UEFI Installation With Secure boot enabled

m1s3rys1gn4l · 04 Dec 2017

Hello tech guys,
i need emergency help, i posting this thread from my frined's computer,
i have a HP laptop, and few days ago i send it to tech shop for motherboard repair,
and they did it as well, but after few days i am facing problem with BIOS,
i cant change bios setting, i have tried it a lot of time, when i save bios with change and laptop restarted the bios setting remain same as default,
so my question is how can i install windows 10 from usb with secured boot enabled ?
i have tried with rufus usb creator, but when i try to boot from usb it show me as message ( secure boot authentication failed....)
the only way to install windows is using a usb drive for me right now, cause my bios setting are
* secure boot enabled
* boot mdoe uefi
* boot devices are ( usb, ssd, hdd, internal dvd drive)
now guys please tell me how can i create windows 10 installation usb with secure boot enabled ?

and sorry for my bad english

Masterchiefxx17 · 04 Dec 2017

I would advise you return to the shop that first worked on your laptop and ask if they configured a BIOS password or a Secure Boot password. If they did, they will need to remove the passwords.

zbook · 05 Dec 2017

In addition to the above open the HP website and enter the computer's product or serial number to view the available drivers.
HP Software and Driver Downloads for HP Printers, Laptops, Desktops and More | HPÂ® Customer Support
Post into the thread the URL or hyperlink for the drivers/software/firmware.
Look for software: HP UEFI hardware diagnostics.
Alternatively see if you can directly download and install the latest version:
HP PC Hardware Diagnostics | HPÂ® Official Site
Download and install the latest version 6.4 or create a bootable USB drive.
Run the HP UEFI hardware diagnostics on the computer in loop until failure mode.
Run it overnight so that there are at least 2 or more loops.
If there are problems the testing will abort and display an error code.
If the testing is running the next day that is a good sign.
After 2 or more runs (testing time largely depends on the a mount of RAM and the size of the drives) you can abort the testing by clicking the keyboard escape key. Then view the logs to confirm the pass.
Post the results into the thread.

alphanumeric · 05 Dec 2017

If you can get into the menus to change settings, without entering a password, there is no password set. If there was a BIOS password set, you would have to enter before ever getting to any settings menu's.

How old is this laptop? It sounds like the CMOS/BIOS battery is dead. Its a small battery on the motherboard that maintains the date and time, and any custom user settings when the PC is turned off.

Windows 10 can be installed with secure boot turned on, provided your install media is setup correctly. Using the wrong settings in RUFUS will cause the issue your facing. It's one reason I don't use it or recommend it.

I prefer to use diskpart to create my bootable install media. The same thumbdrive works with legacy and UEFI.

https://technet.microsoft.com/en-ca/.../dn621902.aspx Not 100% happy with how this tutorial is written, but can't find a better one at the moment.

list disk
Make note of which drive is the thumb drive
select disk (thumb drive disk number) Make sure to select the thumb drive
clean
create partition primary
format quick fs=fat32
assign
active

Mount ISO and copy contents to thumb drive.

NavyLCDR · 05 Dec 2017

It does sound like the CMOS battery is dead or not installed.
@alphanumeric's method of creating the Windows 10 USB flash drive will provide you with a flash drive that can be booted in UEFI or legacy BIOS (CSM) mode, and will boot with secure boot enabled.

cereberus · 05 Dec 2017

NavyLCDR said:

It does sound like the CMOS battery is dead or not installed.
@alphanumeric's method of creating the Windows 10 USB flash drive will provide you with a flash drive that can be booted in UEFI or legacy BIOS (CSM) mode, and will boot with secure boot enabled.

Worth noting that not all pcs have a separate CMOS battery any more. On one laptop, I had issue as (rechargeable) battery was integrated into mobo, and could not change settings. I had devil's own job fixing that having to short out (very carefully so I did not frazzle things) battery until it was drained, and then it forgot settings and work ok recharging.

I was lucky really as I could have fried mobo for good.

These integrated batteries are a nightmare. What happens if they fail?

They should use some sort of non volatile flash memory instead.

alphanumeric · 05 Dec 2017

cereberus said:

Worth noting that not all pcs have a separate CMOS battery any more. On one laptop, I had issue as (rechargeable) battery was integrated into mobo, and could not change settings. I had devil's own job fixing that having to short out (very carefully so I did not frazzle things) battery until it was drained, and then it forgot settings and work ok recharging.

I was lucky really as I could have fried mobo for good.

These integrated batteries are a nightmare. What happens if they fail?

They should use some sort of non volatile flash memory instead.

That's where I would have gotten out my soldering iron and just unsoldered one wire from the battery. Assuming it connected with wires. Failing that I would just tack on a resistor to drain it. Buts that's just me, I have those skills. A light bulb would work too. Connect it across the battery and wait till it fades to black.

Laptops do use (or partially use) non volatile flash memory for (some) BIOS settings. Stuff like the BIOS password, Boot password. Removing the battery won't erase those settings. EEPROM.

I've seen a few posts where that person could not find a separate BIOS battery. All in ones, if memory serves me.

m1s3rys1gn4l · 13 Dec 2017

I have send it to repair shop again, and they solved it :) thank you guus...

zbook · 13 Dec 2017

m1s3rys1gn4l ,
What was found in the repair shop? And what did they do?

muchomurka · 13 Dec 2017

m1s3rys1gn4l said:

i have tried with rufus usb creator, but when i try to boot from usb it show me as message ( secure boot authentication failed....)
the only way to install windows is using a usb drive for me right now

It is normal. Secure Boot cannot load system from NTFS formatted flash drive. In Rufus, select ISO source and then change USB filesystem to FAT32. Then it will boot.