{"id":7242,"date":"2025-07-08T21:15:01","date_gmt":"2025-07-09T04:15:01","guid":{"rendered":"https:\/\/www.terabyteunlimited.com\/kb\/?post_type=lsvr_kba&#038;p=7242"},"modified":"2025-07-08T21:15:01","modified_gmt":"2025-07-09T04:15:01","slug":"boot-failure-secure-boot-error-did-not-authenticate-no-signature","status":"publish","type":"lsvr_kba","link":"https:\/\/www.terabyteunlimited.com\/kb\/kb-articles\/boot-failure-secure-boot-error-did-not-authenticate-no-signature\/","title":{"rendered":"Boot Failure: Secure Boot Error (\u201cDid Not Authenticate\u201d, \u201cNo Signature\u201d)"},"content":{"rendered":"<p><span style=\"font-size: 14pt;\"><strong>Problem:<\/strong><\/span><\/p>\r\n<p>Attempting to boot <strong>TeraByte Boot Media<\/strong> <a href=\"https:\/\/www.terabyteunlimited.com\/kb\/kb-articles\/using-terabyte-boot-media-on-uefi-systems\/\">supported<\/a> on UEFI Systems with <strong>Safe Boot enabled<\/strong> results in messages similar to the following:<\/p>\r\n<ul>\r\n\t<li>Operating System Loader has no signature.\u00a0 Incompatible with SecureBoot.<\/li>\r\n\t<li>Selected Boot Image Did Not Authenticate.<\/li>\r\n\t<li>Invalid Signature Detected.<\/li>\r\n\t<li>Selected Boot Device Failed.<\/li>\r\n\t<li>Secure Boot Violation.<\/li>\r\n\t<li>Invalid Signature Detected.<\/li>\r\n\t<li>The system found unauthorized changes on the firmware, operating system, or UEFI drivers.<\/li>\r\n\t<li>Secure Boot Failure.<\/li>\r\n\t<li>The system has detected an invalid signature.<\/li>\r\n\t<li>Secure Boot:\u00a0 Unauthorized Image.<\/li>\r\n<\/ul>\r\n<p><span style=\"font-size: 14pt;\"><strong>Cause:<\/strong><\/span><\/p>\r\n<ul>\r\n\t<li>Microsoft\u2019s <strong>Secured-core PC<\/strong> requirements no longer allow systems to run UEFI code signed using the <strong>Microsoft 3rd Party UEFI CA (2011)<\/strong>.\u00a0 As a result, major PC manufactures now ship Windows-based systems with the <strong>Microsoft UEFI CA 2011 certificate disabled<\/strong> by default.<br \/>\r\n<br \/>\r\n<\/li>\r\n\t<li>TeraByte Boot Media is <strong>signed by Microsoft using this certificate<\/strong>.<\/li>\r\n<\/ul>\r\n<p><span style=\"font-size: 14pt;\"><strong>Workaround:<\/strong><\/span><\/p>\r\n<ul>\r\n\t<li>Use <strong>TBWinPE\/RE<\/strong> which boots into Windows.\u00a0 \u00a0Microsoft Windows is signed with a <strong>different Certificate<\/strong>, which remains enabled by default on all major PC systems.<\/li>\r\n<\/ul>\r\n<p><span style=\"font-size: 14pt;\"><strong>Solution:<\/strong><\/span><\/p>\r\n<p style=\"padding-left: 40px;\">To use TeraByte Boot Media, you must <strong data-start=\"1326\" data-end=\"1375\">enable the Microsoft UEFI CA 2011 certificate<\/strong> in your system\u2019s BIOS or UEFI setup. The steps vary by manufacturer. Examples:<\/p>\r\n<ul>\r\n\t<li><strong>Dell<\/strong>\r\n<ul style=\"list-style-type: square;\">\r\n\t<li><strong data-start=\"1472\" data-end=\"1484\">Security<\/strong> \u2192 Enable <strong data-start=\"1494\" data-end=\"1515\">Microsoft UEFI CA<br \/>\r\n<br \/>\r\n<\/strong><\/li>\r\n<\/ul>\r\n<\/li>\r\n\t<li data-start=\"1470\" data-end=\"1517\"><strong>Dell<\/strong>\r\n<ul style=\"list-style-type: square;\">\r\n\t<li data-start=\"1470\" data-end=\"1517\"><strong data-start=\"1520\" data-end=\"1542\">Boot Configuration<\/strong> \u2192 Enable <strong data-start=\"1552\" data-end=\"1573\">Microsoft UEFI CA<br \/>\r\n<br \/>\r\n<\/strong><\/li>\r\n<\/ul>\r\n<\/li>\r\n\t<li><strong>HP<\/strong>\r\n<ol>\r\n\t<li data-start=\"1587\" data-end=\"1746\">\r\n<p data-start=\"1590\" data-end=\"1634\">Go to <strong data-start=\"1596\" data-end=\"1608\">Security<\/strong> \u2192 <strong data-start=\"1611\" data-end=\"1632\">BIOS Secure Start<\/strong><\/p>\r\n<ul data-start=\"1638\" data-end=\"1746\">\r\n\t<li data-start=\"1638\" data-end=\"1692\">\r\n<p data-start=\"1640\" data-end=\"1692\">Uncheck <strong data-start=\"1648\" data-end=\"1690\">Sure Start Secure Boot Keys Protection<\/strong><\/p>\r\n<\/li>\r\n\t<li data-start=\"1696\" data-end=\"1746\">\r\n<p data-start=\"1698\" data-end=\"1746\">Press <strong data-start=\"1704\" data-end=\"1711\">Esc<\/strong>, exit BIOS, and <strong