Recommended Free Tools
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
A Ventoy USB can fail at four different points, and each point has a different remedy: the firmware may not list the drive, it may start the drive without showing Ventoy, Ventoy may load but fail on one ISO, or the process may end at a GRUB shell. Identify the stage first. Do not start by changing Secure Boot when the firmware cannot see the USB, and do not replace the drive merely because one ISO is incompatible.
This guide separates firmware selection, Ventoy startup, Secure Boot enrollment, ISO integrity, image compatibility, and hardware faults so you can test one cause at a time.
First, identify where booting stops
Watch the screen and classify the failure before changing settings. The same USB can work in one mode, on one computer, or with one image and fail in another.
| What you see | What it means to investigate |
|---|---|
| The USB is absent from the one-time boot menu and firmware storage list | Connection, USB port, firmware detection, or the flash drive itself |
| Firmware lists a USB entry, but no Ventoy menu appears | UEFI-versus-Legacy selection, installation mode, or Secure Boot startup |
| Ventoy’s menu appears, but one ISO will not start | ISO integrity, the image’s boot design, or firmware compatibility with Ventoy’s emulation |
| A GRUB shell appears | Image corruption, a defective or counterfeit drive, BIOS access-range limits, or an unsuitable workaround |
Record exactly which screen appears, whether another computer behaves differently, and which ISO you selected. Those observations prevent you from applying a fix for a later stage to an earlier failure.
#1 Best Overall
- USB-C 2-in-1 storage OTG: The Lexar JumpDrive Dual Drive D40E features USB Type-A and Type-C connectors in a slim, portable form factor for easy device compatibility
- Transfer speeds up to 100MB/s: Based on internal testing, performance may vary depending upon the host device, interface, and usage conditions. 1MB=1,000,000 bytes
- Plug and Play: Widely compatible with USB Type-C smartphones, tablets, laptops, Macs, and traditional Type-A devices, no software installation required. The 360° swivel design allows for easy switching between connectors without the hassle of losing a cap
- Durable & Compact: The Lexar D40E USB memory stick features a metal enclosure, withstands temperatures from 0° to 50° C (32°F to 122°F), and is lightweight at 26g with dimensions of 70.4 x 16.9 x 11.7mm
- Security & Warranty: Securely protects files using an advanced security software solution with 256-bit AES encryption. Backed by a Lexar 3-year limited warranty
When firmware does not list the Ventoy USB
If the computer’s firmware never lists the drive, Ventoy has not started. Secure Boot settings and ISO troubleshooting are premature because the firmware must first detect and select the storage device.
Reconnect the drive and use the one-time boot menu
- Shut down or restart the computer with the Ventoy USB connected.
- Open the computer’s one-time boot menu and look for the USB storage entry. The correct key and the wording of the menu vary by manufacturer, so use the device maker’s documentation for the key and navigation instructions.
- If the USB is missing, move it to another available USB port and repeat the detection check. A port change can distinguish a port-specific problem from a drive or firmware problem.
- If possible, test the same drive on another computer. A drive that is invisible on multiple systems is more suspicious than one that appears elsewhere.
Do not begin with Secure Boot
Secure Boot is evaluated after firmware has selected a boot entry. If no USB entry exists, first establish whether the computer can detect the device. Changing Secure Boot cannot make an entirely missing storage device appear in the boot menu.
When a replacement drive is justified
A replacement USB flash drive is reasonable only after separate testing gives you evidence that the original is faulty or counterfeit. It is not a general remedy for UEFI enrollment errors or for an ISO that fails while other images boot. Preserve any important data before destructive testing or re-creating the Ventoy installation.
When firmware lists the USB but Ventoy’s menu never appears
At this stage, the firmware has found the drive but has not successfully handed control to Ventoy. Concentrate on the boot mode shown by the firmware and on Secure Boot.
