Secure Boot prevents Windows from booting — error 0xc0430001

Question

Secure Boot prevents Windows from booting — error 0xc0430001

Влад Хлопов 0

Hello. I’m asking for help diagnosing a Secure Boot issue.

Computer configuration

Motherboard: MSI B550M PRO-VDH (MS-7C95)

BIOS: latest version, 7C95v2P2

Windows 10, build 19045

The problem

When I enable Secure Boot in UEFI settings, Windows starts with a recovery screen showing error 0xc0430001. If I disable Secure Boot, the computer boots normally.

What I’ve already checked

BitLocker is disabled on the system drive, which is fully decrypted.

The active bootloader, \EFI\Microsoft\Boot\bootmgfw.efi, has a valid Microsoft Windows signature issued by Windows UEFI CA 2023.

In Windows, UEFICA2023Status is set to Updated. The TPM-WMI event log contains Event ID 1808 entries reporting that the Secure Boot certificates/keys were updated successfully.

With Secure Boot disabled, PowerShell reports SecureBoot = 0 and SetupMode = 0.

I have not reset the Secure Boot keys.

How this started

I downloaded the new Call of Duty: Warzone, and it prompted me to update the BIOS. I went to MSI’s official website, downloaded the latest BIOS version to a USB flash drive, and installed it using M-FLASH. The computer booted after the update, but then I encountered this issue. I searched online, went into the BIOS, and disabled Secure Boot. Windows has worked since then, but I need Secure Boot enabled.

I’ve spent the last three days trying to fix this without success. Please let me know what additional information or logs you need to diagnose the issue, and what safe fix you recommend for this motherboard and BIOS version. I need to preserve the installed Secure Boot keys and avoid damaging the Windows installation or its boot configuration.Hello. I’m asking for help diagnosing a Secure Boot issue.

Computer configuration

Motherboard: MSI B550M PRO-VDH (MS-7C95)

BIOS: latest version, 7C95v2P2

Windows 10, build 19045

The problem

When I enable Secure Boot in UEFI settings, Windows starts with a recovery screen showing error 0xc0430001. If I disable Secure Boot, the computer boots normally.

What I’ve already checked

BitLocker is disabled on the system drive, which is fully decrypted.

The active bootloader, \EFI\Microsoft\Boot\bootmgfw.efi, has a valid Microsoft Windows signature issued by Windows UEFI CA 2023.

In Windows, UEFICA2023Status is set to Updated. The TPM-WMI event log contains Event ID 1808 entries reporting that the Secure Boot certificates/keys were updated successfully.

With Secure Boot disabled, PowerShell reports SecureBoot = 0 and SetupMode = 0.

I have not reset the Secure Boot keys.

How this started

I downloaded the new Call of Duty: Warzone, and it prompted me to update the BIOS. I went to MSI’s official website, downloaded the latest BIOS version to a USB flash drive, and installed it using M-FLASH. The computer booted after the update, but then I encountered this issue. I searched online, went into the BIOS, and disabled Secure Boot. Windows has worked since then, but I need Secure Boot enabled.

I’ve spent the last three days trying to fix this without success. Please let me know what additional information or logs you need to diagnose the issue, and what safe fix you recommend for this motherboard and BIOS version. I need to preserve the installed Secure Boot keys and avoid damaging the Windows installation or its boot configuration.

0 comments

3 answers

Your answer

Answer 1

Влад Хлопов 0

Performed the recovery using: Copied C:\Windows\Boot\EFI\SecureBootRecovery.efi

Formatted the USB drive to FAT32

Created \EFI\BOOT\

I put the file there and renamed it to bootx64.efi

I booted the infected computer from this USB drive and started the recovery utility.

Nothing has changed.

0 comments

Answer 2

Ivan B 127.2K Independent Advisor

Hi ,

Search for msinfo32.exe in the search bar, take a screenshot, and post it here so we can see the correct laptop model or desktop configuration.

Access the Disk Management tool, take a screenshot, and post it here.

Thanks.

Влад Хлопов 0 Reputation points

2026-11-10T20:13:21.7133333+00:00
Ivan B 127.2K Reputation points Independent Advisor

2026-11-10T22:52:35.6333333+00:00

Hi,

I think I understand. Could you access the BIOS, go to the "Manager Keys" tab, and take a photo?

We will need to manually add the 2023 UEFI keys.

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T03:38:49.93+00:00

Yes, of course, I will do it after graduation!
Влад Хлопов 0 Reputation points

2026-11-11T03:44:06.08+00:00

it's so strangely simple, I reset these keys a bunch of times to the standard ones, and everything will work fine if I enter them manually, because I'll have to switch to custom mode in the bios.
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T11:01:39.3533333+00:00

Hi,

I understand; however, if the key isn't loading, it’s either because the update wasn't performed, or it’s loading the old, default keys.

Thanks.
Влад Хлопов 0 Reputation points

2026-11-11T18:11:57.9+00:00
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T18:27:38.0933333+00:00

Hi,

Please try the following: access the PK under "Key Management" and check if there is an option to "Update," "modify," or "delete."

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T18:57:55.64+00:00

There's just this
Влад Хлопов 0 Reputation points

2026-11-11T18:59:11.61+00:00

as I understand it, I don't have such an item.
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T19:05:23.19+00:00

Hii,

Create a Windows installation drive; you will need it.

https://www.microsoft.com/en-us/software-download/windows11

Download it from the link above and use the Media Creation Tool to create the installation drive.