data-start=\"1728\" data-end=\"1744\">save changes<\/strong><\/p>\r\n<\/li>\r\n<\/ul>\r\n<\/li>\r\n\t<li data-start=\"1747\" data-end=\"2000\">\r\n<p data-start=\"1750\" data-end=\"1802\">Go to <strong data-start=\"1756\" data-end=\"1768\">Security<\/strong> \u2192 <strong data-start=\"1771\" data-end=\"1800\">Secure Boot Configuration<\/strong><\/p>\r\n<ul data-start=\"1806\" data-end=\"2000\">\r\n\t<li data-start=\"1806\" data-end=\"1835\">\r\n<p data-start=\"1808\" data-end=\"1835\">Enable <strong data-start=\"1815\" data-end=\"1833\">MS UEFI CA key<\/strong><\/p>\r\n<\/li>\r\n\t<li data-start=\"1839\" data-end=\"1889\">\r\n<p data-start=\"1841\" data-end=\"1889\">Press <strong data-start=\"1847\" data-end=\"1854\">Esc<\/strong>, return to <strong data-start=\"1866\" data-end=\"1887\">BIOS Secure Start<\/strong><\/p>\r\n<\/li>\r\n\t<li data-start=\"1893\" data-end=\"1948\">\r\n<p data-start=\"1895\" data-end=\"1948\">Re-check <strong data-start=\"1904\" data-end=\"1946\">Sure Start Secure Boot Keys Protection<\/strong><\/p>\r\n<\/li>\r\n\t<li data-start=\"1952\" data-end=\"2000\">\r\n<p data-start=\"1954\" data-end=\"2000\">Press <strong data-start=\"1960\" data-end=\"1967\">Esc<\/strong>, exit BIOS, and <strong data-start=\"1984\" data-end=\"2000\">save changes<\/strong><\/p>\r\n<\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ol>\r\n<\/li>\r\n\t<li data-start=\"1952\" data-end=\"2000\"><strong>HP<\/strong><strong><br \/>\r\n<\/strong>\r\n<ul style=\"list-style-type: square;\">\r\n\t<li><strong data-start=\"2009\" data-end=\"2021\">Advanced<\/strong> \u2192 <strong data-start=\"2024\" data-end=\"2053\">Secure Boot Configuration<\/strong> \u2192 Enable <strong data-start=\"2063\" data-end=\"2081\">MS UEFI CA key<\/strong><br \/>\r\n<br \/>\r\n<\/li>\r\n<\/ul>\r\n<\/li>\r\n\t<li><strong>Lenovo ThinkPad<\/strong>\r\n<ul style=\"list-style-type: square;\">\r\n\t<li><strong data-start=\"2110\" data-end=\"2122\">Security<\/strong> \u2192 <strong data-start=\"2125\" data-end=\"2154\">Secure Boot Configuration<\/strong> \u2192 Allow <strong data-start=\"2163\" data-end=\"2194\">Microsoft 3rd Party UEFI CA<br \/>\r\n<br \/>\r\n<\/strong><\/li>\r\n<\/ul>\r\n<\/li>\r\n\t<li><strong>Microsoft Surface Pro<\/strong>\r\n<ul style=\"list-style-type: square;\">\r\n\t<li><strong data-start=\"2229\" data-end=\"2244\">Secure Boot<\/strong> \u2192 Select <strong data-start=\"2254\" data-end=\"2282\">Microsoft &amp; 3rd Party CA<\/strong><\/li>\r\n<\/ul>\r\n<\/li>\r\n<\/ul>","protected":false},"excerpt":{"rendered":"<p>Problem: Attempting to boot TeraByte Boot Media supported on UEFI Systems with Safe Boot enabled results in messages similar to the following: Operating System Loader has no signature.\u00a0 Incompatible with SecureBoot. Selected Boot Image Did Not Authenticate. Invalid Signature Detected. Selected Boot Device Failed. Secure Boot Violation. Invalid Signature Detected. The system found unauthorized changes [&hellip;]<\/p>\n","protected":false},"author":5,"featured_media":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"lsvr_kba_cat":[1805],"lsvr_kba_tag":[],"class_list":["post-7242","lsvr_kba","type-lsvr_kba","status-publish","hentry","lsvr_kba_cat-shared-issues"],"_links":{"self":[{"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba\/7242","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba"}],"about":[{"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/types\/lsvr_kba"}],"author":[{"embeddable":true,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/comments?post=7242"}],"version-history":[{"count":3,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba\/7242\/revisions"}],"predecessor-version":[{"id":7245,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba\/7242\/revisions\/7245"}],"wp:attachment":[{"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/media?parent=7242"}],"wp:term":[{"taxonomy":"lsvr_kba_cat","embeddable":true,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba_cat?post=7242"},{"taxonomy":"lsvr_kba_tag","embeddable":true,"href":"https:\/\/www.terabyteunlimited.com\/kb\/wp-json\/wp\/v2\/lsvr_kba_tag?post=7242"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}