# USB Boot and Firmware Unlock Cheat Sheet A manufacturer-by-manufacturer reference to USB boot menus and firmware settings, with notes on Secure Boot, recovery tools, platform differences, and BitLocker recovery risks. 2025-10-22 ![USB Boot and Firmware Unlock Cheat Sheet](https://switchboardtechservices.com/media/assets/2026/09/lego-figurine-in-front-of-computer-bios.jpg) ## Contents - [How to Boot From USB on Almost Any Computer](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#how-to-boot-from-usb-on-almost-any-computer) - [Before You Change Anything](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#before-you-change-anything) - [Prefer the one-time boot menu](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#prefer-the-one-time-boot-menu) - [BitLocker warning](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#bitlocker-warning) - [General procedure](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#general-procedure) - [Quick Boot-Key Reference](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#quick-boot-key-reference) - [Major PC Manufacturers](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#major-pc-manufacturers) - [Dell](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#dell) - [Inspiron, Latitude, XPS, Vostro, OptiPlex and Precision](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#inspiron-latitude-xps-vostro-optiplex-and-precision) - [Dell USB-C / Thunderbolt boot caveat](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#dell-usb-c-thunderbolt-boot-caveat) - [HP](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#hp) - [Pavilion, Envy, Spectre, OmniBook, EliteBook, ProBook and ZBook](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#pavilion-envy-spectre-omnibook-elitebook-probook-and-zbook) - [Legacy Support on HP](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#legacy-support-on-hp) - [Lenovo](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#lenovo) - [ThinkPad](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#thinkpad) - [IdeaPad and current Lenovo consumer systems](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#ideapad-and-current-lenovo-consumer-systems) - [Novo button](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#novo-button) - [Acer](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#acer) - [Aspire, Swift, Nitro, Predator and TravelMate](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#aspire-swift-nitro-predator-and-travelmate) - [If F12 does nothing](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#if-f12-does-nothing) - [Secure Boot is grayed out](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#secure-boot-is-grayed-out) - [ASUS](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#asus) - [VivoBook, ZenBook, ExpertBook, TUF, ROG and other ASUS notebooks](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#vivobook-zenbook-expertbook-tuf-rog-and-other-asus-notebooks) - [ASUS motherboards and desktops](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#asus-motherboards-and-desktops) - [“Other OS” Secure Boot setting](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#other-os-secure-boot-setting) - [Microsoft Surface](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#microsoft-surface) - [Boot directly from USB](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#boot-directly-from-usb) - [Enter Surface UEFI](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#enter-surface-uefi) - [Framework](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#framework) - [System76](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#system76) - [Open Firmware laptops](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#open-firmware-laptops) - [Proprietary-firmware laptops](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#proprietary-firmware-laptops) - [Thelio](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#thelio) - [Meerkat](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#meerkat) - [Pop!