.27/day)
Location
[Formerly] Khartoum, Sudan.
System Name 192.168.1.1~192.168.1.100
Processor AMD Ryzen5 5600G.
Motherboard Gigabyte B550m DS3H.
Cooling AMD Wraith Stealth.
Memory 16GB Crucial DDR4.
Video Card(s) Gigabyte GTX 1080 OC (Underclocked, underpowered).
Storage Samsung 980 NVME 500GB && Assortment of SSDs.
Display(s) LG 24MK430 primary && Samsung S24D590 secondary
Case Corsair Graphite 780T.
Audio Device(s) On-Board.
Power Supply SeaSonic CORE GM-650.
Mouse Coolermaster MM530.
Keyboard Kingston HyperX Alloy FPS.
VR HMD A pair of OP spectacles.
Software Ubuntu 22.04 LTS.
Benchmark Scores Me no know English. What bench mean? Bench like one sit on?
Is my current ASUS software safe to use?
Yes. All previously released ASUS software obtained from official sources, such as the official ASUS support website, ASUS Q-Installer, ASUS Armoury Crate, or an ASUS support CD, is safe and does not contain any malicious code. However, to account for the growth of our software ecosystem, we have implemented a new certificate infrastructure that requires a software update.

I wonder if I'll ever read a marketing statement that isn't utter bs.
And heck, isn't this technically a lie? Supply chain attack means the official repos ARE the the source of malicious code! And if you were responcible enough to plug the hole (which is more that can be said than many other hardware vendors), why lie about the patch? :shadedshu:
 

silentbogo

Moderator
Staff member
Joined
Nov 20, 2013
Messages
5,474 (1.44/day)
Location
Kyiv, Ukraine
System Name WS#1337
Processor Ryzen 7 3800X
Motherboard ASUS X570-PLUS TUF Gaming
Cooling Xigmatek Scylla 240mm AIO
Memory 4x8GB Samsung DDR4 ECC UDIMM
Video Card(s) Inno3D RTX 3070 Ti iChill
Storage ADATA Legend 2TB + ADATA SX8200 Pro 1TB
Display(s) Samsung U24E590D (4K/UHD)
Case ghetto CM Cosmos RC-1000
Audio Device(s) ALC1220
Power Supply SeaSonic SSR-550FX (80+ GOLD)
Mouse Logitech G603
Keyboard Modecom Volcano Blade (Kailh choc LP)
VR HMD Google dreamview headset(aka fancy cardboard)
Software Windows 11, Ubuntu 20.04 LTS
True to the first part, but who installs Windows in BIOS/Legacy/CSM mode these days... Faster boot FTW ! ;-)
Legacy mode is good for avoiding software/hardware issues, like the old-good bug with windows 10 getting stuck in S mode on 1809 or older versions on clean install (I believe MS fixed it last year), or GPU driver issues on some older non-UEFI cards.
 
Joined
Sep 17, 2014
Messages
20,932 (5.97/day)
Location
The Washing Machine
Processor i7 8700k 4.6Ghz @ 1.24V
Motherboard AsRock Fatal1ty K6 Z370
Cooling beQuiet! Dark Rock Pro 3
Memory 16GB Corsair Vengeance LPX 3200/C16
Video Card(s) ASRock RX7900XT Phantom Gaming
Storage Samsung 850 EVO 1TB + Samsung 830 256GB + Crucial BX100 250GB + Toshiba 1TB HDD
Display(s) Gigabyte G34QWC (3440x1440)
Case Fractal Design Define R5
Audio Device(s) Harman Kardon AVR137 + 2.1
Power Supply EVGA Supernova G2 750W
Mouse XTRFY M42
Keyboard Lenovo Thinkpad Trackpoint II
Software W10 x64
'Here, read this wall of text and jump through seven hoops to keep using our bloatware safely'

No, thanks.
 
Top