Secure Boot Violation

[Pamyysue]

Windows 10 HP PC upgraded to Windows 11 Home and now has a secure boot violation. Help.

[Jerry_57]

Hi @Pamyysue,
 

Welcome to the HP Support Community.

Thank you for posting your query. I will be glad to help you.

I hear that A Secure Boot Violation can happen if Secure Boot verification fails. HP states that on desktops/workstations, the message can appear as “Secure Boot Violation. Invalid signature detected.

Check Secure Boot Policy in Setup.” If this happens after a Windows 11 upgrade, check your BIOS Secure Boot settings and make sure Secure Boot is enabled correctly. Windows 11 also requires the PC to be Secure Boot capable, and HP notes that running Windows 11 without Secure Boot can cause instability and may prevent updates.

What to do

1) Enter BIOS and check Secure Boot:

• Turn off the computer.
   
• Turn it back on and immediately press:
  
  
  • Esc repeatedly to open the Startup Menu on many HP notebooks/commercial systems, then press F10 for BIOS Setup
     
  • Or on many HP desktops, press F10 repeatedly to open Computer Setup Utility

2) Enable Secure Boot correctly:

For HP desktops:
 

• Go to Security > Secure Boot Configuration
   
• If prompted, press F10
   
• To enable Secure Boot:
  
  
  • Set Legacy Support to Disable
     
  • Set Secure Boot to Enable
     
• Press F10 to accept changes
   
• Press F10 again, then press Enter twice to restart

For HP commercial notebooks/workstations:
 

• Go to Security > Secure Boot Configuration
   
• Select the Secure Boot box to enable it
   
• Then go to Main > Save Changes and Exit

For HP consumer notebooks:
 

• In BIOS, go to System Configuration > Boot Options
   
• If Legacy Support is listed, set it to Disabled
   
• Set Secure Boot to Enabled
   
• Save changes and restart

3) If the issue started after using new hardware or recovery media, use:

HP notes that Secure Boot might not recognise some hardware or legacy boot media. If the PC stopped booting properly after a hardware change:
 

• Return the PC to its original hardware state
   
• Enable Legacy Boot only if needed to install older or unrecognized hardware/media

4) If custom Secure Boot keys were changed

If custom Secure Boot keys exist, disabling Secure Boot does not clear them. HP says you must go to:
 

• Security > Secure Boot Configuration
   
• Choose Clear Secure Boot Keys
  
  
  I hope this will help.

Take care and have a good day.