• ×
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
  • ×
    Information
    Need Windows 11 help?
    Check documents on compatibility, FAQs, upgrade information and available fixes.
    Windows 11 Support Center.
  • post a message
Guidelines
Are you having HotKey issues? Click here for tips and tricks.
HP Recommended
HP Laptop - 15-gw0005la

I am trying to access Windows 11 but it only allows me to access it with the secure boot disabled, which generates a conflict because there are some programs in Windows that need it enabled to work.

I have tried reinstalling the OS, updating the BIOS, deleting the Keys, loading default BIOS settings, but none of them have worked, I get the message:

 

Secure Boot Violation
Invalid signature detected. Check Secure Boot Policy in Setup

 

In some cases I also get the message:

 

The selected boot device failed. Press <Enter> to Continue.

 

I think it is my mistake in trying to make Arch Linux can boot with Secure Boot too, I used sbctl for it, the commands were:

 

1. sbctl status
2. sbctl create-keys
3. sbctl enroll-keys -m
4. sbctl status

 

I would like to know if you could help me to restore this and go back to using Windows with Secure Boot.

1 REPLY 1
HP Recommended

Hi @CND0512XX7,

 

Welcome to The HP Support Community.  

 

Thank you for posting your query, I will be glad to help you.

 

I understand you've encountered some issues with Secure Boot, likely due to the changes made while trying to configure Secure Boot for Arch Linux. Here’s a step-by-step guide to restore your system so that you can use Windows with Secure Boot enabled:

 

1. Revert Secure Boot Settings in BIOS:

Access BIOS/UEFI Settings:

  • Restart your laptop.
  • Press Esc, F2, F10, or Del (the exact key depends on your model) repeatedly during startup to enter the BIOS/UEFI settings.

Load Default Settings:

  • Look for an option to "Load Setup Defaults" or "Load Optimized Defaults" (the wording may vary).
  • Select this option to reset all BIOS settings to their default state, which should include the Secure Boot settings.

Re-enable Secure Boot:

  • After loading default settings, find the Secure Boot option in the BIOS settings.
  • Set Secure Boot to "Enabled".
  • Save and exit the BIOS settings.

2. Recreate and Re-enroll Keys:

If resetting BIOS settings doesn’t resolve the issue, you may need to recreate and re-enroll the Secure Boot keys, especially if custom keys were created for Arch Linux.

Access BIOS/UEFI Settings:

  • Follow the same steps as above to enter the BIOS settings.

Navigate to Secure Boot Settings:

  • Look for options related to Secure Boot keys or Secure Boot Configuration.

Delete Existing Secure Boot Keys:

  • If you see options to manage or delete Secure Boot keys, use them to remove any custom keys that might have been added.

Restore Factory Keys:

  • If there's an option to restore default Secure Boot keys, use it to revert to the factory settings.

3. Repair Windows Boot Configuration:

You might also need to repair the Windows boot configuration to ensure it works properly with Secure Boot enabled.

Create a Windows Installation Media:

  • Use a different computer to download the Windows 11 installation media from the Microsoft website.
  • Create a bootable USB drive with the Windows installation media.

Boot from Installation Media:

  • Insert the bootable USB drive into your laptop.
  • Restart your laptop and boot from the USB drive (you might need to adjust boot order in BIOS).

Repair Windows:

  • Once booted into the Windows Setup environment, choose "Repair your computer" instead of "Install now."
  • Go to "Troubleshoot" > "Advanced options" > "Startup Repair" to fix boot issues.

4. Check for Firmware Updates:

Ensure that your BIOS/UEFI firmware is up to date, as updates can sometimes resolve compatibility issues.

Download the Latest BIOS Update:

  • Go to the HP Support website and search for your laptop model (15-gw0005la).
  • Download the latest BIOS update.

Follow the Instructions:

  • Follow the instructions provided by HP to update the BIOS.

5. Reinstall Windows (if needed):

If none of the above steps work, you might consider reinstalling Windows 11 to ensure a clean configuration:

Back Up Your Data:

  • Make sure you back up any important data before proceeding.

Reinstall Windows:

  • Boot from the Windows installation media as described above.
  • Choose "Install now" and follow the prompts to reinstall Windows.

Refer to this document: HP Laptop - 15-gw0005la User manual 

 

I hope this helps. 

 

Take care and have a good day.

 

Please click “Accepted Solution” if you feel my post solved your issue, it will help others find the solution. 


A_Gayathri
HP Support Community Administrator.
† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the <a href="https://www8.hp.com/us/en/terms-of-use.html" class="udrlinesmall">Terms of Use</a> and <a href="/t5/custom/page/page-id/hp.rulespage" class="udrlinesmall"> Rules of Participation</a>.