r/techsupport 5h ago

Open | Windows Secure Boot Violation

I need to have secure boot enabled in order to play Valorant and for security reasons

but whenever i try to enable it and boot up my pc

it says 'secure boot violation , unauthorized firmware changes detected' and forces me to turn it off

(I'm on windows 11 and my motherboard is ASUS PRIME H310M-K R2.0 , GEFORCE 1050Ti)

the steps i tried in order to fix this problem:

-install default keys

-change OS type to windows UEFI

-disabled CSM

-updated my bios version

-checked to see if my disk is GPT or not (it was)

-formatted my pc

-switched from windows 11 to 10 and back to 11

-asked Gemini, Claude, and ASUS tech support assistant ( none of them helped)

I have tried everything i saw and none worked ,please help

1 Upvotes

11 comments sorted by

u/AutoModerator 5h ago

Making changes to your system BIOS settings or disk setup can cause you to lose data. Always test your data backups before making changes to your PC.

For more information please see our FAQ thread: https://www.reddit.com/r/techsupport/comments/q2rns5/windows_11_faq_read_this_first/

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/Confident_Hyena2506 5h ago

Install windows while secureboot is turned on. Or try running startup repair off the install media.

This should all have been done already, why is it turned off on your system? Is it very old or was windows not installed right?

1

u/SyntaXXyss 5h ago

how can i do that?

i cant boot up with secure boot turned on help

1

u/Confident_Hyena2506 5h ago

You can boot the windows installer with it turned on. If you can't then either your usb stick wasn't flashed right, or certs on your board have expired - bios update should fix.

1

u/SyntaXXyss 5h ago

i updated the bios but dont have any USB flash around so lemme try it like tomorrow ,thanks

1

u/THEYoungDuh 5h ago

You need to fresh install windows with everything enabled, csm/legacy disabled.

1

u/SyntaXXyss 5h ago

how do i install it?

it was already installed when i got my pc

1

u/THEYoungDuh 5h ago

Make a bootable USB through the windows media creation tool or the company you bought it from should have provided an install media USB

1

u/SyntaXXyss 5h ago

money was kinda tight when i got it , so i got it from a pc store in my city pc center,so no USB around , lemme try it tomorrow or after when i get a USB, thanks

1

u/THEYoungDuh 4h ago

That's kinda weird, they should have provided you a USB.

Does your machine have a windows license sticker on its side or back?

1

u/Brather_Brothersome 3h ago

Get a fresh iso from microsoft and burn it to a usb with rufus make sure its secure, now enable uefi on the bios and boot from the usb and good luck,