Secure Boot Violation Error on HP Commercial Products

[A_Gayathri]

A Secure Boot violation error can occur on HP commercial products, particularly after a Microsoft cumulative monthly OS update. This issue may cause your device to hang or loop back to a Secure Boot error screen.

The following steps outline a detailed troubleshooting guide to resolve this issue:

Troubleshooting Steps

1. Access HP Support:
   
   

   • Navigate to the HP Support website.
   • Enter your device's serial number or product name.
   • Click on Submit.
     
     

2. Download the Latest BIOS:
   
   

   • Find the Software, Drivers, and Firmware  section.
   • Select your operating system version and click Submit.
   • Expand the selection by clicking the Plus (+) sign under All Drivers.
   • Choose the appropriate SoftPaq and click Download.
   • Follow the on-screen instructions to download and install the driver.
     
     

3. Reconfigure BIOS Settings:
   
   

   • Power on or restart your device and press F10 to enter the HP Computer Setup (BIOS).
   • Navigate to Security > BIOS Sure Start, and uncheck the box for Sure Start Secure Boot Keys Protection.
   • Go to Security > Secure Boot Configuration, and disable Secure Boot by unchecking the box or configuring Legacy Support and Secure Boot as outlined based on the BIOS family.
   • Save and reboot your system.
     
     

4. Restore Factory Defaults:
   
   

   • Boot into BIOS again (Press F10).
   • Select  Security > Secure Boot Configuration, then check the box for Reset Secure Boot keys to factory defaults
   • Save and reboot your system.
     
     

5. Enable Secure Boot:
   
   

   • Again Boot into BIOS (Press F10), then go to Security > Secure Boot Configuration.
   • Enable Secure Boot by checking the box or configuring as needed for your BIOS family.
   • Save the settings and reboot the system, allowing it to boot into the OS.
     
     

6. Update DBX Database:
   
   

   • Update the dbx database to include new entries as per your cumulative update.
   • Ensure the dbxupdate.bin  file in C:\Windows\System32\SecureBootUpdates  has a file date of July 11th or later.
     
     

7. Alternative: Registry Modification:
   
   

   • Launch the Registry Editor and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot.
   • Change the AvailableUpdates  setting to 2. Exit and reboot. The system will install the dbx update.
   • Check if AvailableUpdates  changes to 0 upon successful installation.
     
     

Resolution

Install the latest BIOS, following these steps should resolve the Secure Boot error and ensure your system runs smoothly beyond the update conflict.

Sources: HP Commercial Products - Commercial Products (2017-2023) with Sure Start May Experience a Secure Boo...

Need help or have any questions? Start a new discussion here and get the answers you need.