\_OS Secure Boot exception](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#pop_os-secure-boot-exception) - [MSI](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#msi) - [Gigabyte and AORUS](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#gigabyte-and-aorus) - [ASRock](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#asrock) - [Samsung PCs](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#samsung-pcs) - [Dynabook and Toshiba](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#dynabook-and-toshiba) - [Sony VAIO](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#sony-vaio) - [VAIO Care Rescue-era systems](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#vaio-care-rescue-era-systems) - [Older BIOS-controlled VAIO systems](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#older-bios-controlled-vaio-systems) - [Intel NUC and ASUS NUC](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#intel-nuc-and-asus-nuc) - [NUC USB not appearing](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#nuc-usb-not-appearing) - [Apple Macs](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#apple-macs) - [Intel-based Mac](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#intel-based-mac) - [Intel Mac with Apple T2 Security Chip](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#intel-mac-with-apple-t2-security-chip) - [Apple silicon: M1, M2, M3, M4, M5 and later](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#apple-silicon-m1-m2-m3-m4-m5-and-later) - [Chromebooks](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#chromebooks) - [Developer Mode / external boot](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#developer-mode-external-boot) - [Raspberry Pi](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#raspberry-pi) - [Raspberry Pi 4 and later](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#raspberry-pi-4-and-later) - [Raspberry Pi 3 family](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#raspberry-pi-3-family) - [Raspberry Pi Secure Boot](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#raspberry-pi-secure-boot) - [PINE64 / Pinebook Pro](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#pine64-pinebook-pro) - [Pinebook Pro](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#pinebook-pro) - [Servers and Workstations](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#servers-and-workstations) - [Dell PowerEdge](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#dell-poweredge) - [HPE ProLiant Gen10 / Gen10 Plus](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#hpe-proliant-gen10-gen10-plus) - [Lenovo ThinkSystem](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#lenovo-thinksystem) - [Secure Boot: What It Actually Does](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#secure-boot-what-it-actually-does) - [Linux and Secure Boot](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#linux-and-secure-boot) - [UEFI vs Legacy BIOS / CSM](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#uefi-vs-legacy-bios-csm) - [USB Filesystem Compatibility](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#usb-filesystem-compatibility) - [Practical table](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#practical-table) - [Ventoy](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#ventoy) - [Ventoy Secure Boot](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#ventoy-secure-boot) - [If the USB Drive Does Not Appear](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#if-the-usb-drive-does-not-appear) - [1. Verify that the USB is actually bootable](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#1-verify-that-the-usb-is-actually-bootable) - [2. Try another USB port](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#2-try-another-usb-port) - [3. Shut the system down fully](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#3-shut-the-system-down-fully) - [4. Disable Fast Boot only if it is interfering with detection](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#4-disable-fast-boot-only-if-it-is-interfering-with-detection) - [5. Use a wired keyboard during firmware startup](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#5-use-a-wired-keyboard-during-firmware-startup) - [6. Check the CPU architecture](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#6-check-the-cpu-architecture) - [7. Look for a UEFI-prefixed USB entry](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#7-look-for-a-uefi-prefixed-usb-entry) - [Windows: Boot From USB Without Racing a Function Key](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#windows-boot-from-usb-without-racing-a-function-key) - [BIOS Flashback and Firmware Recovery Are Not USB Boot](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#bios-flashback-and-firmware-recovery-are-not-usb-boot) - [Legacy and Obscure Hardware: Do Not Invent a Universal Key](https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/#legacy-and-obscure-hardware-do-not-invent-a-universal-key) # How