Results 1 to 7 of 7
  1. #1
    ROG Guru: Green Belt Array gupsterg PC Specs
    gupsterg PC Specs
    MotherboardAsus Maximus VII Ranger
    Processori5 4690K
    Memory (part number)HyperX Savage 2400MHz 16GB
    Graphics Card #1Sapphire R9 Fury X (1145/545 Custom ROM)
    MonitorAsus MG279Q
    Storage #1Samsung 840 Evo 250GB
    Storage #2HGST 2TB
    CPU CoolerThermalRight Archon SB-E X2
    CaseSilverstone Temjin 06
    Power SupplyCooler Master V850
    Headset/Speakers HyperX Cloud
    OS Win 7 Pro x64 / Win 10 Pro x64
    gupsterg's Avatar
    Join Date
    Feb 2015
    Reputation
    76
    Posts
    652

    Windows 7 Pro UEFI Install Secure Boot Violation Asus Maximus VII Ranger

    I have been using Windows 7 UEFI for approx. 5 months without an issue (my orig thread). I had not applied any updates to OS other than what Agent's patching scripts did to the Win7 SP1 USB UEFI install I made.

    On the 6th of April I decided to reinstall Windows as I'd been meddling around with "things" on my rig, I just wanted a fresh install. On the 7th of April I decided to hide some of the nagware updates and apply the others, as I did batch installs of 15 updates or so I rebooted after each set of updates.

    All went well until I only had approx. 5 "Important" updates and 10 "Optional" (IIRC), after doing those and rebooting I was greeted with:-


    Click image for larger version. 

Name:	z9xfLGY.jpg 
Views:	19 
Size:	243.8 KB 
ID:	56760


    I then disabled secure boot to get back into windows, I restored the computer to an earlier point prior to the last set of updates I applied and still I'd get the same screen on post with secure boot enabled. So next I went back a complete day, ie no updates but original state after installing OS and drivers, again same screen with secure boot on.

    Now as I have done no firmware updates the message can't be due to that IMO. As OS only has drivers that originally showed no violation it can't be that. Currently I think Windows update has done something and when I do restore to an earlier point that change is not being reverted.

    Only way "Secure Boot" will now function is if I change "Windows UEFI Mode" to "Other OS" or disable secure boot.


    Click image for larger version. 

Name:	nOHVlXJ.jpg 
Views:	10 
Size:	146.0 KB 
ID:	56761


    It seems I'm not alone with this issue, another Asus owner but Z170, orig link translated link. Another search revealed this video on YT (published 21/03/16), some of the comments also highlight they got issue with secure boot os type after windows update.

    When I select "Other OS" note "Platform Key (PK) State" shows "Unloaded", when I select "Key Management" all keys are loaded.


    Click image for larger version. 

Name:	rtGiN2X.jpg 
Views:	11 
Size:	128.0 KB 
ID:	56762


    I'm now thinking when I select "Other OS" technically Secure Boot is not functioning, the "Platform Key (PK) State" will only show "Loaded" on UEFI Screenshot 1 if "Windows UEFI Mode" is selected; which results in secure boot violation.

    So how do I go about checking what is causing the secure boot violation? are the PK keys no longer valid for whatever update has occurred to OS?

    I don't mind wiping install but do mind taking the time to reinstall updates 1 by 1 to see which creates the issue (if it is that).
    Last edited by gupsterg; 04-08-2016 at 03:02 PM.
    TR 1950X - Custom WC - Asus Zenith Extreme - G.Skill Ripjaws V 3200MHz C14 Quad - RX VEGA 64

    24/7 OC: R7 1700@3.8GHz - Archon IB-E X2 - Asus Crosshair VI Hero
    G.Skill Trident Z 3200MHz C14 - Sapphire Fury X (1145/545 ~17.2K GS 3DM FS)

    24/7 OC: i5 4690K @ 4.9GHz CPU@1.255v 4.4GHz Cache@1.10v - Archon SB-E X2 - Asus Maximus VII Ranger
    Sapphire Fury X (1145/545 ~17.7K GS 3DM FS)


  2. #2
    ROG Member Array lilorcarmy PC Specs
    lilorcarmy PC Specs
    MotherboardAsus ROG Maximus VII Impact
    ProcessorIntel Core I7-4790K
    Memory (part number)F3-2400C10D-16GTX
    Graphics Card #1STRIX-GTX980TI-DC3OC-6GD5-GAMING
    MonitorBenQ XL2420G
    Storage #1Samsung EVO 840 120GB SSD
    Storage #2Western Digital Blue WD10EZEX 1TB 7200 RPM 64MB
    CPU CoolerCorsair H100i GTX
    CasePhanteks Enthoo EVOLV ITX
    Power SupplyCooler Master V850
    Keyboard Corsair Strafe RGB
    Mouse Logitech G502 Proteus Spectrum
    Headset Razer Hammerhead Pro
    Mouse Pad SteelSeries QCK mini
    Headset/Speakers Xfree XE222
    OS X17-59465.iso – Windows 7 Ultimate SP1 Media Refresh
    Network RouterCisco DPC2320 Cable Modem
    Accessory #1 Samsung SM951 128GB NVMe MZVPV128HDGM-00000 M.2 80mm PCIe 3.0 x4 SSD - OEM
    Accessory #2 Deepcool RGB Color LED

    Join Date
    Feb 2015
    Reputation
    10
    Posts
    8

    happened to my maximus vii impact after i installed some windows 7 updates. i just clear keys from the bios.

