secure boot

von lol 0 Reputation points
2026-09-30T20:08:29.5933333+00:00

secure boot if i enable it i get a secure boot violation.. just got this pc and it crazy how i gotta do all this

Windows for home | Windows 11 | Performance and system failures
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Manoel Barros 23,460 Reputation points Independent Advisor
    2026-10-01T00:06:38.2133333+00:00

    Hi!

    Since the issue occurs when enabling Secure Boot, the motherboard's Secure Boot certificates or keys might be outdated or have been reset. The Boot Mode could also be the cause.

    To better understand your situation, please answer the questions below:

    1. What is the manufacturer and model of your computer's motherboard? Disable Secure Boot and send the System Summary from msinfo:
    • Press WINDOWS + R > Type "msinfo32" > Send me a screenshot of the System Summary.
    1. Did Windows come pre-installed on the computer, or did you install it yourself?
    2. If you installed it yourself, how did you perform the installation? Did you install it using GPT or MBR?
    3. Did you perform any other actions in the BIOS besides enabling Secure Boot, such as resetting or updating the BIOS?

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-09-30T20:08:43.3133333+00:00

    A Secure Boot violation when Secure Boot is turned on usually means the firmware no longer trusts the installed Windows boot manager, or the Secure Boot keys/certificates are not in the expected state.

    Try this path:

    1. Turn Secure Boot back off temporarily so Windows can start again.
      In most PCs, this is done in the BIOS/UEFI menu under Security, Boot, or Authentication.
    2. If Windows starts normally with Secure Boot off, use the Secure Boot recovery utility.
      This is the documented recovery method when enabling Secure Boot causes boot failure because the required certificate is missing.
    3. Create the recovery USB on a working Windows PC that has the July 2024 or newer Windows update installed:
      • Copy SecureBootRecovery.efi from C:\Windows\Boot\EFI\
      • Format a USB drive as FAT32
      • Create \EFI\BOOT\ on the USB
      • Put SecureBootRecovery.efi in that folder and rename it to bootx64.efi
    4. Boot the affected PC from that USB drive and let the recovery utility run.
      It adds the Windows UEFI CA 2023 certificate back to the firmware database.
    5. Restart and try enabling Secure Boot again.
      After the certificate is restored, Windows should start normally.
    6. Update the BIOS/UEFI firmware from the PC or motherboard manufacturer after recovery.
      This helps prevent the issue from happening again.
    7. Do not reset Secure Boot to firmware defaults again unless the manufacturer firmware already includes updated Secure Boot defaults that trust the 2023 certificates.

    Important:

    • Software cannot directly change Secure Boot settings; this must be done in UEFI/BIOS.
    • If Secure Boot is disabled only to fix the boot problem, it should be re-enabled after recovery.
    • If this is a Surface device, Secure Boot can be turned back on in UEFI > Security > Secure Boot > Change Configuration, then choose a keyset such as Microsoft only.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.