Connect the USB flash drive > run the Media Creation Tool > select "Create installation media" > choose the USB flash drive option > select the drive letter for the USB flash drive.

Wait for the process to finish

Download the SecureBootRecovery.efi file from the link below and place it in the EFI\Boot\ folder on your USB flash drive, replacing the existing bootx64.efi file.

https://drive.google.com/file/d/1XU8w6Rn_EsZl5B3DPz6kf9DZST6M7jqI/view?usp=sharing

https://www.virustotal.com/gui/file/e690f975f6fde4e5c821225d379432d98d3096da906c6bb22f72ad88edac839c/detection

Sha5: 5b28f38ede58088176d5aaa716b310fbd0625ca2

After replacing the file, access the BIOS, set the system to boot from the USB flash drive, and ensure Secure Boot is disabled.

Wait about 10 minutes; the screen will remain black during this time.

Restart the PC, access the BIOS, remove the USB flash drive, and enable Secure Boot. Save the BIOS settings, restart the BIOS, check if "Windows Boot Manager" appears, and try to boot into Windows.

Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Let me know if it worked; remember that "Windows Boot Manager" must appear in the boot order, and CSM must be disabled.

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T19:10:46.12+00:00

So, I’ll have to download Windows 11, right? Is there an option to stick with Windows 10?
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T19:14:33.8466667+00:00

Hii,

There is no need to upgrade to Windows 11; simply start the system and follow the procedure to update the keys.

Once you have followed the procedure and the keys have been updated, you will be able to continue using Windows 10 without any issues.

That said, it would be a good idea to migrate to Windows 11 rather than staying on Windows 10—especially since support for Windows 10 has already ended (with only ESU available until next year)—but that is just my personal opinion.

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T19:24:04.4333333+00:00

My media tool isn’t working. Can I use rufus?
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T19:27:47.66+00:00

Hi,

I believe it might work with Rufus as well.

However, you will need to have a Windows 11 ISO file.

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T19:36:00.7733333+00:00

Listen, I installed Rufus, and it gave me this story — should I click on it?
Влад Хлопов 0 Reputation points

2026-11-11T19:36:45.8966667+00:00
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T19:38:21.8133333+00:00

Hi,

In the case of Rufus, it offers an option to update the keys, though I haven't tested that option myself; try selecting "no" initially and proceed with the steps.

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T20:16:46.02+00:00

my monitor turns off every 10 seconds, a Bios boot window appears for half a second, and this window appears again. is this normal?
Влад Хлопов 0 Reputation points

2026-11-11T20:18:24.67+00:00

This one appears, followed immediately by that window with a 10-second delay.
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T20:20:54.1466667+00:00

Hi,

The procedure indicates an issue with the keys; please do the following: access the BIOS, set "Windows Boot Manager" as the first boot option, and enable "Secure Boot."

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T20:23:14.2133333+00:00

This appears for another millisecond and immediately disappears, if I managed to catch it.
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T20:27:24.7966667+00:00

Hi,

Sorry, I should have mentioned that you need to remove the USB flash drive, set Windows Boot Manager as the first option in the BIOS (under the boot tab), and enable Secure Boot.

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T20:28:08.8333333+00:00

I booted through windows boot manager, turned on secure boot, and got the error again
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T20:32:57.56+00:00

Hi,

There might be a conflict with the keys, and since it’s already using UEFI 2023, that could be the issue. Try this: clear the keys while Secure Boot is enabled, then attempt to boot Windows and see whether it results in a BSOD or boots successfully.

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T20:37:08.8166667+00:00

Hi,

Sorry, I should have mentioned that you need to remove the USB flash drive, set Windows Boot Manager as the first option in the BIOS (under the boot tab), and enable Secure Boot.

Thanks

I did this, it still gives an error.
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T20:41:55.78+00:00

Hi,

I am aware of this, so please access the BIOS and go to Secure Boot > Key Management > Clear Keys; clear the keys, save your changes, and then try to start Windows.

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T20:58:24.67+00:00

https://www.dropbox.com/t/GxKzbIv2vFpZzPDv

Here's a video of what's going on, it'll be easier this way.
Влад Хлопов 0 Reputation points

2026-11-11T20:59:43.0533333+00:00

In the end, I click delete everywhere and nothing happens.
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T21:07:10.58+00:00

Hi,

It’s strange that you deleted the keys, as they should load automatically. Try this: change the Secure Boot mode to "Setup" (instead of "Custom") and save the settings.

After that, check if Windows boots up.

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T21:23:38.17+00:00

I don’t have a "setup" mode—only "standard" and "custom."
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T21:25:37.6+00:00

Hi,

Set to Standard Mode

Thanks
Влад Хлопов 0 Reputation points

2026-11-11T21:32:03.02+00:00

When I set it to "Standard Mode," it asks to reset the keys. I’ve tried both resetting them and not resetting them, but in either case, if Secure Boot is enabled, I get a blue screen error.

I hope you’ll be able to help me, but it’s already 12:30 AM my time, so unfortunately, I won’t be able to continue until tomorrow. Have a good night!
Ivan B 127.2K Reputation points Independent Advisor

2026-11-11T21:34:28.01+00:00

Hi,

It’s strange that the keys get reloaded upon a reset, causing a conflict with Windows—I’m not sure if it’s because of the 2023 UEFI version and Windows 10 failing to recognize the keys.

When you perform a reset, the keys are loaded again.

Try selecting the keys manually; that might work.

Thanks.

Answer 3

Влад Хлопов 0

User's image

0 comments