  3. #3
    ROG Guru: Green Belt Array gupsterg PC Specs
    gupsterg PC Specs
    MotherboardAsus Maximus VII Ranger
    Processori5 4690K
    Memory (part number)HyperX Savage 2400MHz 16GB
    Graphics Card #1Sapphire R9 Fury X (1145/545 Custom ROM)
    MonitorAsus MG279Q
    Storage #1Samsung 840 Evo 250GB
    Storage #2HGST 2TB
    CPU CoolerThermalRight Archon SB-E X2
    CaseSilverstone Temjin 06
    Power SupplyCooler Master V850
    Headset/Speakers HyperX Cloud
    OS Win 7 Pro x64 / Win 10 Pro x64
    gupsterg's Avatar
    Join Date
    Feb 2015
    Reputation
    76
    Posts
    652

    So to clarify you had installed as UEFI mode or Legacy?

    In C:\Windows\Panther\setupact.log it should state:-

    IBS Callback_BootEnvironmentDetect:FirmwareType 2.
    IBS Callback_BootEnvironmentDetect: Detected boot environment: EFI

    Your PC specs state "X17-59465.iso – Windows 7 Ultimate SP1 Media Refresh", I'm assuming you installed it using a UEFI USB?
    Last edited by gupsterg; 04-11-2016 at 02:18 PM.
    TR 1950X - Custom WC - Asus Zenith Extreme - G.Skill Ripjaws V 3200MHz C14 Quad - RX VEGA 64

    24/7 OC: R7 1700@3.8GHz - Archon IB-E X2 - Asus Crosshair VI Hero
    G.Skill Trident Z 3200MHz C14 - Sapphire Fury X (1145/545 ~17.2K GS 3DM FS)

    24/7 OC: i5 4690K @ 4.9GHz CPU@1.255v 4.4GHz Cache@1.10v - Archon SB-E X2 - Asus Maximus VII Ranger
    Sapphire Fury X (1145/545 ~17.7K GS 3DM FS)


  4. #4
    ROG Guru: Yellow Belt Array Black Phoenix PC Specs
    Black Phoenix PC Specs
    Laptop (Model)Asus GL551JW
    MotherboardAsus Rampage V Extreme
    ProcessorIntel Core i7-5960X
    Memory (part number)2x Kingston HyperX Fury Black 16GB (4 x 4GB) DDR4-2133
    Graphics Card #1EVGA GeForce GTX 980 Ti 6GB Classified ACX 2.0+
    Graphics Card #2EVGA GeForce GTX 980 Ti 6GB Classified ACX 2.0+
    Sound CardRealtek ALC1150 (On Board Audio)
    Monitor3x Asus PA279Q
    Storage #12x Sandisk X300S 128GB 2.5" RAID0 (OS)
    Storage #24x Western Digital Black 750GB 2.5" RAID10 (Storage)
    CPU Coolerbe quiet! DARK ROCK TF
    CaseCooler Master Stacker 832
    Power SupplyCooler Master V1200
    Keyboard Asus M801 ​Keyboard -​ Red Switc​hes
    Mouse Asus ROG Gladius
    Headset Audio-Technica ATH-M50x
    Mouse Pad SteelSeries QcK XXL
    Headset/Speakers Audioengine A5+B Plus S8B Subwoofer
    OS MS Windows 10 Pro X64
    Network RouterNETGEAR R8000 Nighthawk X6
    Accessory #1 Roland UA-55 Audio Interface
    Black Phoenix's Avatar
    Join Date
    Sep 2015
    Reputation
    10
    Posts
    152

    He used an ISO image from Microsoft and used a FAT32 USB Pen.

    Probably he created his bootable USB drive with Windows USB/DVD Download Tool and used the Official Windows ISO: Windows 7 Ultimate 64Bit: X17-59465.iso

    But before you reinstall your Windows, I recommend you to first in BIOS to Delete all Keys and then Load the Default Keys. After that then Start the UEFI installation and you shouldn't have any key violations.

    Or simply Delete all Keys and then Load the Default Keys to see if it starts without problems.
    Last edited by Black Phoenix; 04-12-2016 at 07:04 PM.

