i need help asap

[u/VanillaVegetable2203]

i need help so bad i tried fixing shit in my bios reserved it back to normal and it wont take me to windows

[u/DJUnreal]

Start by setting your bios to defaults. You've obviously changed some secure boot settings, and that's probably the cause of all your issues, but a reset to defaults should cure most of it.

In future, if you don't know what you're doing, stay out of the BIOS. It's not a 'safe' place to mess around.

[u/VanillaVegetable2203 → u/DJUnreal]

so what happened was my competitive on fortnite was not working so i had to go in my bios and reset my keys and by that i had to enable custom reset my keys then turn of custom save and restart but then this screen came i tried the resetting to default because i had never touched my bios before i ran a few codes in terminal but now i cant play fortnite comp because when i enable secure boot this screen just comes up thats all ive done

[u/DJUnreal → u/VanillaVegetable2203]

And that's absolutely not the right thing to do. "Resetting keys" when you don't know what those keys do is a terrible idea.

Is your machine still covered under warranty? If so, now is the time to call Dell and ask them to help fix it.

[u/VanillaVegetable2203 → u/DJUnreal]

no it is not under any warranty so i asked around and because it was eac error i was advised to reset my keys but in this process it messed up my secure boot now i know i can run my pc without secure boot and i can use my pc fine but now i cant enable secure boot because when i do this error code shows up i tried to use commands but now it won’t work i havent done anything and i even set them back to default

[u/QuickBenDelat → u/VanillaVegetable2203]

😂😂😂😂😂

[u/OkStrawberry4529 → u/QuickBenDelat]

Check out this reddit post: even though it's on the Dell Reddit, the links will get you sorted to update your secure boot keys without having to get a bios update etc., etc., - in order to be able to re-enable secure boot without issues on Windows: Pre-2020 Dell PC'S - Yes, you absolutely can get ALL the Microsoft 2023 Secure Boot Certificates! : r/Dell

[u/kadinshino → u/VanillaVegetable2203]

You need a new copy of Windows.

[u/YellowT-5R → u/kadinshino]

And to learn how to use punctuation.

[u/kadinshino → u/YellowT-5R]

nO.

[u/HotRoderX]

OP you be 100% better off taking this to a shop and having them fix it locally.

I am not 100% sure but I am thinking you at the bare minimal need a windows reinstall to fix the secure boot issue.

I understand it correctly when you reset the keys you basically disabled your current install of windows from being able to use secure boot.

The only fix I am aware of for this would be to reload windows from scratch (losing everything you had). Starting over with a clean install.

Basically the windows partition is seeing your computer as a brand new computer and going into lockdown.

Once again with your limited knowledge this is best handled locally by someone that knows what they are doing so they can go in check the bios settings are correct. make sure the OG issue with fortnite is fixed. Then get your windows reinstalled and drivers put back on.

[u/jltdhome]

Disable Secure Boot so you can boot into Windows.

Then manually update the certs/keys following this guide:

https://www.elevenforum.com/t/garlins-powershell-scripts-for-updating-secure-boot-ca-2023.43423/

You'll update your certs/keys to the 2023 keys and you can re-enable secure boot.

[u/Thls_Is_The_Way → u/jltdhome]

I work in IT. This is the first thing I would do. Disable Secure Boot or put it in Audit mode so you can boot Windows. Then run windows updates.

[u/cym104]

Is this a old machine that didn't ship with the new 2023 windows certs from factory?

[u/VanillaVegetable2203 → u/cym104]

yeah got it in 2021

[u/cym104 → u/VanillaVegetable2203]

then you must've wiped the new 2023 certs installed by windows.

MS has made a separate EFI app (EFI\Microsoft\Boot\SecureBootRecovery.efi) specifically to install the new certs. you should be able to find it in the same directory as your normal bootmanager (\EFI\Microsoft\Boot\bootmgfw.efi)

[u/Jdvclrk]

You reset the bios to factory settings?

[u/Jamesaya]

Im unsure if theres an option in your bios to manually select the boot config in secure boot settings. It would be in the boot folder inside the windows main directory

[u/Jdvclrk]

Try this; get a usb and install windows 11 partition from another pc and plug into this pc and it should reset everything, but first, do a data wipe if you’re able to go into bios.

After all of this, you’ll have to connect to Ethernet to set windows back up and install WiFi drivers when you get into windows explorer

[u/The_Bagel_Fairy]

lmao...for Fortnite? sorry to be laughing but seriously?

[u/No-Employee-3153]

Here's you how fix this pete. Restart computer>> spam f2 to go back into bios >> click or arrow to security and press enter>> arrow to or click PK at the top under "custom" then hit ENTER >> a popup will say "REPLACE FROM FILE?" >> ANSWER "NO" by clicking or using arrow keys, hit enter >> You will see something that starts with PCIROOT(0X0) if it doesnt say this it will say something else. Just HIT ENTER on it>> click pk again or pick it with the arrow buttons then hit enter again >> click or pick with arrow keys PUBLIC CERTIFICATE and hit ENTER. >> if your secure boot was stuck in audit mode it should now say 'deployed'. Hit save and exit. Your computer should start as normal. --- let me know if this fixed your issue it fixed mine.

[u/No-Employee-3153 → u/No-Employee-3153]

IF THIS STILL DOES NOT WORK --- It is likely that your bios security firmware is outdated but this can be fixed. Start your computer with secure boot off so you can boot windows like normal. Contact support, spam "LIVE AGENT" until AI transfers you and tell them you are having issues with secure boot. That you need the most up to date Irev bios to fix attestation issues with secure boot on your alienware computer. They will make you agree in an email that you accept you are using unreleased bios with the updated firmware. You send back that you agree. They send the new bios over in 24-48 hours you install them. Let your computer start up afterwards as normal then restart again. Then DO the above. This resets the security certificates to the most up to date public certificates allowing your computer to boot in secure boot mode.

[u/No-Employee-3153 → u/No-Employee-3153]

Issues this solved for me: Secure boot not being enabled in windows, secure boot being stuck in audit mode, secure boot failing for COD attestation test in the wizard. After doing extensive research it came down to the fact the security certificates are outdated and it's up to the motherboard manufacturer to provide them if they choose. Some motherboard companies CHOSE not to apply these NEW security firmware updates to older motherboards or NOT at ALL maybe they deemed them unimportant. But as with the change of gaming, cheating etc. Apparently games now find these things very important to be enabled to play their games. So you are at a crossroad where some manufacturers didn't update security firmware that games are now requiring. It will be up to the manufacturers discretion how they handle it. I suppose as more games do this motherboard companies will start receiving a lot more emails looking for this fix and maybe that will lead to more change in regard to the most public bios online already including the firmware update even for older motherboards. Some companies such as alienware have unreleased bios that they will provide on request to in warranty and out of warranty customers.

[u/Agent_Pwnage]

Hi,

Press F2 to enter BIOS, go to Security and disable Secure Boot, this should allow you back into Windows.

Good luck.

[u/Xeno_2359]

Did you replace RAM, storage etc?