Results 1 to 7 of 7
-
04-08-2016 02:59 PM #1ROG Guru: Brown Belt Array gupsterg PC Specs
gupsterg PC Specs Motherboard Asus Maximus VII Ranger Processor i5 4690K Memory (part number) HyperX Savage 2400MHz 16GB Graphics Card #1 Sapphire R9 Fury X (1145/545 Custom ROM) Monitor Asus MG279Q Storage #1 Samsung 840 Evo 250GB Storage #2 HGST 2TB CPU Cooler ThermalRight Archon SB-E X2 Case Silverstone Temjin 06 Power Supply Cooler Master V850 Headset/Speakers HyperX Cloud OS Win 7 Pro x64 / Win 10 Pro x64
- Join Date
- Feb 2015
- Reputation
- 103
- Posts
- 1,017
Windows 7 Pro UEFI Install Secure Boot Violation Asus Maximus VII Ranger
I have been using Windows 7 UEFI for approx. 5 months without an issue (my orig thread). I had not applied any updates to OS other than what Agent's patching scripts did to the Win7 SP1 USB UEFI install I made.
On the 6th of April I decided to reinstall Windows as I'd been meddling around with "things" on my rig, I just wanted a fresh install. On the 7th of April I decided to hide some of the nagware updates and apply the others, as I did batch installs of 15 updates or so I rebooted after each set of updates.
All went well until I only had approx. 5 "Important" updates and 10 "Optional" (IIRC), after doing those and rebooting I was greeted with:-
I then disabled secure boot to get back into windows, I restored the computer to an earlier point prior to the last set of updates I applied and still I'd get the same screen on post with secure boot enabled. So next I went back a complete day, ie no updates but original state after installing OS and drivers, again same screen with secure boot on.
Now as I have done no firmware updates the message can't be due to that IMO. As OS only has drivers that originally showed no violation it can't be that. Currently I think Windows update has done something and when I do restore to an earlier point that change is not being reverted.
Only way "Secure Boot" will now function is if I change "Windows UEFI Mode" to "Other OS" or disable secure boot.
It seems I'm not alone with this issue, another Asus owner but Z170, orig link translated link. Another search revealed this video on YT (published 21/03/16), some of the comments also highlight they got issue with secure boot os type after windows update.
When I select "Other OS" note "Platform Key (PK) State" shows "Unloaded", when I select "Key Management" all keys are loaded.
I'm now thinking when I select "Other OS" technically Secure Boot is not functioning, the "Platform Key (PK) State" will only show "Loaded" on UEFI Screenshot 1 if "Windows UEFI Mode" is selected; which results in secure boot violation.
So how do I go about checking what is causing the secure boot violation? are the PK keys no longer valid for whatever update has occurred to OS?
I don't mind wiping install but do mind taking the time to reinstall updates 1 by 1 to see which creates the issue (if it is that).Last edited by gupsterg; 04-08-2016 at 03:02 PM.
Intel Defector
AMD Rebel
TR 1950X - Custom WC - Asus Zenith Extreme Alpha - G.Skill Trident Z 3400MHz C14 QC - RX VEGA 64R5 3600 - Custom WC - Asus Crosshair VII Hero Wifi - G.Skill Ripjaws V 3800MHz C16 - Sapphire HD 5850 Toxic
24/7 OC: i5 4690K @ 4.9GHz CPU@1.255v 4.4GHz Cache@1.10v - Archon SB-E X2 - Asus Maximus VII Ranger
Sapphire Fury X (1145/545 ~17.7K GS 3DM FS)
-
04-11-2016 11:04 AM #2ROG Member Array lilorcarmy PC Specs
lilorcarmy PC Specs Motherboard Asus ROG Maximus VII Impact Processor Intel Core I7-4790K Memory (part number) F3-2400C10D-16GTX Graphics Card #1 STRIX-GTX980TI-DC3OC-6GD5-GAMING Monitor BenQ XL2420G Storage #1 Samsung EVO 840 120GB SSD Storage #2 Western Digital Blue WD10EZEX 1TB 7200 RPM 64MB CPU Cooler Corsair H100i GTX Case Phanteks Enthoo EVOLV ITX Power Supply Cooler Master V850 Keyboard Corsair Strafe RGB Mouse Logitech G502 Proteus Spectrum Headset Razer Hammerhead Pro Mouse Pad SteelSeries QCK mini Headset/Speakers Xfree XE222 OS X17-59465.iso – Windows 7 Ultimate SP1 Media Refresh Network Router Cisco DPC2320 Cable Modem Accessory #1 Samsung SM951 128GB NVMe MZVPV128HDGM-00000 M.2 80mm PCIe 3.0 x4 SSD - OEM Accessory #2 Deepcool RGB Color LED
- Join Date
- Feb 2015
- Reputation
- 10
- Posts
- 8
happened to my maximus vii impact after i installed some windows 7 updates. i just clear keys from the bios.
