# OS Deployment and PXE Boot Issues

> Solutions to real-world CapaInstaller OS Deployment and PXE boot problems.

Source: https://docs.capaone.com/capainstaller/troubleshooting/os-deployment-and-pxe-boot-issues/  
Product: CapaInstaller — a separate CapaSystems product; do not apply this page to any other.

## Problem

Troubleshooting CapaInstaller OSD article will take you through different solutions to problems that have been seen in the real world.

:::note
Deployment failing at step 19, `CopyWindowsRE`, after an upgrade to 6.7.109 is covered separately in [OS Deployment Fails at CopyWindowsRE After Upgrading to 6.7.109](/capainstaller/troubleshooting/os-deployment-fails-at-copywindowsre-after-upgrading-to-6-7-109/).
:::

## Solution 1

If you get a bad password when trying to log in to the OSD GUI while deploying a PC, try the following solution.

1. Go to Systems Administration
2. Under Systems Administration, right click on Administrators and select properties
3. Here you can relink the already assigned user group.
4. After this you should be able to login in the OSD GUI and PXE Boot a PC

## Solution 2

If you get this error when trying pxe boot a computer “Secure Boot Violation, Invalid Signature Detected”   
Try the following solution.

![image-20241106-081544.png](/attachments/capainstaller-kb/ed4c230d-8c32-4850-96a9-cd6a1b791f80.png)

1. Download ADK and the Windows PE add-on from <https://learn.microsoft.com/en-us/windows-hardware/get-started/adk-install>
2. Uninstall ADK.
3. Install the new ADK.
4. Copy `C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Windows Preinstallation Environment\amd64\Media\EFI\Boot\bootx64.efi` to `\\ciBoot\Boot\efiboot\amd64`.
5. The file should be copied into the folder and also into `EFI.zip`

## Solution 3

On newer HP laptops if the Enable MS UEFI CAkey option is disabled it will not validate the bootx64.wim file from Microsoft this couses the PC to Sycle back to the BIOS Right after getting an IP Address when trying to PXE boot the PC  
  
1. Go into the Bios   
2. Navigate to Secure boot configuration

3. Make sure the Secure boot is enabled together whit the Enable MS UEFI CA key option

![image-20250717-104538.png](/attachments/capainstaller-kb/f0cfcb84-dea8-43de-a98a-959037f17c55.png)

## Solution 4

Error when trying to make a new Boot.Wim from the Capainstaller server. then follow the steps below.   
  
1. Install Win PE and Wind ADK on a Windows 11 Client  
2. Install/open the Console on the same client.  
3. Now build take a copy of the Old Boot.Wim it is located in the ciboot share on the Capainstaller server Example “D:\OSD\Boot\amd64”

4. Run the reg strings in the Zip file to see drivers in the GUI: [Fix No Drivers shown in Build boot wim.zip](/attachments/capainstaller-kb/a80e2589-8523-4a93-a1d5-9dcd51f0dd83.zip)
5. Now create a new Boot.Wim from the Windows 11 client.