Share via

How to fix secure boot mismatch in keys on ASUS D700SA

DDK105 25 Reputation points
2026-06-03T18:56:47.14+00:00

Had a USB overage issue popping up, so finally reinstalled Windows 11 Pro on this computer, now secure boot does not work when I turn on. Get error and I think the keys are corrupted or mismatched. Tried restoring factory in Bios but did now help

Windows for home | Windows 11 | Security and privacy
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ivan B 113.7K Reputation points Independent Advisor
    2026-06-03T19:42:30.45+00:00

    Hii,

    In the case of the error of Invalid or Expired keys?

    Search for msinfo32.exe in the search bar, take a screenshot, and post it here so we can see the correct laptop model or desktop configuration.

    Thanks

    Was this answer helpful?

  2. AI answer

    2026-06-03T18:57:02.4566667+00:00

    Follow these steps to repair Secure Boot key issues and get Secure Boot working again.

    1. Boot into UEFI/BIOS setup
      1. Turn on or restart the ASUS D700SA.
      2. While it is starting, press the ASUS firmware key repeatedly (commonly F2, Del, F10, F11, or F12) until the firmware/BIOS menu opens. If the key is unclear or the screen passes too fast, check ASUS support.
      3. Alternatively, from Windows: select Power > hold Shift while selecting Restart, then choose Troubleshoot > Advanced options > UEFI Firmware Settings and restart into firmware.
    2. Disable Secure Boot temporarily
      1. In the firmware menus, go to the Security, Boot, or Authentication tab.
      2. Locate Secure Boot and set it to Disabled.
      3. Save changes and restart to confirm Windows still boots normally.
    3. Reset Secure Boot keys to factory defaults
      1. Boot back into the UEFI/BIOS setup.
      2. In the Secure Boot section, look for options related to keys, such as Install Default Keys, Restore Factory Keys, or Reset to factory defaults.
      3. Use the option that resets or installs the manufacturer’s default Secure Boot keys (avoid any option labeled only Clear; prefer Reset or Install default so the keys are restored, not just erased).
      4. Save changes and exit.
    4. Re‑enable Secure Boot
      1. Boot again into the UEFI/BIOS setup.
      2. Confirm the system is set to UEFI boot mode (not Legacy/CSM). If CSM/Legacy is enabled, disable it so the system boots in pure UEFI mode.
      3. In the Secure Boot section, set Secure Boot to Enabled.
      4. If the firmware offers a mode such as Standard or Windows UEFI mode, select that.
      5. Save changes and exit. The PC should reboot into Windows with Secure Boot on.
    5. If the PC fails to boot after enabling Secure Boot
      1. Enter UEFI/BIOS again and disable Secure Boot so the system can start.
      2. From Windows, open an elevated Command Prompt and repair boot files if needed:
        • mountvol s: /s
        • del s:\*.\* /f /s /q
        • bcdboot %systemroot% /s S: Run each command separately and press Enter after each.
      3. Restart the device back into Windows.
      4. Go back into UEFI/BIOS, re‑enable Secure Boot, save, and reboot.
    6. If Secure Boot still cannot be enabled
      1. Disable Secure Boot again so the device can start.
      2. In UEFI/BIOS, reset Secure Boot keys to factory defaults once more (using Reset rather than Clear if both exist).
      3. If problems persist, contact ASUS support for this specific model, as the key store or firmware may require vendor‑specific recovery.

    These steps address corrupted or mismatched Secure Boot keys by resetting them to factory defaults, rebuilding Windows boot files if necessary, and then re‑enabling Secure Boot.

    References:

    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.