-
04-11-2016 02:15 PM #3ROG Guru: Brown Belt Array gupsterg PC Specs
gupsterg PC Specs Motherboard Asus Maximus VII Ranger Processor i5 4690K Memory (part number) HyperX Savage 2400MHz 16GB Graphics Card #1 Sapphire R9 Fury X (1145/545 Custom ROM) Monitor Asus MG279Q Storage #1 Samsung 840 Evo 250GB Storage #2 HGST 2TB CPU Cooler ThermalRight Archon SB-E X2 Case Silverstone Temjin 06 Power Supply Cooler Master V850 Headset/Speakers HyperX Cloud OS Win 7 Pro x64 / Win 10 Pro x64
- Join Date
- Feb 2015
- Reputation
- 103
- Posts
- 1,017
So to clarify you had installed as UEFI mode or Legacy?
In C:\Windows\Panther\setupact.log it should state:-
IBS Callback_BootEnvironmentDetect:FirmwareType 2.
IBS Callback_BootEnvironmentDetect: Detected boot environment: EFI
Your PC specs state "X17-59465.iso – Windows 7 Ultimate SP1 Media Refresh", I'm assuming you installed it using a UEFI USB?Last edited by gupsterg; 04-11-2016 at 02:18 PM.
Intel Defector
AMD Rebel
TR 1950X - Custom WC - Asus Zenith Extreme Alpha - G.Skill Trident Z 3400MHz C14 QC - RX VEGA 64R5 3600 - Custom WC - Asus Crosshair VII Hero Wifi - G.Skill Ripjaws V 3800MHz C16 - Sapphire HD 5850 Toxic
24/7 OC: i5 4690K @ 4.9GHz CPU@1.255v 4.4GHz Cache@1.10v - Archon SB-E X2 - Asus Maximus VII Ranger
Sapphire Fury X (1145/545 ~17.7K GS 3DM FS)
-
04-12-2016 04:42 PM #4ROG Guru: Yellow Belt Array Black Phoenix PC Specs
Black Phoenix PC Specs Laptop (Model) Asus GL551JW Motherboard Asus Rampage V Extreme Processor Intel Core i7-5960X Memory (part number) 2x Kingston HyperX Fury Black 16GB (4 x 4GB) DDR4-2133 Graphics Card #1 EVGA GeForce GTX 980 Ti 6GB Classified ACX 2.0+ Graphics Card #2 EVGA GeForce GTX 980 Ti 6GB Classified ACX 2.0+ Sound Card Realtek ALC1150 (On Board Audio) Monitor 3x Asus PA279Q Storage #1 2x Sandisk X300S 128GB 2.5" RAID0 (OS) Storage #2 4x Western Digital Black 750GB 2.5" RAID10 (Storage) CPU Cooler be quiet! DARK ROCK TF Case Cooler Master Stacker 832 Power Supply Cooler Master V1200 Keyboard Asus M801 Keyboard - Red Switches Mouse Asus ROG Gladius Headset Audio-Technica ATH-M50x Mouse Pad SteelSeries QcK XXL Headset/Speakers Audioengine A5+B Plus S8B Subwoofer OS MS Windows 10 Pro X64 Network Router NETGEAR R8000 Nighthawk X6 Accessory #1 Roland UA-55 Audio Interface
- Join Date
- Sep 2015
- Reputation
- 10
- Posts
- 152
He used an ISO image from Microsoft and used a FAT32 USB Pen.
Probably he created his bootable USB drive with Windows USB/DVD Download Tool and used the Official Windows ISO: Windows 7 Ultimate 64Bit: X17-59465.iso
But before you reinstall your Windows, I recommend you to first in BIOS to Delete all Keys and then Load the Default Keys. After that then Start the UEFI installation and you shouldn't have any key violations.
Or simply Delete all Keys and then Load the Default Keys to see if it starts without problems.Last edited by Black Phoenix; 04-12-2016 at 07:04 PM.
