Whenever I enable Secure Boot in the firmware settings, the computer refuses to boot. It worked normally about two months ago, but after not using the PC for a while, the problem began. Windows and the drivers are up to date, and the system drive uses GPT. I would prefer to troubleshoot the cause rather than perform a clean Windows installation. What should I check?
1 Answer
This may be related to outdated Secure Boot keys or certificates rather than the Windows installation itself. Temporarily disable Secure Boot so the system starts, install any available motherboard firmware updates, and check the manufacturer’s instructions for refreshing the Secure Boot keys or Windows boot certificates. Some older certificates began expiring recently, which can cause previously working systems to stop booting with Secure Boot enabled.
The certificate issue refers to the signing certificates used to verify Windows boot components. They are separate from normal device drivers, so updating drivers alone may not fix it.