What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Treat a refurbished Dell Latitude 5420 as an untrusted handoff until you verify its identity, remove the previous owner’s accounts, check for organization management, reinstall Windows from trusted media, update Dell firmware and drivers, and confirm TPM 2.0, UEFI, Secure Boot, encryption, and Windows security protections. Do not sign in to sensitive accounts or copy private data until those checks pass.
What a secure setup must accomplish
Refurbishment changes the trust boundary. The laptop may have been reset, but that alone does not prove that the previous owner’s Microsoft account, browser profile, remote-management software, firmware password, or organization enrollment has been removed. A secure setup replaces that uncertainty with a clean operating system, current firmware, a newly created account, and verified hardware-backed protections.
The Latitude 5420 platform supports Windows 11 Home and Pro, Windows 10 Home, Pro, Pro Education, and Enterprise, and Ubuntu 20.04 LTS. That is a platform-support list, not proof of the edition or configuration installed on your particular unit. Verify the actual CPU, memory, storage, operating-system edition, and security hardware before planning your setup.
1. Verify the exact Latitude 5420 before trusting it
Record and check the Service Tag
- Turn the laptop over or open the firmware information screen and record the seven-character Service Tag.
- On Dell Support, enter the Service Tag and confirm that the result identifies a Latitude 5420. Use that Service Tag-specific page for BIOS and driver downloads rather than a generic package page.
- Compare the returned model and configuration with the seller’s description and your purchase receipt. Photograph the Service Tag and the machine’s condition for your records.
Inventory the configuration that actually arrived
Refurbished listings can combine different processors, memory capacities, SSD sizes, displays, and optional security hardware. In Windows, open Settings > System > About and Task Manager > Performance to record the CPU, installed RAM, drive model and capacity. Check Settings > System > About or System Information for the Windows edition and build.
#1 Best Overall
- Microsoft Authorized Refurbished 14 inch 1920 x 1080 display laptop
- 11th Generation Intel Core i7-1185G7 Quad Core @ 2.80GHz
- 16GB DDR4 RAM; 256GB NVMe SSD; Windows 11 Pro
- Intel Tigerlake GT2 Graphics; 2 x USB 3.0; 2 x USB Type-C Thunderbolt 4; 1 x HDMI; 1 x microSD card reader; Combo Headphone/Microphone Jack; Integrated Wifi, Bluetooth; RJ45 Ethernet
- Dimensions: 0.8 x 12.7 x 8.4 inches; Weight: 3.1 lbs
- Confirm the processor model and whether it meets your intended workload.
- Record installed RAM and whether the capacity matches the listing.
- Record SSD capacity and inspect Disk Management for unexpected additional partitions.
- Check the battery’s condition and charging behavior; do not assume a refurbished battery has a particular remaining capacity.
- Test the webcam, microphone, speakers, keyboard, touchpad, display, Wi-Fi, Bluetooth, USB ports, HDMI, and charging port.
- Test the fingerprint reader if the unit includes one. Some configurations do not have it.
- Confirm the seller’s warranty, return window, and any stated battery coverage in writing.
There is no authoritative published failure-rate, malware-prevalence, battery-health, or resale-value percentage for refurbished Latitude 5420 units. Per-unit inspection and the seller’s documented return terms are more reliable than an average.
2. Remove the previous owner’s trust boundary
Inspect before connecting sensitive accounts
Use a temporary network or no network while inspecting the existing installation. Look at Settings > Accounts > Email & accounts and Settings > Accounts > Other users. Remove accounts that are not yours only after preserving any files that demonstrably belong to you. Check browsers for profiles, saved passwords, extensions, and synchronization accounts.
Review Installed apps for remote-access, remote-management, or monitoring software that you did not request. Also check Settings > System > About for Windows activation and Settings > Accounts for signs that the computer is connected to a work or school organization.
Check for organization enrollment and firmware passwords
A machine still tied to a former employer, school, seller, or device-management service can be remotely controlled or blocked after you begin using it. In Settings > Accounts > Access work or school, disconnect only an organization relationship that you own or have permission to remove. If the computer reports that it is managed by another organization, or the firmware requests an unknown administrator password, stop and resolve ownership with the seller before using it for confidential work. A Windows reset does not necessarily remove firmware locks or cloud enrollment.
