Hardware⏱️ 3 min read📅 2026-06-11

How to Fix: Why am I getting a “Security Error: Secure boot version check failed” error when trying to boot Windows setup from a USB flash drive?

Windows setup USB flash drive error due to Secure boot version check failed. Possible solution: Update UEFI firmware or disable Secure Boot.

Quick Answer: Update UEFI firmware to the latest version or disable Secure Boot to resolve the issue.

📋 Table of Contents

  1. 💡 Why You Are Getting This Error
  2. 🚀 How to Resolve This Issue
  3. ✨ Wrapping Up

The 'Security Error: Secure boot version check failed' error occurs when attempting to boot Windows setup from a USB flash drive. This issue affects users who have updated their system's UEFI firmware with the CA 2023 update, which now requires the use of a signed boot manager. The frustration comes from not being able to access the Windows installation media due to this security feature.

Fortunately, there are steps that can be taken to resolve this issue and regain access to the Windows setup.

💡 Why You Are Getting This Error

  • The primary reason for this error is the CA 2023 update requiring a signed boot manager. This update was intended to improve system security by ensuring only authorized boot managers are used. However, it has caused issues with older USB flash drives that do not support the new signing requirements.
  • Another possible cause could be an outdated or corrupted UEFI firmware version that is causing the secure boot version check failure.

🚀 How to Resolve This Issue

Updating Bootable Media to Use the PCA2023-Signed Boot Manager

  1. Step 1: Create a new USB flash drive with Windows setup files and use a tool like Rufus or Etcher to create a bootable media. Ensure that the USB drive is formatted as FAT32 or NTFS and has at least 512 MB of free space.
  2. Step 2: Update the bootable media by using the PCA2023-signed boot manager, which can be downloaded from Microsoft's support website. Follow the instructions provided to update the bootable media with the new boot manager.
  3. Step 3: Insert the updated USB flash drive into the computer and restart it. The system should now boot from the signed boot manager, allowing access to the Windows setup.

Creating a Bootable Media with an Older UEFI Firmware Version

  1. Step 1: Download an older version of the UEFI firmware that is compatible with the CA 2023 update. This can be found on websites that offer legacy firmware versions.
  2. Step 2: Create a new USB flash drive and format it as FAT32 or NTFS. Install the older UEFI firmware version onto the USB drive, following the manufacturer's instructions.

✨ Wrapping Up

In conclusion, the 'Security Error: Secure boot version check failed' error can be resolved by updating the bootable media to use the PCA2023-signed boot manager or creating a bootable media with an older UEFI firmware version that is compatible with the CA 2023 update. By following these steps, users can regain access to the Windows setup and continue with their system installation.

Did this fix your problem?

If not, try searching for specific error codes.

🔍 Search Error Database

❓ Frequently Asked Questions

🛠️ Related Fixes

How to Fix: hidden network issues by identifying and removin

Resolve hidden network issues by identifying and removing a problemati

How to Fix: Discover why your SSD's full volume space isn't

Fix Discover why your SSD's full volume space isn't showing up in Disk

How to Fix: Lenovo LOQ performance issues by updating driver

Resolve Lenovo LOQ performance issues by updating drivers, running a d