-
04-16-2016 08:49 AM #5ROG Guru: Brown Belt Array gupsterg PC Specs
gupsterg PC Specs Motherboard Asus Maximus VII Ranger Processor i5 4690K Memory (part number) HyperX Savage 2400MHz 16GB Graphics Card #1 Sapphire R9 Fury X (1145/545 Custom ROM) Monitor Asus MG279Q Storage #1 Samsung 840 Evo 250GB Storage #2 HGST 2TB CPU Cooler ThermalRight Archon SB-E X2 Case Silverstone Temjin 06 Power Supply Cooler Master V850 Headset/Speakers HyperX Cloud OS Win 7 Pro x64 / Win 10 Pro x64
- Join Date
- Feb 2015
- Reputation
- 103
- Posts
- 1,017
I used Rufus to make UEFI bootable USB (guide link), then this guide to install Win 7.
Previous install of Win 7 Pro UEFI functioned without issue for months; I didn't wipe that install due to a violation.
I had no installation issues previously or now but violation has occurred a day or so later after windows update was run on fresh install recently.
I have saved / deleted / restored keys but will check by doing a new install on a spare HDD.Intel Defector
AMD Rebel
TR 1950X - Custom WC - Asus Zenith Extreme Alpha - G.Skill Trident Z 3400MHz C14 QC - RX VEGA 64R5 3600 - Custom WC - Asus Crosshair VII Hero Wifi - G.Skill Ripjaws V 3800MHz C16 - Sapphire HD 5850 Toxic
24/7 OC: i5 4690K @ 4.9GHz CPU@1.255v 4.4GHz Cache@1.10v - Archon SB-E X2 - Asus Maximus VII Ranger
Sapphire Fury X (1145/545 ~17.7K GS 3DM FS)
-
04-19-2016 02:36 AM #6Ex-employee Array
- Join Date
- Jun 2020
- Reputation
- 108
- Posts
- 2,154
I know you guys already have figured out the solution on how to fix this issue, but for those who have this issue, we've provided a explanation of the issue and also a simple SOP to follow.
Q: After installing Microsoft Update KB3133977 for Windows 7, some users may encounter a “Secure Boot Violation”, rendering the system unable to boot into the operating system.
A: To protect user systems from malware attacks, ASUS motherboards implement the Microsoft Secure Boot feature by default, in order to support Windows 10. This feature performs a legal loader check to boot into the OS. With update KB3133977, Microsoft have changed Secure Boot policies, hence the system detects inconsistent OS loader keys, resulting in boot failure.
The solution to this issue is to change UEFI Secure Boot settings as outlined in the steps below; this will allow the system to boot into the operating system successfully. Windows 7 does not require Secure boot, so the steps outlined below are perfectly safe and recommended when using this operating system.
Step 1: Enter the UEFI and navigate to Advanced Menu->Boot->Secure Boot
Step 2: Change “OS type” to “Other OS”
Step 3: Press F10 to Save and reboot
Step 4: Check the UEFI Advanced Menu->Boot->Secure Boot, and confirm the “Platform Key (PK) State” is changed to be unloaded.
Step 5: Exit the UEFI, and the system will now boot normally.Last edited by Bahz; 04-19-2016 at 03:35 AM.
-
04-19-2016 05:48 AM #7ROG Guru: Brown Belt Array gupsterg PC Specs
gupsterg PC Specs Motherboard Asus Maximus VII Ranger Processor i5 4690K Memory (part number) HyperX Savage 2400MHz 16GB Graphics Card #1 Sapphire R9 Fury X (1145/545 Custom ROM) Monitor Asus MG279Q Storage #1 Samsung 840 Evo 250GB Storage #2 HGST 2TB CPU Cooler ThermalRight Archon SB-E X2 Case Silverstone Temjin 06 Power Supply Cooler Master V850 Headset/Speakers HyperX Cloud OS Win 7 Pro x64 / Win 10 Pro x64
- Join Date
- Feb 2015
- Reputation
- 103
- Posts
- 1,017
Many thanks for this information
.
Yes, issue is solved but at least we know:-
a) which update causes the problem (I was gonna start painful 1 by 1 testing of each update).
b) official explanation.Intel Defector
AMD Rebel
TR 1950X - Custom WC - Asus Zenith Extreme Alpha - G.Skill Trident Z 3400MHz C14 QC - RX VEGA 64R5 3600 - Custom WC - Asus Crosshair VII Hero Wifi - G.Skill Ripjaws V 3800MHz C16 - Sapphire HD 5850 Toxic
24/7 OC: i5 4690K @ 4.9GHz CPU@1.255v 4.4GHz Cache@1.10v - Archon SB-E X2 - Asus Maximus VII Ranger
Sapphire Fury X (1145/545 ~17.7K GS 3DM FS)

Reply With Quote