to Boot From USB on Almost Any Computer > **Source policy:** Every boot key, boot-menu sequence, firmware entry method, and security-setting procedure in this guide is linked to a manufacturer, platform owner, standards body, or clearly identified community reference. Where a reliable cross-model source could not be found, this guide says so instead of guessing. > > **Last source verification:** October 3, 2026. Booting from USB is usually straightforward: connect properly prepared boot media, open the computer's **one-time boot menu**, and select the USB device. The important modern rule is this: **Do not disable Secure Boot or switch to Legacy/CSM mode just because you want to boot from USB.** Try the normal UEFI boot path first. Secure Boot is a UEFI trust mechanism, not a general USB-blocking feature. Microsoft documents Secure Boot as signature verification for trusted pre-OS software, and Ubuntu documents its Microsoft-signed `shim` / Canonical-signed GRUB path for Secure Boot-capable installs. Sources: - Microsoft Secure Boot: - Ubuntu UEFI Secure Boot: --- ## Before You Change Anything ### Prefer the one-time boot menu A one-time boot menu changes the boot device for the current startup without permanently rewriting the system boot order. Dell, Lenovo, Acer, Gigabyte, ASRock, HPE and other vendors explicitly document this behavior. ### BitLocker warning Changing Secure Boot state, boot configuration, or some firmware measurements can trigger BitLocker recovery because BitLocker can bind protection to TPM Platform Configuration Registers, including Secure Boot state. Before changing Secure Boot, TPM settings, or UEFI/Legacy mode on a Windows machine, make sure the BitLocker recovery key is available. Official Microsoft sources: - BitLocker preboot recovery screen: - BitLocker configuration and PCRs: ### General procedure 1. Shut the computer down completely. 2. Insert the bootable USB drive. 3. Power on the computer. 4. Immediately use the manufacturer's one-time boot-menu key or startup procedure listed below. 5. Select the USB device. 6. If both a UEFI and Legacy version of the same USB appear, use the **UEFI** entry unless the operating system or utility specifically requires Legacy BIOS boot. --- ## Quick Boot-Key Reference | Manufacturer / platform | One-time boot selection | Firmware setup | Source | | --- | --- | --- | --- | | Dell consumer/business PCs | `F12` | `F2` | Dell service manuals: [https://www.dell.com/support/manuals/en-us/inspiron-14-5410-laptop/inspiron-5410-service-manual/boot-sequence?guid=guid-c50bed7f-226b-4768-ab61-9725153df132&lang=en-us](https://www.dell.com/support/manuals/en-us/inspiron-14-5410-laptop/inspiron-5410-service-manual/boot-sequence?guid=guid-c50bed7f-226b-4768-ab61-9725153df132&lang=en-us) | | HP consumer/business PCs | `Esc`, then `F9` | `Esc`, then `F10` | HP: | | Lenovo ThinkPad | `F12` | `F1` | Lenovo: | | Lenovo IdeaPad / current consumer systems | `F12` | `F2` or `Fn+F2` | Lenovo: | | Acer notebooks | `F12` | `F2` | Acer: | | Acer desktops | `F12` | `Del` on many models | Acer: | | ASUS notebooks | hold/tap `Esc` during power-on | `F2` | ASUS: | | ASUS motherboards | `F8` from UEFI / boot menu | `Del` or `F2` | ASUS: | | Microsoft Surface | hold `Volume Down`, press Power | hold `Volume Up`, press Power | Microsoft: | | Framework Laptop | `F12` | `F2` | Framework community BIOS guide: | | System76 Open Firmware laptop | `Esc` → One Time Boot | `Esc` | System76: | | System76 proprietary-firmware laptop | `F7` | `F2` | System76: | | System76 Thelio | `F8`, `F11`, or `F12` depending on model | `Del` / `F2` | System76: | | System76 Meerkat | `F10` | `F2` | System76: | | MSI | `F11` | `Del` | MSI: | | Gigabyte motherboard/desktop | `F12` | `Del` | Gigabyte manual: | | ASRock motherboard | `F11` | `F2` | ASRock: | | Samsung PC | `F10` | model-dependent; commonly `F2` | Samsung USB boot procedure: | | Dynabook / later Toshiba | `F12` documented on supported models | model-dependent | Dynabook: | | Intel-era NUC | `F10` on supported NUC firmware | `F2` | Intel/ASUS NUC documentation: | | Intel Mac | hold `Option (⌥)` | Recovery / Startup Security as applicable | Apple: | | Apple silicon Mac | hold Power until Startup Options | Startup Options → Options | Apple: | | Dell PowerEdge | `F11` Boot Manager | `F2` | Dell: | | HPE ProLiant Gen10/Gen10+ | `F11` one-time boot menu | System Utilities / platform configuration | HPE: [https://support.hpe.com/hpesc/public/docDisplay?docId=a00112581en\_usen\_us&docLocale=en\_US&page=GUID-C4023994-3C36-434A-B288-8DD7132A2B50.html](https://support.hpe.com/hpesc/public/docDisplay?docId=a00112581en_usen_us&docLocale=en_US&page=GUID-C4023994-3C36-434A-B288-8DD7132A2B50.html) | | Lenovo ThinkSystem | `F12` boot menu | `F1` setup | Lenovo: | **Important:** Function keys are conventions, not immutable laws. A specific model manual outranks this table. --- # Major PC Manufacturers ## Dell ### Inspiron, Latitude, XPS, Vostro, OptiPlex and Precision **One-time boot menu:** Power on or restart and press `F12` when the Dell logo appears. Select the removable/USB device from the one-time boot menu. **Firmware setup:** Press `F2` during POST. Dell documents both operations in current service manuals. Official Dell source: [https://www.dell.com/support/manuals/en-us/inspiron-14-5410-laptop/inspiron-5410-service-manual/boot-sequence?guid=guid-c50bed7f-226b-4768-ab61-9725153df132&lang=en-us](https://www.dell.com/support/manuals/en-us/inspiron-14-5410-laptop/inspiron-5410-service-manual/boot-sequence?guid=guid-c50bed7f-226b-4768-ab61-9725153df132&lang=en-us) Another current Dell F12 example: [https://www.dell.com/support/manuals/en-us/latitude-14-9440-2-in-1-laptop/latitude\_9440\_2-in-1\_sm/f12-one-time-boot-menu?guid=guid-71da763a-3f2f-4021-8ef7-3e50da009c74&lang=en-us](https://www.dell.com/support/manuals/en-us/latitude-14-9440-2-in-1-laptop/latitude_9440_2-in-1_sm/f12-one-time-boot-menu?guid=guid-71da763a-3f2f-4021-8ef7-3e50da009c74&lang=en-us) ### Dell USB-C / Thunderbolt boot caveat Some older Dell systems require USB/Thunderbolt boot support or different Fastboot behavior before certain USB-C devices appear during preboot. This is **model-specific**, not a reason to enable Legacy mode on all Dell computers. Dell source and affected models: --- ## HP ### Pavilion, Envy, Spectre, OmniBook, EliteBook, ProBook and ZBook HP's documented startup sequence on supported PCs is: 1. Power on the computer and repeatedly press `Esc` until the Startup Menu appears. 2. Press `F9` for **Boot Device Options**. 3. Select the USB device and press Enter. 4. Use `F10` from the Startup Menu to enter BIOS Setup when firmware configuration is actually required. Official HP source: HP also documents `Esc` → `F10` for BIOS Setup on consumer notebooks: ### Legacy Support on HP HP documents Legacy Support on some older systems, but it should only be used for boot media that actually requires legacy BIOS operation. It is not a normal prerequisite for USB boot. Source: --- ## Lenovo ### ThinkPad **Temporary boot device:** Press `F12` at the Lenovo logo, select the desired device, and press Enter. **UEFI/BIOS setup:** Press `F1` at the Lenovo logo. Official Lenovo ThinkPad documentation: ### IdeaPad and current Lenovo consumer systems Current Lenovo documentation for IdeaPad Slim systems specifies: - `F12` — open the boot-device menu. - `F2` — open UEFI/BIOS setup. - If Hotkey Mode is enabled, `Fn+F2` may be needed for firmware setup. Official Lenovo source, updated September 2026: Lenovo also documents `F12` / `Fn+F12` for temporary startup-device selection on many earlier IdeaPad generations: ### Novo button Some IdeaPad-family systems include a recessed **Novo button**. Lenovo documents the Novo button as a way to reach BIOS setup and the boot menu while the system is off. Official Lenovo USB-boot article: Novo button reference: --- ## Acer ### Aspire, Swift, Nitro, Predator and TravelMate Acer documents: - `F12` — one-time Boot Menu. - `F2` — BIOS on notebooks. - `Del` — BIOS on many Acer desktops. Official Acer source: ### If F12 does nothing Acer notes that the F12 Boot Menu feature must be enabled on some systems before the key works. Same official source: ### Secure Boot is grayed out Some Acer systems require a Supervisor Password before the Secure Boot control can be edited. Acer's own knowledge base explicitly documents this behavior and warns users to retain the password. Notebook source: Desktop source: --- ## ASUS ### VivoBook, ZenBook, ExpertBook, TUF, ROG and other ASUS notebooks ASUS's current USB boot procedure says to start from a fully powered-off state, hold `Esc`, press Power, and release `Esc` when the Boot Menu appears. Select the USB device and press Enter. Official ASUS USB boot guide: ASUS documents `F2` during power-on for BIOS setup on notebooks: ### ASUS motherboards and desktops ASUS motherboard documentation shows: - `Del` or `F2` — enter BIOS Setup. - `F8` — Boot Menu from the UEFI interface on supported boards. Official ASUS sources: ### “Other OS” Secure Boot setting Do not change ASUS **OS Type** to `Other OS` simply because you are using USB media. ASUS documents this setting as a troubleshooting/configuration change for certain non-Windows operating systems. ASUS source: --- ## Microsoft Surface ### Boot directly from USB Microsoft's documented procedure is: 1. Shut Surface down. 2. Insert the bootable USB device. 