Back up only files that are yours
Copy personal documents, photos, and other files to a separate, trusted drive. Do not blindly restore the seller’s entire user profile, browser data, executable files, or unknown installers. Scan backed-up files with your security software after the clean setup, and keep the original backup offline until you have verified what it contains.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
3. Choose Windows Reset or a clean installation
| Path | When it fits | Security considerations |
|---|---|---|
| Windows Reset | The existing installation boots normally and you need a straightforward removal of apps, accounts, and files. | Use the option that removes everything. Back up first, and still inspect enrollment, firmware settings, and the resulting installation. |
| Clean installation from trusted Microsoft media | You do not trust the existing image, the disk layout is confusing, or Reset fails. | Start with official Microsoft installation media, verify the target disk, and delete old Windows partitions only after your backup is complete. |
Use Reset this PC
- Open Settings > System > Recovery and select Reset this PC.
- Choose the option to remove everything. Read the confirmation screens carefully; do not choose a keep-files option when the goal is to eliminate the seller’s environment.
- Follow the on-screen reinstall instructions and leave the computer connected to AC power.
- At the first-run screens, create your own account rather than signing in with the seller’s account.
Menu wording can vary by Windows edition and build. If Reset errors, leaves unexpected accounts, or you cannot establish that the resulting system is clean, use a clean installation instead.
Perform a clean installation
- From a separate trusted computer, obtain Windows installation media directly from Microsoft and create a bootable USB drive.
- Back up and disconnect external drives that are not part of the installation target so you cannot erase the wrong disk.
- Start the Latitude 5420 from the USB installer using its one-time boot menu. Prefer the UEFI entry for the USB device.
- At disk selection, identify the internal SSD by its capacity and remove the old Windows partitions only when you have confirmed the backup. Install Windows into the resulting unallocated space.
- Complete setup with your own account, then install updates and Dell drivers before restoring personal data.
If the installer cannot boot in UEFI mode, resolve the firmware configuration before proceeding rather than forcing a Legacy installation that will later prevent Secure Boot.
Recommended Free Tools
4. Update the BIOS safely
Firmware updates close defects and improve compatibility with security features, but an interrupted BIOS flash can leave the computer unable to boot. Do not quote a fixed “latest” BIOS version in a guide: Dell versions change, so check the Service Tag page at the time you set up the laptop.
- Open Dell Support and enter the Latitude 5420 Service Tag.
- Open Drivers & Downloads, select the installed operating system, expand the BIOS category, and download the available BIOS package.
- Connect the AC adapter, close other applications, and run the package. Do not turn off the laptop, close the lid, remove AC power, or press keys that interrupt the process.
- Allow every automatic restart to finish. After Windows returns, enter the firmware setup again and confirm the update completed.
Dell identifies clearing CMOS as a recovery path if a BIOS flash leaves the system unable to boot. Use the model’s service documentation or Dell support instructions for that recovery rather than repeatedly interrupting power.
5. Enable and verify TPM 2.0
Enable TPM in firmware
- Restart the Latitude 5420 and press F2 when the Dell logo appears to enter BIOS setup.
- Open the Security section.
- Enable TPM state and the TPM 2.0 security setting shown by your firmware version.
- Save the changes and exit. The laptop may restart more than once.
Dell states that TPM must be enabled in the BIOS setup program for the operating system to use it.
Rank #3
- This Certified Refurbished product is tested and certified to look and work like new. The refurbishing process includes functionality testing, basic cleaning, inspection, and repackaging. The product ships with all relevant accessories, a minimum 90-day warranty, and may arrive in a generic box. Only select sellers who maintain a high performance bar may offer Certified Refurbished products on Amazon.com.
- The new standard for Dell 5420 i7 notebook PC performance has arrived with Intel 11th Gen Core i7-1185G7 processors. This blazing fast, feature-packed processor family with built-in security is ready to take your productivity, creativity, and 3D gaming to the next level. What’s more, by enabling the exciting Windows 11 features, Intel 11th Gen Core processors empower you to unleash your imagination and explore the possibilities.
- High-Speed Memory & Storage: 16GB DDR4 RAM ensures seamless performance, while the 512GB M.2 NVMe SSD provides ultra-fast boot-up and file access.
- Stunning 14-inch FHD Non-Touch Display: Enjoy crisp visuals with 1920x1080 resolution Display
- Enhanced Connectivity: Features Wi-Fi, Bluetooth, USB 3.1, HDMI, Webcam and Thunderbolt 4 for versatile connectivity options.
Confirm the security processor in Windows
Open Windows Security > Device security > Security processor details. You should see TPM information rather than a message that no security processor is available. Microsoft notes that a missing Security processor entry can mean that the hardware is absent or that TPM is disabled in UEFI.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minuteDo not select an option to clear TPM merely to make the page look correct. Clearing TPM resets the security processor and can make encrypted files or sign-in credentials inaccessible. If you must clear it, back up data and recovery information first, then re-enroll your accounts and encryption after the reset.
