secure boot violation

[chrisv631]

I have HP Envy curve 34-A010 all in one pc. i have a message on screen

secure boot violation

Invalid signature detected . Check secure boot policy in setup.

I really dont know what steps i need to get windows running again. Any help would be much appreciated.

thank you

[Jerry_57]

Hi @chrisv631,

Welcome to the HP Support Community.

Thank you for posting your query. I will be glad to help you.

I hear that this issue can happen when Secure Boot prevents startup. HP’s documented recovery-related steps show how to access the BIOS/Computer Setup Utility and change Secure Boot and Legacy Support settings.
 

What to do:

1. Turn on the computer and immediately press Esc repeatedly until the Startup Menu opens.
    
2. Press F10 to open Computer Setup Utility (BIOS).
    
3. Use the arrow keys to go to:
   
   
   • Security
      
   • Secure Boot Configuration
      
4. When the warning screen appears, press F10 to continue.
    
5. Change:
   
   
   • Secure Boot → Disable
      
   • Legacy Support → Enable
      
6. Press F10 to save changes and exit.
    
7. If prompted with an Operating System Boot Mode Change screen, type the code shown on the screen and press Enter.
    
8. Let the PC restart and check whether Windows starts normally.

Important note

HP documentation also notes that after recovery or troubleshooting is complete, Secure Boot should be re-enabled.

I hope this will help.

 

Take care and have a good day.

[chrisv631]

Thank you for the reply. I did try it and got the message 

Secure Boot Vilolation

Invalid signature detected. Check secure boot policy in setup.

[Jerry_57]

Thank you for sharing the details.

The message “Secure Boot Violation. Invalid signature detected. Check Secure Boot Policy in Setup.” means the system firmware detected a boot loader whose signature did not authenticate under the current Secure Boot policy. On desktops/workstations, HP documents this exact message when Secure Boot verification fails, and the system shuts down after acknowledgement. Secure Boot is designed to allow only trusted, signed boot code to start.
 

For HP systems, these points are relevant:
 

• If Secure Boot is enabled, Legacy Support is disabled automatically on desktops/workstations.
   
• For older operating systems such as Windows Vista, Windows 7, and some Linux systems, HP states they do not support UEFI Secure Boot. In those cases, HP recommends enabling Legacy Support and disabling Secure Boot.
   
• In F10 Setup, HP systems provide Secure Boot configuration choices such as:
  
  
  • Legacy Support Enable and Secure Boot Disable
     
  • Legacy Support Disable and Secure Boot Enable
     
  • Legacy Support Disable and Secure Boot Disable

What to do

1. Turn on the PC and enter F10 Computer Setup.
    
2. Open Secure Boot Configuration.
    
3. If you are trying to boot an older OS, recovery media, or a device that is not signed for Secure Boot:
   
   
   • Enable Legacy Support
      
   • Disable Secure Boot
      
4. Save changes and restart.
   
    

[chrisv631]

i tried those steps and now have message

boot device not found

please install an operating system on your hard disk.

hard disk -(3fo)

[Jerry_57]

Thank you for sharing the details.

To test and troubleshoot your hard drive using the HP PC Hardware Diagnostics UEFI, force the laptop to shut down and press the F2 or F10 key during startup to access the diagnostic menus. This built-in environment can verify hard drive health and detect hardware failures.
 

Step-by-Step Instructions:
 

1. Turn off the computer: Press and hold the power button for at least five seconds to force a complete shutdown.
    
2. Access the Startup Menu: Turn the laptop on and immediately start pressing the Esc key repeatedly (about once a second) until the Startup Menu appears.
    
3. Open UEFI Diagnostics: Press the F2 key to select System Diagnostics.
    
4. Run the Hard Drive Test:
   
   
   • In the main UEFI menu, click Component Tests or System Tests.
      
   • Select Hard Drive from the list.
      
   • Run the Fast Test first. If it passes but the problem persists, run the Extensive Test. 
      
5. Check Results: If the hard drive passes the test, your issue might be with the operating system or BIOS settings. If the drive fails, note the 24-digit Failure ID for replacement options or support.