3. Hold **Volume Down**. 4. While holding Volume Down, press and release **Power**. 5. Continue holding Volume Down until startup proceeds. ### Enter Surface UEFI 1. Shut Surface down. 2. Hold **Volume Up**. 3. Press and release **Power**. 4. Continue holding Volume Up until Surface UEFI opens. Official Microsoft source for both procedures: Microsoft also documents a Windows path on supported Surface devices: **Settings → System → Recovery → Advanced startup → Restart now → Use a device → USB Storage** Same source: --- ## Framework Framework's community BIOS guide documents: - `F2` — BIOS Setup. - `F12` — one-time boot override. - `Fn+Esc` — toggles Fn Lock; with Fn Lock enabled, use `Fn+F2` / `Fn+F12` as appropriate. Helpful Framework community reference: **Source-quality note:** This is a Framework Community guide rather than a current Framework Knowledge Base article, so it should be labeled as community/helpful documentation rather than manufacturer KB documentation. --- ## System76 System76 publishes an unusually useful model/firmware table. ### Open Firmware laptops **Boot menu:** `Esc`, then choose **One Time Boot** or use Boot Override. **Firmware interface:** `Esc`. ### Proprietary-firmware laptops **Boot menu:** `F7`. **BIOS:** `F2`. ### Thelio **Boot menu:** `F8`, `F11`, or `F12`, depending on motherboard/model. **Firmware:** `Del` or `F2`. ### Meerkat **Boot menu:** `F10`. **Firmware:** `F2`. Official System76 boot-menu table: ### Pop!\_OS Secure Boot exception System76 currently states that **Secure Boot must be disabled before installing Pop!\_OS**. This is an operating-system-specific requirement, not a universal rule for USB booting. Official System76 installation documentation: --- ## MSI MSI documents the following for USB OS installation/troubleshooting: - Repeatedly tap `F11` during startup to open boot-device selection. - Repeatedly tap `Delete` to open BIOS. - MSI's current guidance defaults USB boot to UEFI mode. Official MSI source: MSI also documents selecting `UEFI: USB Flash Drive` from the `F11` menu during Windows installation: --- ## Gigabyte and AORUS Current Gigabyte motherboard/desktop manuals document: - `Del` — BIOS Setup / Q-Flash. - `F12` — one-time Boot Menu. - Selecting a device from the F12 menu applies only to that startup; it does not permanently rewrite the normal boot order. Official Gigabyte manual: Another Gigabyte motherboard manual with the same keys: --- ## ASRock ASRock's own FAQ documents: - `F2` — BIOS setup. - `F11` — Boot Menu. Official source: ASRock also documents selecting USB from its boot menu: Some very old ASRock boards also accepted `F8`; use the current model manual rather than assuming `F8` applies to modern boards. --- ## Samsung PCs Samsung's current PC support article says: 1. Connect properly configured boot media. 2. Power the PC on. 3. Immediately and repeatedly press `F10` until the boot menu appears. 4. Select the desired boot device. Official Samsung source: Because Samsung's support article is specifically authoritative for the **boot menu**, this guide does not claim a universal BIOS-setup key for every Samsung PC generation. Check the exact model manual when firmware setup is needed. --- ## Dynabook and Toshiba Dynabook documents `F12` for the startup Boot Menu on supported Windows-era systems: Older Toshiba hardware spans many BIOS generations and should be treated as model-specific. If the machine does not respond to F12, use the exact model's Dynabook/Toshiba manual rather than cycling through guessed keys. --- ## Sony VAIO VAIO behavior differs substantially by generation. ### VAIO Care Rescue-era systems Sony documents a VAIO Care Rescue screen where: - `F11` — **Start from media (USB device/optical disc)**. - `F12` — start from network. - `F2` — start BIOS. Official Sony source: Sony also documents using the **ASSIST** button while powered off on some Windows 8-era systems, then selecting `Start from media (USB device/optical disc) [F11]`: ### Older BIOS-controlled VAIO systems Sony documents `F2` at the VAIO logo to enter BIOS and enabling **External Device