Rank #2
- High-speed USB 3.0 performance of up to 150MB/s(1) [(1) Write to drive up to 15x faster than standard USB 2.0 drives (4MB/s); varies by drive capacity. Up to 150MB/s read speed. USB 3.0 port required. Based on internal testing; performance may be lower depending on host device, usage conditions, and other factors; 1MB=1,000,000 bytes]
- Transfer a full-length movie in less than 30 seconds(2) [(2) Based on 1.2GB MPEG-4 video transfer with USB 3.0 host device. Results may vary based on host device, file attributes and other factors]
- Transfer to drive up to 15 times faster than standard USB 2.0 drives(1)
- Sleek, durable metal casing
- Easy-to-use password protection for your private files(3) [(3)Password protection uses 128-bit AES encryption and is supported by Windows 7, Windows 8, Windows 10, and Mac OS X v10.9 plus; Software download required for Mac, visit the SanDisk SecureAccess support page]
Confirm whether the firmware entry is UEFI or Legacy
The computer firmware chooses whether the USB starts in Legacy BIOS or UEFI mode; Ventoy does not make that choice. A boot menu may show separate entries for the same physical drive, such as a UEFI entry and a non-UEFI or Legacy entry. Select the entry that matches the mode required by your installation and the operating system you intend to start.
When the Ventoy menu does load, its lower-left version string identifies the active session. It can identify BIOS, UEFI, IA32 UEFI, ARM64 UEFI, or MIPS UEFI. Use that label to verify what actually started rather than assuming that the menu entry name was accurate.
Use the mode that matches your target
- Read the firmware boot-menu labels and determine whether you selected a UEFI or Legacy path.
- Compare that mode with the mode in which Ventoy was installed and with the boot mode supported or expected by the operating system image.
- If the wrong path was selected, restart and choose the other firmware entry for the USB, when one is offered.
- Once Ventoy appears, check the lower-left mode string and record it for later troubleshooting.
Do not treat UEFI and Legacy as interchangeable labels. A machine can detect the same USB but initialize it differently depending on the selected entry.
Secure Boot errors and key enrollment
Ventoy supports Secure Boot, but the first boot on some machines requires enrolling a key. Firmware implementations differ, and Ventoy states that its Secure Boot solution may not work on every machine.
Rank #3
- What You Get - 2 pack 64GB genuine USB 2.0 flash drives, 12-month warranty and lifetime friendly customer service
- Great for All Ages and Purposes – the thumb drives are suitable for storing digital data for school, business or daily usage. Apply to data storage of music, photos, movies and other files
- Easy to Use - Plug and play USB memory stick, no need to install any software. Support Windows 7 / 8 / 10 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, compatible with USB 2.0 and 1.1 ports
- Convenient Design - 360°metal swivel cap with matt surface and ring designed zip drive can protect USB connector, avoid to leave your fingerprint and easily attach to your key chain to avoid from losing and for easy carrying
- Brand Yourself - Brand the flash drive with your company's name and provide company's overview, policies, etc. to the newly joined employees or your customers
Check that Secure Boot support was enabled for the Ventoy installation
A Secure Boot error can occur when the Ventoy installation was not prepared for Secure Boot or when the firmware refuses its signing path. Review the Ventoy installation settings and its official Secure Boot enrollment procedure rather than repeatedly toggling unrelated boot options.
Enroll the key when the firmware requests it
- Boot the USB through the UEFI entry with Secure Boot enabled.
- If Ventoy presents its expected key-enrollment flow, follow the firmware’s prompts to enroll the key and then restart as requested.
- On firmware that exposes the option, enable “Allow Microsoft 3rd Part UEFI CA”. The wording and location can vary, but the setting is relevant to systems that require that certificate authority for the boot chain.
- For Ventoy 1.1.13 and later, follow the current enrollment process for the UEFI CA 2023 issue; the documentation says a new key must be enrolled.
Key enrollment changes what the machine trusts at boot. On a managed computer, follow the organization’s security policy and obtain the administrator’s approval before changing firmware trust settings.
If enrollment produces an error screen
Ventoy’s Secure Boot instructions describe a fallback for the case where the expected enrollment screen is replaced by an error screen: turn off Ventoy’s Secure Boot option and disable Secure Boot in the firmware. Treat this as a policy-dependent fallback, not a universal recommendation. Disabling Secure Boot may be prohibited on a managed device or may conflict with your security requirements.
