When the SEP 12.1.6 MP4 (and earlier) client with the Early Launch Anti-Malware setting enabled is installed on a computer with UEFI and Secure Boot enabled, Windows 10 does not boot properly. Windows boot process shows "Preparing Automatic Repair", then "Diagnosing your PC", and then shows either an Automatic Repair window that shows "Your PC did not start correctly..." or a Recovery window that states your PC needs to be repaired and states the OS could not be loaded because the digital signature of "symefasi.sys" couldn't be verified. I contacted Symantec Support and the work around is to disable Early Launch Anti-malware in the SEPM policy, then export a new client. However, I would like to see this issue resolved so that Early Launch Anti-malware can be enabled. Another work around is to disable Secure Boot, but that is not a feasible solution. Thank you!
↧