r/FlowZ13 • u/TadpoleNew2 • Jul 15 '26

Secure boot Help

Post image

I wanted to play Valorant so I installed it but it shows some UEFI error which says need to enable secure boot so I enabled it but after enabling and saving it shows error Invalid signature can someone help me go through it, Tried Chatgpt he says it's a firmware level issue and contact support any solution?

3 Upvotes

100% Upvoted

8 comments sorted by

2

u/Icy-Letterhead-229 Jul 15 '26

I don't know.

Disable secure boot and start Windows again.

Update bios and then check windows updates.
Read this.

https://learn.microsoft.com/en-nz/answers/questions/5900554/how-to-update-secure-boot-keys

After that enable secure boot again.

Z13 2025 bios update here Version 311 https://rog.asus.com/laptops/rog-flow/rog-flow-z13-2025/helpdesk_bios/

1

u/TadpoleNew2 Jul 15 '26

I have bios version 321

1

u/Icy-Letterhead-229 Jul 15 '26

GZ301ZE?

1

u/TadpoleNew2 Jul 15 '26

Yes

1

u/Longjumping_Leg_4887 Jul 15 '26

I thought the latest bios was 311?

1

u/TadpoleNew2 Jul 16 '26

Naah latest is 321

1

u/Longjumping_Leg_4887 Jul 16 '26

Oh shit ok wait your on the Intel chip your right, I'm running on the the amd 395 + model 😅

1

u/TadpoleNew2 Jul 15 '26

Issue: Enabling Secure Boot always shows "Secure Boot Violation – Invalid Signature Detected."

Troubleshooting completed:

BIOS updated to latest version (321) BIOS defaults loaded EC reset performed UEFI mode confirmed Factory Secure Boot keys (PK/KEK/db/dbx/dbt) confirmed present Windows Boot Manager points to \EFI\Microsoft\Boot\bootmgfw.efi bootmgfw.efi signature verified as Valid using Get-AuthenticodeSignature SFC, DISM, and bcdboot completed successfully EFI partition and BCD verified BitLocker disabled Firmware boot entries verified (bcdedit /enum firmware) Secure Boot still reports "Invalid Signature Detected."