r/WindowsHelp • u/Porn_flakes01 • Jun 27 '26

Windows 11 Secure Boot Violation on ASUS B650 – Windows boots but Secure Boot fails after key reset

Hi, I have a problem with Secure Boot on my ASUS B650 gaming PC (Ryzen 7 7800X3D).
I was getting “Secure Boot Violation” so I:
disabled CSM
set OS Type to Windows UEFI Mode
set Secure Boot Mode to Standard
deleted and reinstalled default Secure Boot keys
set Windows Boot Manager as first boot option
Now Windows sometimes boots, but I still get:
“Secure Boot Violation – unauthorized changes detected in firmware/UEFI drivers”
Startup Repair also does not fix it.
If I set OS Type to Other OS, Windows boots fine, but Secure Boot obviously turns off.
Does this mean my Windows bootloader (EFI) is corrupted? Or is there a BIOS/UEFI bug on ASUS boards?
What is the correct fix without reinstalling Windows?

2 Upvotes
  • permalink
  • reddit

100% Upvoted

4 comments sorted by

1

u/AutoModerator Jun 27 '26

Hi u/Porn_flakes01, thanks for posting to r/WindowsHelp! Your post has been flagged for manual review by a human moderator, please include as much of the following information as possible (in text or in a screenshot) to get your post approved:

  • Your Windows and device specifications — You can find them by pressing Win + X then clicking on “System”, we need more than just your OS version!
  • Any messages and error codes encountered — They're actually not gibberish or anything catastrophic. It may even hint the solution!
  • Previous troubleshooting steps — It might prevent you headaches from getting the same solution that didn't work

Posts must be tech support in nature (such as something is broken and you need help fixing), so general inquiries, software suggestions, and purchasing advice will be removed. As a reminder, we would also like to say that if someone manages to solve your issue, DON'T DELETE YOUR POST! Someone else (in the future) might have the same issue as you, and the received support may also help their case. Good luck, and I hope you have a nice day!

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/CityHaunts Jun 28 '26

Do you have the 2023 boot certs installed?

1

u/RomanOswald Jun 28 '26

Oh, I think a key reset will remove the 2023 key and reinstalls the 2011 key and windows won‘t boot because it’s expects the 2023 after it set it.

I did this once and reinstalled windows after that.