A linux noob here. I just installed Fedora 40 Workstation next to my Windows 11 install (wanted to dual boot). I choose a to install Fedora 40 on another drive as i wanted them on separate drives.
After installing Fedora it works perfect, but my Windows 11 install refuses to boot. With an error (Secure boot signature not found). Also it shows up as “UEFI OS”. But i can still see and transfer files from my Windows 11 installation.
What i tried already;
Booting with secure boot off and on
Make a w11 bootable to restore boot. (it could not fix itself)
I don’t want to reinstall Windows 11. So if anyone can help with my problem that would be great
It doesn’t sound right that it would error with “secure boot signature not found” if secure boot is turned off. Are you sure it is turned off?
Edit: Oh, I see, if you encrypted your drive with Bitlocker, then MS Windows won’t boot if you try to turn off secure boot. You have to turn off Bitlocker first (or never turn it on) if you want to disable secure boot.
That device identifier looks like a FAT32 UUID. I guess the whole drive is encrypted so that it cannot even read the partition table or filesystem UUIDs.
You’ll have to get it to work with secure boot turned on.
I thought Windows 11 installed and enabled Bitlocker automatically. But when i enable it again i still get the error as described earlier (Secure boot signature not found). I know W11 needs secure boot and TPM to boot up.
To give a more context. Before installing Fedora my W11 install worked fine. There was no problem at all. After the installation i didn’t work anymore. I’m clueless why it doesn’t boot anymore, and of course how to fix it…
I think there is a key in the TPM. If you reset the TPM, that key might be removed. There appears to be some documentation here: Disabling Secure Boot | Microsoft Learn
Among other things, it says “On some PCs, select Custom , and then load the Secure Boot keys that are built into the PC.” Did you try that?
I don’t know how to work with MS Windows anymore. I switched to using Linux long before secure boot existed. I just hope Linux never starts encrypting people’s files without their knowledge. I’d want to be sure I know how to recover things before I ever turned something like that on. Maybe someone else will be able to help, but this forum might not be the best place to find answers about MS Windows problems.
Please provide details of the current disk layout and EFI boot configuration from running sudo fdisk -lx | cat and efibootmgr in a terminal. Post the output as pre-formatted text (use the </> button from the top line of the text entry panel). The |cat will wrap the overly long lines that might otherwise be truncated when you paste terminal output.
I dual boot Windows 11 and Fedora, but rarely use W11. W11 updates have often caused problems booting Fedora. We can hope W11 has improved . If not, the above requested details may help you recover Fedora after a W11 update. You should review manual pages for fdisk and efibootmgr so you understant the output you are posting.
Have you tried booting your PC with the second hard drive disconnected? I think changes in the hardware configuration can affect the TPM measurements; especially if the added drive is earlier in the boot sequence.
Edit: Found this just now with a search for information about secure boot and hardware changes (I don’t know if it is true or under what circumstances it might apply):
UPDATE: i spoke with many AMD and Microsoft’s technicians and it appears that one’s got to disable secure boot before any hardware change and re-enable it after the upgrade to not incur in issues like inability to boot the OS… lol
Tried it. No result. Meanwhile i also tried to run the Bootrec / fixmbr, Bootrec / fixboot, Bootrec /rebuildbcd in the CMD on the w11 installation media. Only get Access denied at /fixboot… Am really at my wit’s end.
Meanwhile i also tried to run the Bootrec / fixmbr, Bootrec / fixboot, Bootrec /rebuildbcd in the CMD on the w11 installation media. Only get Access denied at /fixboot… Am really at my wit’s end.