Windows 11 doesn't boot after enabling Secure Boot.

Question

Hello,

I upgraded from Windows 10 to Windows 11, everything was fine until I went to open valorant and realized that secure boot was disabled. So I went into my bios (Asus PRIME-B550M-A) , Boot>OS type and switched it from "other os" to "Windows UEFI mode".

I saved and restarted my PC. Windows 11 started automatic startup repair and I couldn't boot into windows. It created a log file C:\Windows\System32\LogFiles\Srt\SrtTrail.txt . So after this, I decided to go into the bios and go to key management and delete the PK. After doing this I was able to boot into windows normally with secure boot disabled. If I restore the PK it doesn't boot. I saw some solutions saying to convert windows from MBR to GPT, but my windows is already GPT. CSM mode is disabled

The contents of the log file:

Startup Repair diagnosis and repair log

---

Number of repair attempts: 1

Session details

---

System Disk = \Device\Harddisk0

Windows directory = C:\WINDOWS

AutoChk Run = 0

Number of root causes = 1

Test Performed:

---

Name: Check for updates

Result: Completed successfully. Error code = 0x0

Time taken = 0 ms

Test Performed:

---

Name: System disk test

Result: Completed successfully. Error code = 0x0

Time taken = 16 ms

Test Performed:

---

Name: Disk failure diagnosis

Result: Completed successfully. Error code = 0x0

Time taken = 0 ms

Test Performed:

---

Name: Disk metadata test

Result: Completed successfully. Error code = 0x0

Time taken = 531 ms

Test Performed:

---

Name: Disk metadata test

Result: Completed successfully. Error code = 0x0

Time taken = 15 ms

Test Performed:

---

Name: Target OS test

Result: Completed successfully. Error code = 0x0

Time taken = 0 ms

Test Performed:

---

Name: Volume content check

Result: Completed successfully. Error code = 0x0

Time taken = 47 ms

Test Performed:

---

Name: Boot manager diagnosis

Result: Completed successfully. Error code = 0x0

Time taken = 0 ms

Test Performed:

---

Name: System boot log diagnosis

Result: Completed successfully. Error code = 0x0

Time taken = 0 ms

Root cause found:

---

Boot critical file c:\efi\microsoft\boot\cipolicies\active{cdd5cb55-db68-4d71-aa38-3df2b6473a52}.cip is corrupt.

Repair action: File repair

Result: Failed. Error code = 0x57

Time taken = 1453 ms

---

---

Answer 1

Hi Daniel

In your BIOS, is the Secure Boot option not on the Security tab and separate to that 'Other OS' setting?

Answer 2

The BIOS is updated to the latest version. If I change to "Other OS" it boots normally with secure boot disabled.

Answer 3

Hi Daniel,

Thank you for that information, it is very strange how Secure Boot is now disabled.

Can you enable Secure Boot without changing that setting from Other OS to Windows Boot manager?

Have you checked if there is a BIOS update available that may not already be installed, on the support page for your PC on the manufacturers website

Answer 4

Thank you for your reply.

I upgraded using the windows 11 upgrade assistant, I think secure boot was enabled when I was on W10.

Answer 5

Hi Daniel,

I am Dave, I will help you with this.

1

What method did you use to upgrade to Windows 11, that should not have been possible if Secure Boot was disabled.

2

I need more information about your system,

Click your Start Button, then just type msinfo and press Enter

Please provide a screenshot of the resulting System Information window.

3

Download the tiny utility from the link below, then run that utility and please provide a screenshot of the result of tunning that scan

https://github.com/rcmaehl/WhyNotWin11/releases...

________________________________________________________

Standard Disclaimer: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

.