Secure boot verification

[Jager3]

I have an HP ENVY Desktop TE02-0000, product number 319Q4AA#ABA, motherboard SSID 894B, running BIOS F.40.

The computer displays “Secure Boot Violation — Invalid signature detected” when starting Windows and when booting an official Windows 11 recovery USB.

HP BIOS F.49 Rev.A (SoftPaq sp173623) specifically lists a fix for a Secure Boot Violation caused by a DBX update.

I successfully created an HP BIOS recovery USB using HP BIOS Update and Recovery, but neither normal startup nor Windows + B launches BIOS recovery.

How can I apply F.49 using a supported offline recovery method without clearing the TPM or reinstalling Windows?

[Jager3]

Mostly having issues booting usb recovery and update 49. Not very tech savvy and I’m just going in circles lol. Factory key restore option is also greyed out in Bios setup

[VikramTheGreat · Accepted solution]

Hi @Jager3,

Welcome to the HP Support Community.

I understand that your HP ENVY Desktop PC TE02-0000i (319Q4AA#ABA) displays“Secure Boot Violation – Invalid signature detected” and that you are unable to start Windows or boot from the Windows 11 recovery USB.

You have already created an HP BIOS recovery USB, but the recovery screen does not open. Let’s try recreating the USB using another working Windows computer and then perform the BIOS recovery again.

Before proceeding, make sure you have your BitLocker recovery key available. You do not need to clear the TPM or reinstall Windows for these steps.

Create the BIOS recovery USB

1. On another working Windows computer, insert a blank USB flash drive.
2. Go to the HP Software and Driver Downloads page.
3. Search using the exact product number 319Q4AA#ABA.
4. Open the BIOS section.
5. Download BIOS F.49 Rev.A, SoftPaq sp173623, only if it is listed for the exact product number and motherboard SSID 894B.
6. Run the downloaded SoftPaq.
7. When HP BIOS Update and Recovery opens, select Create Recovery USB flash drive.
8. Select the USB drive and continue.
9. Wait until the utility confirms that the recovery flash drive was created successfully.
10. Select Finish, and then safely remove the USB drive.
     

Recover the BIOS on the HP ENVY desktop

1. Turn off the desktop and wait for approximately five seconds.
2. Insert the BIOS recovery USB into the computer.
3. Press and hold the Windows + B keys.
4. While holding the keys, press and hold the Power button for two to three seconds.
5. Release the Power button, but continue holding Windows + B.
6. Wait for the HP BIOS Update screen to appear. You might hear a series of beeps.
7. If the recovery screen appears, follow the on-screen instructions.
8. Do not turn off or disconnect power from the computer while the BIOS recovery is running.

If the computer starts normally, repeat the procedure and make sure the Power button is held for only two to three seconds. Holding the Power button too long can turn the computer off instead of starting recovery.

Please use only the BIOS package listed for your exact HP product number and system board. Installing a BIOS intended for a different product or motherboard can prevent the computer from starting.

For reference: HP Desktop PCs - Recovering the BIOS (Basic Input Output System) | HP® Support

If the HP BIOS Update screen still does not appear after recreating the USB and repeating the recovery sequence, please contact HP Support for further assistance. Do not clear the TPM, manually modify the Secure Boot keys, or reinstall Windows at this stage.

Take care and have a good day.