I'm running into a Secure Boot Violation error whenever I try to boot my PC with Secure Boot enabled in UEFI mode. The only way I can access my computer is through the BIOS. Disabling Secure Boot lets my PC run fine, but I really need it enabled for the games I play. Here's what I've already tried:
1. Converted MBR to GPT
2. Verified if all components are signed
3. Reinstalled Windows
4. Hard reset my motherboard by removing the battery
5. Updated my BIOS
6. Reset Secure Boot keys in BIOS
Each time I boot with Secure Boot on, I get a red screen saying: "SECURE BOOT VIOLATION: The system found unauthorized changes on the firmware, OS, or UEFI drivers." I'm at a loss here and could really use some help!
3 Answers
Here’s a step-by-step guide that might help:
- Start by booting your PC with Secure Boot disabled.
- Temporarily disable BitLocker on your C: drive. You can do this by opening an elevated PowerShell and running: `suspend-Bitlocker C:`.
- Make sure your PC is actually booting in UEFI mode. To check this, run `env:firmware_type` in an elevated terminal. If it says Legacy, you'll need to convert your system.
- After verifying UEFI, update your firmware by downloading the latest from the ASUS website.
- Once updated, reboot your system and clear all Secure Boot keys in BIOS, then restore the factory default keys.
- Finally, reboot again, enable Secure Boot, and check if everything runs smoothly. If it does, re-enable BitLocker from the control panel! Good luck!
Also, just a heads up, ensure that any drivers or OS installations are indeed signed correctly! Non-signed drivers can trigger that violation error all the time.
First off, what motherboard are you using? Knowing that can help figure out the issue better!
I'm using the ASUS Z490 Plus WiFi.