  5. #5
    ROG Guru: Green Belt Array gupsterg PC Specs
    gupsterg PC Specs
    MotherboardAsus Maximus VII Ranger
    Processori5 4690K
    Memory (part number)HyperX Savage 2400MHz 16GB
    Graphics Card #1Sapphire R9 Fury X (1145/545 Custom ROM)
    MonitorAsus MG279Q
    Storage #1Samsung 840 Evo 250GB
    Storage #2HGST 2TB
    CPU CoolerThermalRight Archon SB-E X2
    CaseSilverstone Temjin 06
    Power SupplyCooler Master V850
    Headset/Speakers HyperX Cloud
    OS Win 7 Pro x64 / Win 10 Pro x64
    gupsterg's Avatar
    Join Date
    Feb 2015
    Reputation
    76
    Posts
    652

    I used Rufus to make UEFI bootable USB (guide link), then this guide to install Win 7.

    Previous install of Win 7 Pro UEFI functioned without issue for months; I didn't wipe that install due to a violation.

    I had no installation issues previously or now but violation has occurred a day or so later after windows update was run on fresh install recently.

    I have saved / deleted / restored keys but will check by doing a new install on a spare HDD.
    TR 1950X - Custom WC - Asus Zenith Extreme - G.Skill Ripjaws V 3200MHz C14 Quad - RX VEGA 64

    24/7 OC: R7 1700@3.8GHz - Archon IB-E X2 - Asus Crosshair VI Hero
    G.Skill Trident Z 3200MHz C14 - Sapphire Fury X (1145/545 ~17.2K GS 3DM FS)

    24/7 OC: i5 4690K @ 4.9GHz CPU@1.255v 4.4GHz Cache@1.10v - Archon SB-E X2 - Asus Maximus VII Ranger
    Sapphire Fury X (1145/545 ~17.7K GS 3DM FS)


  6. #6
    Ex-employee Array
    Join Date
    Jun 2020
    Reputation
    108
    Posts
    2,154

    I know you guys already have figured out the solution on how to fix this issue, but for those who have this issue, we've provided a explanation of the issue and also a simple SOP to follow.

    Q: After installing Microsoft Update KB3133977 for Windows 7, some users may encounter a “Secure Boot Violation”, rendering the system unable to boot into the operating system.

    A: To protect user systems from malware attacks, ASUS motherboards implement the Microsoft Secure Boot feature by default, in order to support Windows 10. This feature performs a legal loader check to boot into the OS. With update KB3133977, Microsoft have changed Secure Boot policies, hence the system detects inconsistent OS loader keys, resulting in boot failure.

    The solution to this issue is to change UEFI Secure Boot settings as outlined in the steps below; this will allow the system to boot into the operating system successfully. Windows 7 does not require Secure boot, so the steps outlined below are perfectly safe and recommended when using this operating system.

    Step 1: Enter the UEFI and navigate to Advanced Menu->Boot->Secure Boot

    Step 2: Change “OS type” to “Other OS”

    Step 3: Press F10 to Save and reboot

    Step 4: Check the UEFI Advanced Menu->Boot->Secure Boot, and confirm the “Platform Key (PK) State” is changed to be unloaded.

    Step 5: Exit the UEFI, and the system will now boot normally.
    Last edited by Bahz; 04-19-2016 at 03:35 AM.

  7. #7
    ROG Guru: Green Belt Array gupsterg PC Specs
    gupsterg PC Specs
    MotherboardAsus Maximus VII Ranger
    Processori5 4690K
    Memory (part number)HyperX Savage 2400MHz 16GB
    Graphics Card #1Sapphire R9 Fury X (1145/545 Custom ROM)
    MonitorAsus MG279Q
    Storage #1Samsung 840 Evo 250GB
    Storage #2HGST 2TB
    CPU CoolerThermalRight Archon SB-E X2
    CaseSilverstone Temjin 06
    Power SupplyCooler Master V850
    Headset/Speakers HyperX Cloud
    OS Win 7 Pro x64 / Win 10 Pro x64
    gupsterg's Avatar
    Join Date
    Feb 2015
    Reputation
    76
    Posts
    652

    Many thanks for this information .

    Yes, issue is solved but at least we know:-

    a) which update causes the problem (I was gonna start painful 1 by 1 testing of each update).
    b) official explanation.
    TR 1950X - Custom WC - Asus Zenith Extreme - G.Skill Ripjaws V 3200MHz C14 Quad - RX VEGA 64

    24/7 OC: R7 1700@3.8GHz - Archon IB-E X2 - Asus Crosshair VI Hero
    G.Skill Trident Z 3200MHz C14 - Sapphire Fury X (1145/545 ~17.2K GS 3DM FS)

    24/7 OC: i5 4690K @ 4.9GHz CPU@1.255v 4.4GHz Cache@1.10v - Archon SB-E X2 - Asus Maximus VII Ranger
    Sapphire Fury X (1145/545 ~17.7K GS 3DM FS)


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •