Hello, When I turn my computer on, I get a

[MySunshineD]

Hello, when I start my computer I get a black screen with a red flag stating “invalid signature detected. Check secure boot policy in setup”.  I run the tests 1&2 & everything passes.  I also do the f10 & follow, nothing is working.  Any help would be greatly appreciated 

[Jerry_57 · Accepted solution]

Hi @MySunshineD,

Welcome to the HP Support Community.

Thank you for posting your query. I will be glad to help you.

The "Invalid Signature Detected" error occurs when your HP's motherboard firmware blocks startup because the boot files' digital signatures don't match your current Secure Boot policies.

Step 1: Temporarily disable Secure Boot to access Windows:
 

If you need to bypass the red flag and boot your computer to back up data or apply updates, you can toggle Secure Boot off.
 

1. Turn off your HP computer completely.
    
2. Turn it on and immediately press the Esc key repeatedly until the Startup menu appears, then press F10 to enter the BIOS Setup Utility.
    
3. Navigate to the Security or System Configuration tab and find Secure Boot Configuration.
    
4. Set Secure Boot to Disable.
    
5. If Legacy Support is available, set it to Enabled.
    
6. Press F10 to save your changes and exit.

Step 2: Restore Factory Keys (Permanent Fix):

To maintain security and re-enable Secure Boot, you will need to clear the outdated keys in your motherboard's memory and restore the default factory keys.
 

1. Restart your PC and press F10 to enter the BIOS again.
    
2. Navigate to the Security menu and go into Secure Boot Configuration.
    
3. Look for an option labelled Reset to Factory Keys, Install Default Keys, or Restore Factory Keys.
    
4. Select it, confirm the reset, press F10 to save, and exit.
    
5. Restart your PC to see if Windows boots without the error.

Step 3: Update your BIOS:

If resetting the keys does not resolve the issue, the version of your BIOS may need to be updated to recognise current Windows or driver certificates.
 

1. Boot into Windows (with Secure Boot disabled if necessary).
    
2. Download and install the latest firmware updates specifically meant for your device via the Official HP® Support page.
    
3. Alternatively, use the pre-installed HP Support Assistant | HP® Support to scan and apply available firmware patches automatically.

Step 4: Run Windows Startup Repair

If your PC fails to boot even with Secure Boot disabled, the bootloader might be corrupted.
 

1. Restart your computer and press the F11 key repeatedly during startup to enter the Windows Recovery Environment.
    
2. Go to Troubleshoot > Advanced Options > Startup Repair.

I hope this will help.

 

Take care and have a good day.