Secure Boot Violation - Invalied Signature Detected. Check Secure Boot Policy in Setup

[RobertFenton70]

Hi all, 

I am having trouble getting my PC to boot up.

No matter what I try, I keep getting this error message: 
"Secure Boot Violation - Invalied Signature Detected. Check Secure Boot Policy in Setup"

I also get: "Boot Device Not Found. Hard Disk - (3F0)"

Please help! 

Robert

[Pallipurath]

Hi @RobertFenton70 

Welcome to the HP Support Community.

Thank you for posting your query.

A Secure Boot Violation means the laptop's security protocol blocked the operating system from loading, because it could not verify the digital signature of the boot files. The signature might be missing, corrupted, or unrecognized by the BIOS To restore Secure Boot functionality,I would request you to please follow the steps:

Step 1: Access BIOS Setup

• Power on the computer and immediately press F10 repeatedly until the BIOS Setup screen opens.
• Navigate to Security > Secure Boot Configuration.

Step 2: Restore Factory Keys

• In the Secure Boot Configuration menu, select Restore Factory Keys.
• Save changes and exit BIOS.
• Restart the computer to check if the error clears.

Step 3: Verify Boot Mode and Boot Manager

• Ensure UEFI Boot Mode is enabled and Legacy Support is disabled.
• Confirm that Windows Boot Manager is listed first in the boot order.

Step 4: Update BIOS

• Download and install the latest BIOS update for your product from HP’s official support page:
  HP PCs – Updating the BIOS (Basic Input Output System)
• After updating, re‑enter BIOS and confirm Secure Boot is enabled.

Step 5: Perform BIOS Recovery if Needed

• If the issue persists, create a BIOS recovery USB using HP’s official tool:
  HP PCs – Recovering the BIOS
• Use this recovery drive to restore the BIOS to a working state.

Step 6: Apply Microsoft Secure Boot Update

• Ensure Windows Update is fully applied, including the Secure Boot UEFI CA 2023 update.
• Restart the system after updates and re‑enable Secure Boot in BIOS.

By following these steps, Secure Boot can be restored while keeping the system protected. Disabling Secure Boot allows normal operation, but restoring factory keys and updating BIOS usually resolves the violation error while maintaining security.

For 3F0 Error I would request you to please follow the link https://support.hp.com/us-en/document/ish_3053911-2842957-16 

Take care and have an amazing day!

[RobertFenton70]

Hi @Pallipurath, 

Thank you for your suggestions. I have managed to get through steps 1-3, but none resolved the issue. For steps 4-6 I am stuck as don't know how to do these. Could you send me step by step (idiot-proof) instructions please? 

I had already tried to follow the steps and solutions for the 3F0 Error in the link you gave, but it just kept sending me round and round in circles and never found a solution unfortunately. 

[Pallipurath]

Hi @RobertFenton70 

Thank you for responding.

I understand that the issue is still not resolved, and I’m sorry to hear that you experienced difficulties while performing the troubleshooting steps.

To help us continue diagnosing the issue, I kindly request that you follow the steps provided below. Additionally, please confirm whether you are still seeing the 3F0 error displayed on the screen.

For 3F0 Error I would request you to please follow the link https://support.hp.com/us-en/document/ish_3053911-2842957-16 

Recover the BIOS

• Turn off the affected HP laptop.  https://support.hp.com/us-en/document/ish_3932413-2337994-16 Follow the link for detailed steps.
• Connect the AC adapter.
• Insert the BIOS recovery USB drive.
• Press and hold the Windows + B keys.
• While holding the keys, press and hold the Power button for about 2–3 seconds, then release the Power button while continuing to hold Windows + B.
• Release the keys when the HP BIOS Update or BIOS Recovery screen appears.
• Follow the on-screen instructions to complete the BIOS recovery.
• The system will restart automatically once the recovery is finished.
• Enter the BIOS (press Esc, then F10) and verify that Secure Boot is enable.

The recovery key combination may be Windows + V instead of Windows + B.

Install the Microsoft Secure Boot Update

• Connect the computer to the internet.
• Open Settings > Windows Update.
• Click Check for updates.
• Download and install all available:
• Security updates
• Cumulative updates
• Firmware updates
• Optional updates related to system firmware (if available)
• Restart the computer whenever prompted.
• Repeat Check for updates until no further updates are available.
• After all updates are installed, restart the computer once more.
• Restart the system and keep pressing Esc, then F10 to enter the BIOS.
• Verify that:
• Secure Boot is Enabled.
• Legacy Support (if present) is Disabled.
• Press F10 to save the settings and restart the computer. https://support.hp.com/us-en/document/ish_13070353-13070429-16 

I hope this helps.

Have a good day.

[RobertFenton70]

Where am I supposed to find the BIOS recovery USB drive??

[Pallipurath]

Hi @RobertFenton70 

Thank you for responding.

I understand that you would like to know how to perform BIOS Recovery Via USB drive. I would request you to please follow the steps:

Identify Your Laptop Model: 

• Make sure you have the exact model number of your HP Pavilion 15. This can usually be found on the bottom of the laptop or in the original documentation.

Visit HP's Support Website: 

• Go to the HP Support website.

Search for Your Laptop Model: 

• Enter your laptop's model number in the search bar and select it from the results.

Navigate to BIOS Downloads: 

• Look for the "Drivers & Downloads" section, and then go to the "BIOS" tab.

Download the BIOS File: 

• Find the latest BIOS update for your model and download the BIOS recovery file. It will typically be in a ZIP format.

Prepare the USB Drive:

• Use a USB drive with at least 1GB of space.
• Format the USB drive to FAT32 file system.
• Extract the downloaded BIOS file to the root directory of the USB drive.

Create the BIOS Recovery USB:

• The extracted files should include a .bin or .fd file, which is the BIOS image.

Perform the Recovery:

• Insert the USB drive into your laptop.
• Power off the laptop.
• Press and hold the Windows key and the B key simultaneously, and then press the Power button.
• Continue holding the Windowand B keys until you see a BIOS recovery screen or hear beeps.

youtube.com/watch?v=zjAZ0DTX3aI&t=2 Follow the link for guidance.

I hope this helps.

Have a good day.