Free tools Windows power users keep installed
One-click scans. No signup required.
After any change, retry the same UEFI boot entry and note whether the result is a Ventoy menu, a new enrollment prompt, or another error. This creates a clean boundary between a trust-chain problem and an ISO problem.
Rank #4
- GOOD VALUE PACKAGE - 1 Pack 32GB Memory Stick USB 2.0 Flash Drives with great cost performance and high quality.
- BIG CAPACITY - The available capacity: 29.10GB-29.8GB, You can save the data of movies, music, photos, designs, programs, manuals, handouts in a high speed.Good performance in digital data storing, transferring and sharing with families, friends, workmates, clients and machines.
- EASY TO USE & PLUG AND WORK - Support windows 7 / 8 / 10 / Vista / XP / 2000 / ME / NT Linux and Mac OS, Compatible with USB2.0 and below.
- TWISTTURN DESIGN & EASY CARRY - The metal clip rotates 360° round the ABS plastic body which with rubber oil skin feeling finish. The capless design can avoid lossing of cap, and providing efficient protection to the USB port.
- WARRANTY & SUPPORT - SIMMAX logo is laser printed on the USB connector surface, our products are of good quality and we promise that any problem about the product within one year since you buy.
When Ventoy’s menu appears but an ISO fails
If the menu is visible, the USB and Ventoy loader have already started. A failure limited to one image points first to that file’s integrity or boot design, not automatically to the flash drive.
Verify the ISO against the publisher’s checksum
- Find the checksum published by the operating-system publisher for the exact ISO release and architecture you downloaded.
- Calculate the checksum of your local file with a trusted hashing tool and compare the complete value character for character.
- If the values differ, download the image again from the publisher and verify the new file before copying or selecting it.
- If the values match but the image still fails, test a known-good image. The comparison tells you whether the problem follows the particular ISO or affects Ventoy more broadly.
Do not substitute a checksum from a different release, mirror, architecture, or compression format. A valid hash proves that your file matches the publisher’s stated file; it does not prove that the image is compatible with every firmware implementation.
Account for Ventoy’s ISO emulation
Ventoy presents an ISO to the computer by emulating it as a CD-ROM. The firmware’s support for that mechanism and the way the image was designed to boot can therefore affect the result. A file can be intact and still fail on a particular machine because its boot path does not cooperate with the firmware or with this emulation method.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Try GRUB2 mode only for eligible Linux images
For a Linux ISO that contains a GRUB2 configuration file, Ventoy’s GRUB2 mode can provide an alternative boot path. It is a limited workaround, not a general compatibility switch.
Best Value
- 【16GB Flash Drive】USB flash drives with 16GB capacity, meet your needs of daily use on work, school, home and travelling for photos, music, videos, files storage and transfer. IMEASON thumb drives can be used to store different files, easy to data backup.
- 【Metal Swivel Cap Design】USB thumb drive is metal swivel cover provides extra protection for the usb thumbdrive connector, no usb drive cap to lose; keychain design makes it easier to carry without worrying lose it.
- 【Wide Compatibility】USB drive supports Windows 7/8/10/11 / Vista / XP / Unix / 2000 / ME / NT Linux and Mac OS, also Supports USB 2.0 and 1.1 ports. USB Stick support TV, desktop, notebook computer, car, audio and other device. The USB Memory Stick is your great data storage and transfer companion with traveling and working.
- 【Easy to use】usb memory stick is plug and play without any software installation. Just simply plug the Flashdrive into the port of your USB-compatible devices such as computer, laptop to start data storage or transmission.
- 【What You Get】16 GB USB Flash Drive Thumb Drive, The default format of the usb storage flash drive is FAT32.
- Eligible case: a Linux image containing the required GRUB2 configuration.
- Not eligible: Windows images, WinPE images, and Unix images, according to Ventoy’s documentation.
- Interpretation: if GRUB2 mode does not apply to the image type, changing to it is unlikely to solve the failure.