6. Use UEFI and turn on Secure Boot
Confirm the boot mode
In Windows, press Windows key + R, enter msinfo32, and inspect the System Summary for BIOS Mode. It should report UEFI before you enable Secure Boot. Firmware labels differ, but a Legacy or Compatibility Support Module (CSM) setting indicates that the installation may not be prepared for Secure Boot.
Microsoft defines Secure Boot as a feature that allows only trusted, digitally signed software to run during startup. If the existing Windows installation used Legacy mode, do not switch the firmware blindly: verify that the disk and installation are UEFI-ready or perform a clean installation in UEFI mode.
Enable Secure Boot
- Restart, press F2 at the Dell logo, and open the boot or security settings where your firmware exposes Secure Boot.
- Set the boot mode to UEFI if it is not already selected, then enable Secure Boot.
- Save and restart. If Windows fails to boot, return to firmware, undo only the last change, and investigate the disk’s partition and boot mode rather than leaving the system in a permanently weaker configuration.
After any troubleshooting that temporarily disables Secure Boot, turn it back on and verify it in Windows Security > Device security.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #4
- Dell Latitude 5420 14" Business Laptop | Dell Certified Refurbished
- Intel Core 11th Generation i5-1145G7 Processor (Quad Core, Up to 4.40GHz, 8MB Cache) | 512GB PCIe SSD | 16GB DDR4 RAM
- 14 inch FHD (1920 x 1080) Wide View Angle Anti-Glare Non Touch Display | HD Web Camera | Backlit Keyboard
- 4-Cell, 63 WHr Battery (Express Charge Capable) | 65 Watt Type-C AC Adapter | Windows 10 Pro | Intel Wi-Fi 6 AX201 2x2 802.11ax 160MHz + Bluetooth 5.2
- One USB 3.2 Gen 1 port One USB 3.2 Gen 1 port with PowerShare Two Thunderbolt 4 ports with DisplayPort Alt Mode/USB4/Power Delivery | HDMI 2.0 port | micro SD-card slot | RJ45 port
7. Install Windows updates and Dell drivers
Run Windows Update first
- Open Settings > Windows Update and select Check for updates.
- Install quality, feature, and driver updates offered for the installed edition, restarting whenever Windows requests it.
- Repeat the check until no further updates are offered, then turn on automatic updates.
Install drivers from the Service Tag page
After reinstalling Windows, use Dell’s Drivers & Downloads page for the Service Tag. Dell’s re-imaging guidance treats driver installation as critical and identifies a practical sequence:
- Chipset drivers.
- Storage or Intel Rapid Storage drivers, when applicable to the installed storage configuration.
- Graphics.
- Audio.
- Wireless networking and Bluetooth.
- ControlVault3, when the configuration includes it.
- Infrared camera and other model-specific camera or security packages.
Restart as requested and test the related hardware after each major group. Avoid third-party “driver updater” bundles and unknown utilities supplied by a seller. Install only software needed for your work.
8. Verify Windows Security protections
Review Device security
Open Windows Security > Device security. This page brings together the controls that matter most for this setup:
- Security processor details for TPM.
- Secure Boot status.
- Core isolation and Memory integrity.
- Data encryption or BitLocker status, depending on the Windows edition and hardware.
Microsoft describes Memory integrity, also called Hypervisor-protected Code Integrity (HVCI), as a feature that makes it difficult for malicious programs to use low-level drivers to hijack Windows. Turn it on when compatible. If Windows identifies an incompatible driver, update or remove that driver from the Dell Service Tag page or the device vendor before considering a permanent exception.
Configure encryption and recovery
If Device encryption or BitLocker is available and you choose to enable it, save the recovery key in a separate, trusted location before storing sensitive data. Test that you can retrieve the key without leaving it in an unprotected text file on the same laptop. Encryption protects data at rest; it does not make an untrusted account, malicious browser extension, or compromised firmware safe.
Best Value
- [ INTEL Core i5 Processor ] Released in 2019 The Latitude Rugged 5420 Laptop is DELL's latest release in the 14" Latitude 5000 family. It comes with all the latest technology including DDR4 Memory clocked at a whopping 3200MHz and a 8th generation Intel 4-core Processor. To save power and prolong battery life the processor will run @ 1.7Ghz under low use but will boost to 3.6GHz under heavy use for powerful perfor
- [ Display & Graphics ] This Latitude Rugged 5420 Laptop comes with a 14" Touch Screen with (1920x1080) resolution for stunningly clear visuals and a integrated graphics card built into the INTEL Core i5-8350U processor
- [ High Speed RAM And Enormous Space ] The 16GB DDR4 RAM Running @ 3200MHz will let you smoothly run multiple applications and browser tabs all at once and a 512GB PCIe NVMe M.2 Solid State Drive will provide fast startup, data transfers, and large file storage
- [ Operating System ] Windows 11 is Microsoft's latest Operating System released in 2022 and if you want to downgrade to the older windows 10, you can downgrade with an easy download from Microsoft's website
- [ Extra Details ] A Wecbam comes integrated. Wifi and Bluetooth come integrated. [ PORTS & SLOTS ] Removable PCIe storage bay, SD Card Slot, SIM Card Slot, USB 3.0 Type A, USB 3.0 Type C | Stylus, Native Serial, RJ-45 gigabit Ethernet network connector, HDMI, Lock slot, Power In
Check baseline protection
- Confirm Microsoft Defender protection is active and that real-time protection is not disabled by an unknown policy.