Boot** where required: Because these procedures are generation-specific, there should be no article-wide statement that “all VAIOs use F11/F12.” --- ## Intel NUC and ASUS NUC Intel's traditional NUC firmware and ASUS's inherited NUC documentation both use `F2` for BIOS Setup on supported models. Intel source: ASUS NUC source: On supported NUC firmware, `F10` opens the Boot Menu. ASUS's NUC UEFI Shell guide documents `F10` during startup for Boot Menu access: ### NUC USB not appearing Intel documents disabling Fast Boot and ensuring USB is enabled in firmware when a NUC Laptop Kit does not show the USB flash drive: --- # Apple Macs ## Intel-based Mac Apple documents: **Hold `Option (⌥)` or Alt during startup** to open Startup Manager and choose another available startup disk or volume. Official Apple source: ## Intel Mac with Apple T2 Security Chip T2 Macs have a separate **Allowed Boot Media** policy. If external boot is blocked, use macOS Recovery and **Startup Security Utility** to permit external/removable media. Apple security documentation: Apple external-startup-disk support article: Do not automatically set T2 Secure Boot to **No Security**. Apple documents media boot policy and Secure Boot policy as separate controls. ## Apple silicon: M1, M2, M3, M4, M5 and later Apple documents this startup method: 1. Turn on the Mac and continue holding the **Power** button. 2. Release it when **Startup Options** appears. 3. Select another startup disk or choose **Options** for recovery tools. Official Apple source: Apple silicon does not use the same external-media policy as Intel T2 Macs. Apple's security documentation explicitly notes that the T2 media-boot policy is not required on Apple silicon. Source: --- # Chromebooks Chromebooks are not conventional PC UEFI systems and should not be reduced to a generic “press F12” instruction. ## Developer Mode / external boot Chromium's developer documentation states: 1. Enter Recovery Mode. 2. Use `Ctrl+D`, then confirm, to enter Developer Mode on supported hardware. 3. Once Developer Mode is enabled, `Ctrl+U` can boot from external USB/SD media **only after** `crossystem dev_boot_usb=1` has been set. Official Chromium documentation: Chromium warns that Developer Mode disables security features. Device behavior also varies by Chromebook generation and firmware. Managed school/business devices may prohibit these changes through administrative policy. --- # Raspberry Pi Raspberry Pi systems do not use PC-style BIOS hotkeys. ## Raspberry Pi 4 and later Raspberry Pi documents boot-order configuration through `raspi-config`: ``` sudo raspi-config ``` Then: **Advanced Options → Boot Order** Official Raspberry Pi documentation: The same documentation explains that Raspberry Pi 4 and later use configurable boot order and can attempt USB/network boot depending on the EEPROM configuration. ## Raspberry Pi 3 family Do not group all Pi 3 models together. USB boot capabilities differ by exact model and boot configuration. Consult the current Raspberry Pi bootloader/USB documentation before setting OTP values. Official documentation: ## Raspberry Pi Secure Boot It is no longer accurate to say “Raspberry Pi has no Secure Boot.” Raspberry Pi now documents a secure-boot architecture using a hardware root of trust and OTP-stored public-key hashes on supported platforms. Official Raspberry Pi security architecture: Secure Boot Provisioner: --- # PINE64 / Pinebook Pro PINE64 devices are not one generic PC platform. Boot behavior depends on the SoC, installed bootloader, SPI contents and device model. ## Pinebook Pro PINE64 documents the RK3399 hardware boot sequence as: **SPI NOR → eMMC → SD → USB OTG** but the bootloader installed on the device can create a different user-visible boot order. PINE64 bootable-storage documentation: RK3399 boot-sequence documentation: PINE64 also documents that not every physical USB connector on the Pinebook Pro has the same boot capabilities. Therefore a blanket instruction such as “insert any USB and it boots automatically” is not reliable. --- # Servers and Workstations ## Dell PowerEdge Dell documents: - `F2` — System Setup. - `F10` — Lifecycle Controller on supported systems. - `F11` — Boot Manager. - `F12` — PXE Boot. Official Dell PowerEdge source: Dell's PowerEdge BIOS/UEFI manuals further document `F11` → Boot Manager → **One-shot Boot Menu** for a temporary boot device: [https://www.dell.com/support/manuals/en-us/poweredge-xr11/pexr11\_bios\_ism\_pub/boot-manager?guid=guid-772cb380-431b-48e0-ac2b-bd5e662049bf&lang=en-us](https://www.dell.com/support/manuals/en-us/poweredge-xr11/pexr11_bios_ism_pub/boot-manager?guid=guid-772cb380-431b-48e0-ac2b-bd5e662049bf&lang=en-us) ## HPE ProLiant Gen10 / Gen10 Plus HPE documents an **F11 One-Time Boot Menu** prompt on supported ProLiant/Synergy systems. Official HPE source: [https://support.hpe.com/hpesc/public/docDisplay?docId=a00112581en\_usen\_us&docLocale=en\_US&page=GUID-C4023994-3C36-434A-B288-8DD7132A2B50.html](https://support.hpe.com/hpesc/public/docDisplay?docId=a00112581en_usen_us&docLocale=en_US&page=GUID-C4023994-3C36-434A-B288-8DD7132A2B50.html) Older/newer ProLiant generations can differ, so use the generation's UEFI System Utilities guide rather than assuming all ProLiant systems share the same startup screen. ## Lenovo ThinkSystem Lenovo's ThinkSystem UEFI documentation shows: - `F1` — Enter Setup. - `F12` — Boot Menu. - `F10` — Network Boot. Official Lenovo ThinkSystem source: --- # Secure Boot: What It Actually Does Secure Boot verifies signatures on pre-operating-system software. It does not mean “USB drives are disabled.” Microsoft Secure Boot documentation: Microsoft Trusted Boot overview: ## Linux and Secure Boot Ubuntu documents Microsoft-signed `shim` binaries and Canonical-signed GRUB/kernel components for Secure Boot-capable systems: Pop!\_OS is an example of a distribution whose current installation instructions specifically require Secure Boot to be disabled: Therefore the correct rule is: 1. Try the USB with Secure Boot enabled. 2. Check the operating system/tool's own documentation. 3. Disable Secure Boot only when that media actually requires it. 4. Restore the original security configuration afterward when appropriate. --- # UEFI vs Legacy BIOS / CSM Modern operating systems should normally boot in UEFI mode. Legacy BIOS compatibility may be labeled: - Legacy Boot - CSM - Compatibility Support Module - Legacy Option ROMs Do not enable CSM merely because a USB drive is not showing up. Some current hardware has removed Legacy BIOS support entirely. Intel NUC documentation, for example, explicitly notes that Legacy mode is available only where supported: Changing the firmware boot mode can also make the currently installed operating system temporarily unbootable if that OS was installed for the other mode. --- # USB Filesystem Compatibility The previous simplistic rule “FAT32 = Secure Boot; NTFS = no UEFI” is incorrect. The UEFI specification requires firmware support for the EFI FAT filesystem family. UEFI 2.10 states that EFI firmware must support FAT12, FAT16 and FAT32 variants of the EFI filesystem. UEFI specification: UEFI 2.10 PDF: ## Practical table | Format / image layout | Practical guidance | | --- | --- | | FAT32 | Safest general filesystem when relying on standard UEFI removable-media filesystem support | | FAT16 / FAT12 | Also part of the UEFI EFI-filesystem requirement; mostly relevant to smaller/older media | | NTFS | Not required by the UEFI specification; some firmware supports it and some boot tools load their own NTFS driver | | exFAT | Not required as a generic UEFI boot filesystem; do not assume firmware can boot it | | Hybrid ISO image | Common for Linux installation media intended to be written directly to the whole USB device | **Secure Boot is separate from filesystem format.** A FAT32 device is not automatically trusted by Secure Boot, and Secure Boot is not simply “FAT32 required.” --- # Ventoy Ventoy allows multiple ISO/WIM/IMG and other supported images to coexist on a reusable boot drive. Official project: ## Ventoy Secure Boot Ventoy's own Secure Boot documentation says Secure Boot support is available but not perfect on every machine. It may require key enrollment, and some systems require **Allow Microsoft 3rd Party UEFI CA**. Ventoy Secure Boot documentation: Ventoy also notes that version 1.1.14 introduced a new UEFI Secure Boot CA and that the new key must be enrolled on first boot on affected configurations. Ventoy release notes: Do not describe Ventoy Secure Boot as “works universally.” Ventoy itself does not make that claim. --- # If the USB Drive Does Not Appear ## 1. Verify that the USB is actually bootable Copying an ISO file onto an ordinary USB filesystem does not normally make the device bootable unless the boot tool specifically uses that design, such as Ventoy. Use the operating-system publisher's recommended image-writing method. ## 2. Try another USB port This is explicitly included in MSI's USB-detection