Use the normal Ventoy path first after verifying the file. If the image publisher documents a different boot method or a special image variant, follow that documentation rather than forcing an unsupported mode.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.When Ventoy drops to a GRUB shell
A GRUB shell means the normal menu or image handoff did not complete. Ventoy’s FAQ identifies several possibilities, but the shell alone does not diagnose which one is responsible.
Separate image failure from storage failure
- Verify the selected ISO’s checksum as described above.
- Boot a known-good image from the same Ventoy drive. If only one image fails, the image or its boot design remains the leading suspect.
- Test the same known-good image on another computer, when practical. A result that follows the computer suggests firmware behavior; a result that follows the drive suggests the storage path.
- Check the USB device for read/write errors with the operating system’s storage-testing tools. Back up anything important first, because some tests are destructive.
- Only after these checks point to the device should you recreate Ventoy or replace the flash drive.
Consider a fake or faulty USB stick
Ventoy lists a fake or faulty USB stick as a possible cause of a GRUB shell. Counterfeit media can report a larger capacity than it actually has, while failing when data is read from the unverified area. A failing flash device can produce similar symptoms. A replacement drive addresses this hardware possibility only; it will not correct an ISO checksum mismatch or a Secure Boot enrollment failure.
Consider a BIOS access-range limitation
Ventoy also lists a BIOS access-range limitation as a possible cause. This is a firmware-era limitation on which portions of the USB storage the BIOS can address, not a diagnosis that applies to every GRUB shell. If the same drive works when booted through UEFI but fails through Legacy BIOS, that difference is useful evidence that the firmware mode is involved.
Do not mistake GRUB2 mode for a universal escape hatch
GRUB2 mode is designed for suitable Linux images with a GRUB2 configuration. It cannot boot Windows, WinPE, or Unix images in this mode. Selecting it for an ineligible image can create another failure without changing the underlying cause.
A controlled troubleshooting workflow
Use this order so each test answers one question.
- Classify the stop point. Decide whether the USB is missing, the menu is missing, one ISO fails, or a GRUB shell appears.
- Check detection. Reconnect the device, try another port, and use the manufacturer’s documented one-time boot-menu method.
- Record the firmware mode. Distinguish UEFI from Legacy in the firmware entry; once Ventoy loads, read the lower-left mode string.
- Handle Secure Boot separately. If the error is a trust or enrollment error, use Ventoy’s enrollment flow, consider “Allow Microsoft 3rd Part UEFI CA” where available, and account for the Ventoy 1.1.13+ UEFI CA 2023 requirement.
- Validate the image. Compare the ISO with the operating-system publisher’s checksum and retry with a known-good image.
- Choose a mode only when the image qualifies. Use GRUB2 mode only for suitable Linux images containing a GRUB2 configuration; never use it as a Windows, WinPE, or Unix workaround.
- Test hardware last. Investigate a fake or faulty drive and BIOS access-range limitations only after image and mode checks provide evidence.
This sequence prevents a hardware replacement from masking an image problem and prevents a Secure Boot change from obscuring a simple firmware-entry mistake.
Common mistakes that waste time
- Changing Secure Boot before checking detection: a firmware menu that lacks the USB has not reached the Secure Boot stage.
- Assuming Ventoy selected UEFI or Legacy: the firmware selects the mode, and the lower-left Ventoy label confirms what actually ran.
- Blaming the drive because one ISO fails: verify that image and test another before replacing storage.
- Using an unverified checksum: compare against the exact release and architecture published by the operating-system publisher.
- Using GRUB2 mode for the wrong image family: Ventoy documents it for suitable Linux images, not Windows, WinPE, or Unix.
- Disabling security controls on a managed computer: firmware trust changes may violate organizational policy and should be approved first.
What the successful result should look like
A successful diagnosis ends with a repeatable path: the firmware lists the USB, you select the intended UEFI or Legacy entry, Ventoy’s menu identifies the expected mode, and the verified ISO starts through a mode supported by that image. If Secure Boot remains enabled, the required key enrollment has completed without an error screen. If a drive test instead shows storage faults, replace the media and rebuild the Ventoy USB only after preserving needed data.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
