Secure Boot Violation Invalid Signature Detected? Fix It Fast

What Is Secure Boot Violation?

Secure Boot is a security feature in UEFI firmware that only allows trusted software to boot.

Seeing “Secure Boot Violation – Invalid Signature Detected” on startup?

This error appears when the system detects untrusted boot files or when digital signatures fail verification. It means your system detected an unauthorized or invalid boot file.

This causes Windows to fail to boot, or you get stuck at the BIOS/UEFI screen

Here are methods to solve the issue immediately:

• Disable Secure Boot
• Reset factory keys
• Disable driver signature enforcement
• Update BIOS

Why Does Secure Boot Violation Happen?

Here are the most common causes:

• Driver/OS Updates: A recent Windows update or driver installation modified boot files, causing a signature mismatch.
• Missing/Incorrect Keys: The UEFI Secure Boot keys (certificates) are missing, corrupted, or not loaded, often resulting in a “check Secure Boot policy” error.
• Unauthorized/Modified Bootloader: Installing unauthorized software, hacking tools, or custom OS loaders that lack proper signatures.
• Hardware/BIOS Changes: Installing new hardware, changing the boot drive priority, or updating the BIOS can invalidate current Secure Boot settings.
• Misconfigured BIOS Settings: The system is set to UEFI mode, but boot files are in Legacy mode, or Secure Boot is active when trying to load a non-Windows OS (e.g., Linux, Ubuntu).

Now, follow the methods to solve the “secure boot violation invalid signature detected” issue.

A Fix for Windows 10 May 2019 Update Block Issue is Underway

According to a support document from Microsoft, the company will release a fix for Windows 10 May 2019 update block issue by the end of this month.

Read More

Method 1. Disable the Secure Boot

Many users reported that they solve this problem easily by disabling the secure boot. This method needs you to enter BIOS and change its settings. Please keep reading the steps carefully to solve the secure boot violation invalid signature detected.

1. Restart your computer and press the BIOS key when you see a message like “Press _ to enter Setup.” Common BIOS keys include F1, F2, Del, and others, depending on your device manufacturer.
2. Once inside the BIOS Setup, use the arrow keys to navigate to the Security Find Secure Boot Configuration and press Enter to open it.
3. Press F10 to access the Secure Boot Configuration menu. Select Secure Boot, then use the arrow keys to change the setting to Disable.
4. Press Enter to save your changes.
5. Your system will continue to boot into Windows. After restarting, check whether the Secure Boot Violation error has been resolved.

Method 2. Reset Factory Keys

If you want to keep Secure Boot enabled, you can reset the factory keys. This can fix signature mismatch issues. Here is the guide:

1. Enter BIOS again, and then go to Advanced Menu > Security
2. Expand the Secure Boot settings, then enter the Key Management
3. Click each of the keys one by one (Platform Key, Key Exchange Keys, Authorized Signatures), and select the “UPDATE” option of each of those. It’ll ask if you want to Reset it to Factory Defaults, select Yes. Do it for all 3 types of keys.
4. Press F10 to Save changes & Exit the BIOS to restart.

Method 3. Disable the Digital Driver Signature Enforcement

The digital drive signature is another possible cause of the error. Disabling the driver has helped many users solve this problem. Here is how to do this.

Step 1. Right-click the Start menu and select the Settings from the context menu.

Step 2. Click on the Update & Security inside the bottom of the setting window.

Step 3. Then click on the Recovery on the left pane.

Step 4. In the new Settings window, navigate to the Advanced Startup location at the bottom right. Then click on Restart now button to access the Advanced Startup Options.

When you have accessed the Advanced Startup Options successfully, click on the Troubleshoot in the Choose an option window.

Step 6. Navigate to the Advanced Options, Startup Settings in order by following the prompts of the screens.

Step 7. Inside Startup Settings, navigate to the Disable driver signature enforcement. Usually, you can press the F7 function key to disable this driver. Then press Enter to go back to the OS and check if this problem still persists.

Method 4. Repair the Windows Boot Manager

According to user reports, this issue can be solved by repairing the Windows boot manager. Here’s how to do it:

1. Enter BIOS.
2. Go to Security > Secure Boot > Enroll EFI IMAGE, and then choose the right partition. (Do not choose a partition where your Windows files are.)
3. Choose the right folder EFI > Microsoft > Boot > bootmgfw.efi.

Method 5. Change OS Type

Changing the OS Type is a highly effective way to fix the “Secure Boot Violation” error, especially on ASUS motherboards.

In many modern BIOS versions, the OS Type setting acts as a toggle for Secure Boot enforcement. Changing it to “Other OS” tells the system to stop strictly verifying digital signatures, which bypasses the violation error.

Follow these steps to locate and adjust the setting:

1. Enter BIOS.
2. If you see a simple “EZ Mode” screen, press F7 to switch to Advanced Mode.
3. Navigate to the Boot or Security tab and look for the Secure Boot sub-menu.
4. Locate the OS Type option. Change it from “Windows UEFI Mode” to “Other OS“.
5. Press F10 and select Yes to save changes and restart.

Method 6. Update BIOS

Update the motherboard BIOS to the latest version, as this can fix signature recognition issues.

Detailed Guides on How to Update BIOS with USB

This post shows you how to update BIOS with USB or Lenovo/HP/Dell/ASUS/Acer PCs and Gigabyte/MSI/ASRock motherboards.

Read More

Secure Boot Violation FAQ

Bottom Line

A Secure Boot Violation error may look serious. But in most cases, it’s just a configuration mismatch, not a hardware failure. And you can fix it in minutes with BIOS or boot repair.