X

How to fix “secure boot violation” error on a laptop

There are a lot of errors any laptop user may encounter sooner or later. And it is good to keep in mind that malfunctions will vary, depending on the computer model, manufacturer, software installed and a number of other parameters. Asus laptops quite often have a problem when at the computer boot user sees the Secure Boot Violation message, which says “Invalid signature detected. Check Secure Boot Policy in Setup”. So it is quite clear that there are problems with the download security policy due to an invalid signature. This error can be corrected without contacting the service center, and in this article we are going to tell you how to do it.


Table of contents:
1. Where the secure boot violation error comes from
2. How to fix the secure boot violation error

Where the secure boot violation error comes from

There are a lot of reasons why user can see the error in question when booting up his computer; and it is quite difficult to determine what the problem is related to. Here are the most common situations when a Secure Boot Violation error occurs:

  • After installing the second operating system on the computer;
  • After updating Windows;
  • After reinstalling Windows (especially versions 10 and 8.1) without formatting the hard drive;
  • After disabling the driver’s digital signature verification in the operating system;

A Secure Boot Violation error can also occur on the computer due to the actions of viruses or antivirus programs.

Important note: In some situations, the problem of Secure Boot Violation manifests itself when user is booting his computer with the external drive – a USB flash drive or a hard drive – connected to the PC beforehand. In this situation, the error is related to the BIOS settings. So it is necessary to change the priority of the device load, setting the system hard drive first. If this did not work, just unplug the external drive and try to boot the system once again.

How to fix the secure boot violation error

Since the error in question is typical for Asus laptops, below we are going to suggest some recommendations and tips on how to fix it on computers made by this Taiwanese company. However, if you have it on another laptop, steps that help to fix the Secure Boot Violation error will be nearly the same.

The first thing to do when the message “Invalid signature detected. Check Secure Boot Policy in Setup “appears, you need to proceed to BIOS or UEFI, depending on what is used on your laptop. In most cases, to go to BIOS, it is enough to just click on “OK” in the error message, but if this method did not work you may need to enter it in a different way – by pressing Del, F2 or another functional key when you start your computer.

Once you are in BIOS / UEFI, you need to disable Secure Boot. Pretty often this action alone is enough to fix the “Invalid signature detected. Check Secure Boot Policy in Setup” error. In the UEFI of ASUS computers, in order to disable Secure Boot, you need to go to the Boot partition and install the “Other OS” option in the “OS Type”.

Please note
In some BIOS / UEFI versions on Asus, the Secure Boot option can be disabled in the standard way – you need to find this setting in the list (most often in the Authentication section) and set the Disable option for it.

If, after disabling Secure Boot, the Secure Boot Violation error has not been fixed, it is most likely due to problems with reading the unsigned device drivers. Because Windows cannot be accessed, you can disable the digital signature verification of drivers only through the recovery environment. To do this, you need to start the system from the boot disk (flash drive) and get to the boot parameters along the path:

"Diagnostics" - "Additional parameters" - "Boot parameters"

Next, among the available options, select the seventh option – “Disable driver signature enforcement” and restart your computer.

After that, the system should boot without any troubles. Next, the user will need to find and remove the malfunctioning driver, then again enable signature verification. If signature verification is disabled your computer security will be under serious threat. In order not to remove unnecessary drivers, you can use the recovery point, if it is available.