Ventoy Pushes 1.1.16 and 1.1.15 to Fix Secure Boot Hangs and UEFI Quirks
The open-source USB boot drive utility rolls out two rapid updates while reminding users to handle a recent Secure Boot certificate change.
Ventoy has released versions 1.1.16 and 1.1.15 to patch lingering UEFI compatibility issues and Kicksecure boot failures. The back-to-back rollouts arrive just days apart, which usually means the team is aggressively chasing edge cases that only surface when dozens of different motherboard implementations try to chainload custom ISOs.
What Changed in the Latest Builds
Version 1.1.15 starts by fixing the boot hang that happens when Secure Boot is disabled in UEFI firmware. The developers also dropped a routine language update before the 1.1.16 build went out. That newer release tackles the same Secure Boot disabled hang on older UEFI implementations. It also resolves a Kicksecure boot problem tracked as issue #3651. Next, the update patches a VentoyPlugson quirk where the VTOY_WIN_UEFI_RES_LOCK toggle would reset itself on launch. Not a dealbreaker, but annoying if you rely on that specific memory protection feature.
UEFI firmware has a reputation for treating third-party bootloaders like uninvited guests. The moment you disable Secure Boot and try to load a recovery image, legacy implementations tend to throw a fit. Ventoy’s developers have clearly spent weeks chasing these exact firmware headaches. The result is a pair of builds that finally smooth out the rough edges for people who actually use the tool in production environments.
Ventoy officially notes that "you need to enroll the new key for the first boot time" because the project shifted its Secure Boot certificate authority back at v1.1.14. The old key stays around by default, but you can wipe it later if you want a cleaner slate.
iVentoy for Network-Based Deployment
If you are tired of swapping physical USB drives and want to push images over the network, the team is also pushing iVentoy. It is their take on a PXE server that turns just about any machine running Windows, Linux, or Raspberry Pi OS into a network boot point. They claim support for over 110 OS types, including WinPE, VMware, and standard x86 or ARM64 UEFI variants. The interface is deliberately stripped down. You drop a file in, point the port, and let the DHCP server handle the rest.
The new Ventoy release is available through the official download page. Head here to review the step-by-step instructions for enrolling the new certificate or purging the old one if you skipped the earlier security update.
