This error message (“Selected boot image did not Authenticate. Press <Enter> to Continue.”) is a Secure Boot violation screen that appears on certain OEM systems (most commonly HP, but also Dell, Lenovo, etc.) when the bootloader or kernel image being loaded has not been signed with a key trusted by the firmware’s Secure Boot database. Basically, it’s a software feature that allows big corp to prevent you from installing free operating systems onto hardware. Freedom.

Common Reasons:

In 99% of cases where people see this screen, they simply wanted to install normal Windows or Linux and just need to turn Secure Boot off temporarily.

  1. You’re trying to boot a custom/modified boot image (e.g., a custom recovery like TWRP, a Linux distro not properly signed, a cracked/modified Windows image, or a third-party bootloader).
  2. Secure Boot is enabled in BIOS/UEFI and the image lacks a valid Microsoft or OEM signature.
  3. The image signature is corrupted or was stripped during creation/modification.
  4. You’re using tools like Rufus with the wrong settings (e.g., creating a Windows To Go USB or using non-standard options that break signature chains).

How to fix it (depending on your goal):

Option 1 – Disable Secure Boot (quickest)

  • Reboot → enter BIOS/UEFI (usually F10 on HP, F2/Del on others)
  • Go to Boot/Security tab → Disable “Secure Boot”
  • Save & exit (F10 → Yes)
  • Try booting again

Option 2 – Use a properly signed image

  • For Windows: Always download official ISOs from Microsoft and use Rufus in “Standard Windows installation” mode (or Microsoft’s Media Creation Tool)
  • For Linux: Most major distros (Ubuntu, Fedora, etc.) include proper Secure Boot signing now. Just use their official ISOs.

Option 3 – Sign the boot image yourself (advanced)

  • You would need to enroll your own keys into the UEFI database (MOK for Linux, or custom PK/KEK/DB for Windows loaders) – not practical for most users.

What is the most common solution? Option #1, disable the secure boot.

In 99% of cases where people see this screen, they simply wanted to install normal Windows or Linux and just need to turn Secure Boot off temporarily (you can re-enable it later once the OS is installed, as Windows and modern Linux will re-enroll their own keys).

So: go into BIOS → disable Secure Boot → boot your USB again → done.