troubleshooting procedure: Avoid hubs and docks during troubleshooting when possible. ## 3. Shut the system down fully Several vendors instruct users to begin their boot-menu procedure from a full shutdown, including ASUS and Surface. ASUS: Microsoft Surface: ## 4. Disable Fast Boot only if it is interfering with detection Do not confuse Windows Fast Startup with firmware Fast Boot; both can affect troubleshooting in different ways. ASUS documents disabling firmware Fast Boot here: Intel documents a NUC case where disabling Fast Boot restores USB boot-device visibility: ## 5. Use a wired keyboard during firmware startup Firmware may not initialize Bluetooth keyboards early enough. Intel/ASUS NUC documentation explicitly warns that a Bluetooth keyboard cannot be used to access BIOS in the cited troubleshooting path: ## 6. Check the CPU architecture Boot media must contain software for the machine's architecture. An x86-64 installer is not automatically bootable on ARM64 hardware such as Apple silicon, Raspberry Pi, or many Snapdragon PCs. For Macs, Apple's startup documentation distinguishes Intel from Apple silicon and gives different startup procedures: ## 7. Look for a UEFI-prefixed USB entry Some firmware exposes both UEFI and legacy paths for the same physical device. Prefer the UEFI path for current operating systems unless the software documentation says otherwise. ASRock explicitly shows choosing a `UEFI:` installation-media entry in current Windows installation guidance: MSI likewise documents selecting `UEFI: USB Flash Drive`: --- # Windows: Boot From USB Without Racing a Function Key On supported systems Windows Recovery / Advanced Startup can provide a firmware or device-selection path. Microsoft's Surface documentation gives a concrete example: **Settings → System → Recovery → Advanced startup → Restart now → Use a device → USB Storage** Source: Windows also provides **UEFI Firmware Settings** through Windows Recovery Environment on supported UEFI PCs. Because the exact menu availability depends on the hardware and installation, this guide does not promise the option exists on every PC. Microsoft recovery overview: --- # BIOS Flashback and Firmware Recovery Are Not USB Boot Motherboard firmware-recovery features often use a USB drive but are not the same operation as booting an operating system from USB. Treat them as separate procedures and follow the exact motherboard manual. Never substitute a generic filename or pin-short procedure for model-specific instructions. This distinction matters because a normal USB boot goes through the machine's firmware boot manager; BIOS Flashback may run from a dedicated embedded controller with no operating system involved. --- # Legacy and Obscure Hardware: Do Not Invent a Universal Key The following brands span too many unrelated generations or ownership/manufacturing arrangements to justify a single cross-model key without model-specific documentation: - Gateway - Packard Bell - eMachines - very old Toshiba systems - early IBM/Lenovo desktops and notebooks - miscellaneous white-box PCs - rebadged retail laptops For these systems, identify the **exact model number**, then use: 1. the original manual if still available; 2. the manufacturer's archived support page; 3. an archived manual from a reputable manual repository when the manufacturer documentation is gone; 4. the key prompt displayed during POST. A model-specific source is better than a confident but invented universal shortcut. - Categories: [guides](https://switchboardtechservices.com/guides/categories/guides/), [field manual](https://switchboardtechservices.com/guides/categories/field-manual/), [Linux Conversions](https://switchboardtechservices.com/guides/categories/linux-conversions/) - Tags: [#usb boot](https://switchboardtechservices.com/guides/tags/usb-boot/), [#bios](https://switchboardtechservices.com/guides/tags/bios/), [#secure boot](https://switchboardtechservices.com/guides/tags/secure-boot/), [#firmware](https://switchboardtechservices.com/guides/tags/firmware/), [#repair](https://switchboardtechservices.com/guides/tags/repair/) [Guides RSS](https://switchboardtechservices.com/feeds/guides.xml "Subscribe using an RSS reader") --- Canonical URL: https://switchboardtechservices.com/guides/boot-from-usb-every-major-system/ Language: en-us Content type: guide Published: 2025-10-22T05:00:00+00:00 Description: Field-ready Hugo markdown reference for booting from USB and unlocking firmware protections across every major computer system.