- Use a standard user account for everyday work. Make the account an administrator only when a task genuinely requires it.
- Install applications from their official publishers and remove trial software or utilities you do not recognize.
- Set a strong sign-in method and lock the screen automatically when unattended.
9. Create your account and finish the handoff
- Create a new local or Microsoft account that belongs to you during Windows setup or in Settings > Accounts > Your info.
- Remove any leftover seller account after confirming your own administrator access.
- Open Settings > Accounts > Sign-in options and configure a PIN, password, fingerprint, or other method supported by your hardware.
- Review Settings > Accounts > Access work or school one more time and confirm that only relationships you authorized remain.
- Restore personal files selectively from your backup after Defender, updates, TPM, Secure Boot, and encryption checks pass.
10. Test the machine as a refurbished purchase
Security settings cannot compensate for a defective component. Run a short acceptance test during the return period:
- Cold-start the laptop several times and confirm that it boots consistently with Secure Boot enabled.
- Run Windows Update and verify that the machine does not repeatedly fail or roll back updates.
- Play audio, record from the microphone, and make a webcam call to test the camera privacy shutter or switch if fitted.
- Connect to both Wi-Fi and Bluetooth devices, then test every USB port and the video output you plan to use.
- Unplug AC power and observe charging, battery percentage, and unexpected shutdowns. Do not infer battery health from the seller’s listing alone.
- Test the fingerprint reader repeatedly if present and verify that Windows recognizes it as the intended device.
- Check for abnormal heat, fan noise, display defects, keyboard faults, or a loose hinge.
Document failures with photographs and dates. Use the seller’s return or warranty process rather than opening the chassis or altering firmware while a return is still available.
11. Troubleshoot common security setup failures
Windows shows no security processor
Restart, press F2, and verify TPM state and TPM 2.0 security in the Security section. If those settings are enabled but Windows Security still lacks Security processor details, install the current BIOS and chipset packages from the Service Tag page, restart, and check again. Persistent absence may indicate that the particular configuration lacks the expected hardware or has a firmware fault; ask the seller or Dell support before clearing TPM.
Secure Boot cannot be enabled
Confirm BIOS Mode reports UEFI. If it reports Legacy, switching modes without preparing the disk can make Windows unbootable. Back up your data and reinstall Windows in UEFI mode when conversion is not clearly supported. Remove boot media and unknown boot entries, then enable Secure Boot and verify the result in Windows Security.
The laptop is still managed by an organization
Do not attempt to bypass management controls. Capture the enrollment message or firmware-password prompt, contact the seller, and request formal removal from the former organization. Return the machine if ownership cannot be established.
A BIOS update leaves the computer unable to boot
Keep AC power connected and wait for any recovery screen to finish. If the machine remains unresponsive, use Dell’s documented CMOS-clearing or BIOS-recovery procedure for the Latitude 5420. If the unit is within its return or warranty period, contact the seller or Dell before attempting invasive repairs.
Memory integrity blocks a driver
Open the Memory integrity details to identify the incompatible driver. Look for a newer Dell package, uninstall software that installed the driver, and restart. Leaving Memory integrity disabled should be a temporary troubleshooting choice, not the final configuration for a computer used with confidential data.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteWindows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallWindows requests a BitLocker recovery key
Firmware changes, TPM resets, and boot-mode changes can trigger recovery. Use the recovery key you stored before enabling encryption. If you do not have it, stop making further firmware changes and recover the key through the account or organization that owns the encryption. Do not erase the drive until you have decided that the data is no longer needed.
Quick Recap
12. Keep the secure baseline
- Leave Windows Update set to install updates automatically and check it periodically.
- Recheck Device security after BIOS changes, major Windows upgrades, or driver replacements.
- Keep the TPM, UEFI, and Secure Boot settings enabled unless a documented troubleshooting step requires a temporary change.
- Maintain an offline or separately protected backup of personal files and encryption recovery information.
- Review installed applications and browser extensions every few months, removing anything you no longer recognize or need.
- Re-test the battery, webcam, fingerprint reader, ports, and charger if the machine develops intermittent faults.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
