Windows 10: Secure Boot Violations - How to Recover from?

I am hesitant on enabling Secure Boot because what if I encounter a Secure Boot Violation and don't know how to recover from that? Do I need to reinstall Windows? Or would it just let me go into the UEFI setup? If it lets me go into the UEFI setup, then what should be looked into so I do not encounter a next Secure Boot violation?

I do not run Linux boot DVDs or USBs or any other 3rd party boot repair tools. I am only concerned if any drivers or even security updates that are installed by Windows Updates would cause a Secure Boot violation.

Is it worth it to enable Secure Boot?

:)

 

Secure Boot Violation

It restores the defaults to factory status - don't worry, your apps, files, settings and Windows 10 will not be affected.

What is the exact make and model of your Lenovo?

Open Start, type: system information

Hit Enter

Click System summary

Look in the right pane

Copy the system sku info into reply here.

 

Secure Boot Violation

Hi,

To assist you better, we need to ask you a few questions:

• Do you get any error code along with the error message?
• Have you updated your chipset and BIOS drivers recently?
• Did you try to boot to safe mode? If yes, were you able to boot?

Update us on the result.

Regards.

 

I would ask the motherboard / PC supplier what secure boot settings should be used. You should be able to turn off secure boot in the BIOS at anytime and the PC should boot fine - at least mine does.

 

I’m extra cautious about malware, so would it be fine to leave Secure Boot off?

 

Yes, but there is nothing to lose in trying to get it working.

 

Windows 8 and 10 install and update happily with secureboot on as they are properly certified. Windows 7 and other OSs vary.

This is a non issue for Windows 10 users.

 

Secure Boot verifies the integrity of the UEFI and bootloader of the drive you're booting to. One would hope that MS would do sufficient validation before deploying an unsigned bootloader update or allowing an unsigned kernel driver to be installed. And I haven't heard of any Secure Boot issues with Win10 so far.

I would leave it on. If something bad were to happen then you could most likely recover with a system restore or repair install, depending on which stage failed. Worst case you could enter UEFI setup and disable Secure Boot (if allowed by the OEM).