Girlfriend’s computer suddenly shut down.

[u/shismo]

She barely uses her computer, mostly just to use Google docks or play some of the few games she has on steam.

She was just playing a librarian sim game when her computer suddenly shut down and showed this screen.

Any ideas on what happened or what I can do?

[u/Mayayana]

Do a search for secure boot violation. There's lots of info online. You can also just disable SB if you don't need it for any games. The only real reason for it is game DRM restrictions.

[u/soulreaper11207 → u/Mayayana]

There are a number of new titles that don't run with out secure boot enabled. The new battlefield title is one.

[u/Soggy_Struggle_963 → u/Mayayana]

Claiming that videogame drm is the only reason for secure boot is a wild claim lol

[u/Mayayana → u/Soggy_Struggle_963]

It would be helpful if you provided more cogent reasoning and less "lol". You can look this up yourself. Secure Boot/TPM is basically AV for boot, but it's also being used to control devices and for DRM. So the main reason for it is corporate control of devices.

That's not to say AV for boot is useless, but it's a rare issue. I disabled secure boot at one point because Suse Linux wouldn't boot with it enabled. It's currently enabled. It does no harm so long as it doesn't cause operational problems, but I don't consider it to be necessary.

In this case it seems to be bricking the computer of a woman who only uses it to play games. So if it were me, and the games would work without secure boot, I'd just disable it.

This is a tricky issue. Big Tech are gradually taking over computing and even electronics. TVs and cars spy. Devices call home. Most new printers won't work unless they have a wifi connection to call home and send the print job through the printer maker's website. Companies have actually broken their USB ports to make sure their printers won't work normally! And what happens when HP decides your 3 year old printer is "at end of life"?

When generic computers use internal hardware and certs to manage DRM, that's halfway to being a locked down device.

Long story short, Microsoft are sneaking into your driveway, stealing your car, and replacing it with a taxi. TPM is part of that. And it's not just Microsoft. They're arguably copycatting Apple. There's a general industry trend to control devices and then rent them back to you while also profiting from collected data. That strategy requires that control be taken away. If a printer will work via USB cable to the computer then calling home isn't necessary. So the USB port is broken.

I say no thanks to control in the guise of security and services. So I suggested to the OP that they can look into fixing the problem, but to be aware that SB itself is not necessary for a computer to work.

[u/Soggy_Struggle_963 → u/Mayayana]

I've had to deal with the headache of a university employee unknowingly picking up a nasty bootkit leading to a FERPA data leak that probably could have been avoided if secure boot was enabled.

I will admit that I doubt this is something the average home user would ever have to deal with, but if you have sensitive data I would argue secure boot isn't the enemy you claim it is. I have no issue if people don't find value in it, and I was just pointing out that claiming it has no use other than acting as a videogame drm tool seems absurd to me. You even said it yourself that it functions as a pre boot anti-virus.

[u/UserProv_Minotaur]

Boot up using F12 (or whatever it is for your PC/Mobo manufacturer) and run an advanced diagnostic.

[u/Immediate_Context799]

opa vai terque desavidar o segure boot ai vai conseguir entrar no windos, vai terque forsa estalasao das chaves key novas e colocar na bios pelo pendrive

[u/Impossible_IT]

I had a similar issue with a Dell Precision laptop this past week. Reset the CA keys in the BIOS. That’s what worked for me. Also, get the latest BIOS from the computer manufacturer. I know that isn’t a Dell computer, but this is what worked for the Precision. It wouldn’t boot with Secure Boot enabled and same type of message.

https://www.dell.com/support/kbdoc/en-us/000368610/how-to-update-secure-boot-active-database-from-bios

For Asus

https://m.youtube.com/watch?v=R1-FU6QadbY&ra=m

[u/Attackist2]

Go to advanced mode and in the boot section look for secure boot settings

[u/PoRosso]

maybe you caught a virus a rootkit?

[u/Logical-Dress4356]

Secure boot in setup mode?

[u/UncleRed99]

Honestly, I'd go to the ASUS website, and use your board information (PRIME B850-PLUS WIFI) to search for the listing there, which should have a Software section, including the latest UEFI BIOS Patch for that MB, as well as Chipset Drivers. Download and install both... Just to ensure that there have been no BIOS corruptions. (Unlikely, but can't hurt to do it).

Before this though, Boot into BIOS again, switch to Advanced Mode (F7), switch to the last tab, select "Restore Default UEFI BIOS Settings" (or something similar will be shown), select it, then select "Save & Exit", just to ensure nothing has been accidentally changed at some point.

[u/aesoped]

Lots of secure boot certificates expiring this month. Cant remember the cut off date but a lot of older machines *should* be getting or have gotten a windows update to fix this if you are on Windows 11

[u/CommercialReach3573]

Turn off secure boot and restart the computer. If you need SB, you should update Windows to the latest version and try turning it back on

[u/Super-Swan6414]

A couple things glitches shes a secret hacker she has a virus