Activating safe boot gives invalid signature detected, check secure boot policy in setup.

Hi,

In this case, you'll do the following: go to the Exit tab, select Load Default Settings to reset the BIOS settings and save. Access the BIOS again, go to > Disable CSM > then save again and try to access Windows.

After accessing Windows, enable Secure Boot and see if it starts in Secure Boot State System.

Thanks

I tired doing that but it still gave me the same error

Hi,

In the secure boot tab, check if the state has changed and take a screenshot after resetting the BIOS.

Thanks

Hi,

Now you're going to Key Management.

Thanks

Hi,

Now you will select "clear secure boot keys" > it will say yes and start Windows. After Windows starts, go back to the BIOS and check the "secure boot" state. If it says "loaded," it worked. If not, you will change the OS type to Windows UEFI boot > save the boot, start Windows, then go back to the BIOS and take a screenshot of the "secure boot" tab.

Thanks

Hi,

Now go to Key Manager > Clear Keys > Save, access Windows, go back to the BIOS, if it says "Unloaded" > Key Manager, select Clear, then Save All Keys.

Save the BIOS, start Windows and see if it changes the status to "Loaded".

Thanks

When I clear the keys I can’t save the keys

Hi,

Sorry, try installing Default Secure Boot keys, save it, and let Windows start to see if it works.

Thanks

When I try to save it gives me this, which one do I choose?

Hi,

Now I understand, it must be due to expired keys; we need to update the BIOS.

https://www.asus.com/support/faq/1055903/

First, you will cancel and access Windows and disable BitLocker initially.

I should remind you that updating the BIOS is recommended, but it has its risks. If you interrupt the process during the update, your motherboard may stop working, so follow the process correctly.

The most recent BIOS can be found here: https://www.asus.com/motherboards-components/motherboards/tuf-gaming/tuf-gaming-b550m-plus-wi-fi/helpdesk_bios?model2Name=TUF-GAMING-B550M-PLUS-WI-FI

The procedure and Step 2: https://www.asus.com/br/support/faq/1008859/

UEFI Boot Mode

These are the links provided by your motherboard manufacturer, Asus.

Thanks

Do you know where I can find the BitLocker key if my pc wasn't a premade pc? The example shows that the key is available in the Microsoft site, but it only shows one recovery key that isn't my device name.

Hi

I apologize, here's the procedure to disable BitLocker: https://www.asus.com/support/faq/1047461/

If you have a Microsoft account configured but Secure Boot is disabled, BitLocker may not have worked, but as a precaution:

https://support.microsoft.com/en-us/windows/localizar-sua-chave-de-recupera%C3%A7%C3%A3o-do-bitlocker-6b71ad27-0b89-ea08-f143-056f5ab347d6

Thanks

Sorry about the wait, but I have a quick question, I can't find "Device encryption" or "manage bitlocker" in settings or on my pc. So will it be fine if I don't have my bitlocker device key?

Hi,

Check if your C drive is locked. If not, you can proceed with the procedure.

If it is locked, you need to disable it via BitLocker. Try disabling it via the command prompt (admin):

Start menu > Command Prompt and select "Run as Administrator."

In the command prompt, type manage-bde -off C: and press Enter.

Thanks

I updated the bios but when I tried booting up safe boot it still gave me the error

Hi,

After updating the BIOS, you will access the BIOS > clear the keys and then install the default keys.

Check if it reloads the keys; Windows UEFI mode must be configured.

After starting Windows, go back to the BIOS and check if Secure Boot (PK) is set to Loaded.

Thanks

Yeah this was NOT helpful AT ALL. Not only was this a broad answer, it was pitiful. You have no solution and only gave another step with added confusion. This helped NO ONE. Reply with something ACTUALLY worth reading