UEFI with secure boot disabled

Page 2 of 3 FirstFirst 123 LastLast

  1. Posts : 355
    windows 10 pro x64 21H1
       #11

    KB1240 said:
    I am using Windows 10 Home (x64) Build 14393.1066(RS1) which came on the computer about a year ago when it was new.I have not done anything to the system except look at the bios one time to my knowledge.I discovered this error a few days ago when i ran a Belarc analysis.I am getting a little confused by all this and since the computer seems to work ok i wonder how important this error is?I really would like to fix it if i can without causing worse problems.
    This whole thing of secure boot is not part of your operating system. It is part of your motherboard, which hosts the BIOS.
    Google for "secure boot" and the details of your particular motherboard model, and then you will get the specific instructions you need. Unfortunately, the BIOS is a little different with every motherboard, and it can be confusing if you don't have the right instructions.
      My Computers


  2. Posts : 355
    windows 10 pro x64 21H1
       #12

    I forgot to mention that if your computer is pretty old, then it might not even have secure boot at all.
    The older models of motherboards have only the old-style BIOS, they don't have the UFI firmware.
    In any case, don't sweat it, it is not a big deal either way.
      My Computers


  3. Posts : 1,079
    10 + Linux
       #13

    System Information Data / Screenshot


    Not supported:

    Code:
    PS C:\Windows\system32> Confirm-SecureBootUEFI
    Confirm-SecureBootUEFI : Variable is currently undefined: 0xC0000100
    At line:1 char:1
    + Confirm-SecureBootUEFI
    + ~~~~~~~~~~~~~~~~~~~~~~
        + CategoryInfo          : ResourceUnavailable: (Microsoft.Secur...BootUefiCommand:ConfirmSecureBootUefiCommand) [C
       onfirm-SecureBootUEFI], StatusException
        + FullyQualifiedErrorId : GetFWVarFailed,Microsoft.SecureBoot.Commands.ConfirmSecureBootUefiCommand
    PS C:\Windows\system32>
    Attached Thumbnails Attached Thumbnails UEFI with secure boot disabled-unsupported.jpg  
      My Computer


  4. Posts : 440
    Windows 10
       #14

    simrick said:
    Hi.
    Reading on the Lenovo site:
    How to boot to Legacy device or system configured with Microsoft Windows 7 (32-bit or 64-bit) or Windows 8 (32-bit) - ThinkPad, ThinkCentre, ThinkStation, IdeaCentre




    So my question would be, what have you done to the system, that has disabled Secure Boot?

    EDIT: Perhaps you could just go into the BIOS and set it to defaults. But if you have installed a Legacy (MBR) version of W10, or upgraded a version of W7 to W10, you will not be able to boot the OS with Secure Boot turned on.
    According to my experience with several Lenovo ThinkCentre and ThinkPad computers, itīs possible to configure the boot as:

    - Boot mode: UEFI only
    - Secure Boot enabled or disabled

    With this configuration, the computer wonīt boot from MBR disks or legacy boot media. Secure Boot can be enabled or disabled.

    Also, itīs possible to configure as:

    - CSM enabled (legacy mode)
    - Boot mode: Auto.

    With this configuration, the computer boots from either MBR or GPT disks, and from UEFI or legacy boot media. Secure Boot is disabled.
      My Computer


  5. Posts : 16,278
    W10Prox64
       #15

    KB1240 said:
    I am using Windows 10 Home (x64) Build 14393.1066(RS1) which came on the computer about a year ago when it was new.I have not done anything to the system except look at the bios one time to my knowledge.I discovered this error a few days ago when i ran a Belarc analysis.I am getting a little confused by all this and since the computer seems to work ok i wonder how important this error is?I really would like to fix it if i can without causing worse problems.
    It's not an "error", it's just a setting. You can have it on or off. Lots of people don't have Secure Boot on. It's supposed to help prevent specific types of infections, but the bad guys have already overcome it. Having it off can have its advantages; i.e. you'll be able to boot the system to other media (in the event you ever need to do this), or dual-boot a non-UEFI OS.

    Anibor said:
    According to my experience with several Lenovo ThinkCentre and ThinkPad computers, itīs possible to configure the boot as:

    - Boot mode: UEFI only
    - Secure Boot enabled or disabled

    With this configuration, the computer wonīt boot from MBR disks or legacy boot media. Secure Boot can be enabled or disabled.

    Also, itīs possible to configure as:

    - CSM enabled (legacy mode)
    - Boot mode: Auto.

    With this configuration, the computer boots from either MBR or GPT disks, and from UEFI or legacy boot media. Secure Boot is disabled.

    So, based on this, you'd select
    UEFI/Legacy Boot = UEFI Only
    and that should turn off CSM and provide Secure Boot?

    UEFI with secure boot disabled-image.png

    Based on what the Lenovo website said, the system should have been set that way to begin with. That's why I thought setting the BIOS back to Default settings would do it, and asked what had been done to the system to change this.
      My Computer


  6. Posts : 16,278
    W10Prox64
       #16

    Oh yes - here it is:

    UEFI with secure boot disabled-image.png

    https://download.lenovo.com/ibmdl/pu...n.pdf#page=142

    So you would select
    UEFI Only and CSM Support = NO.

    UEFI with secure boot disabled-image.png
      My Computer


  7. WOT
    Posts : 471
    Win 10 Pro 15063.332 (ex-Insider)
       #17

    @KB1240: The original OS offered on your Lenovo desktop was Windows 7; therefore, you may not even have a secure boot option in you BIOS to enable or disable. However, if it is there, it would be readily identifiable in the the Security settings (as an enable/disable toggle). Now, I looked to see if there were any BIOS updates available for your desktop, and if I found your correct model, a new update was released on 12/29/2016:

    http://pcsupport.lenovo.com/us/en/pr...5ish/downloads

    However, I have no idea if that BIOS update contains any updates to add/show a Secure Boot Option because the readme is just instructional (no change log).

    In summary, if you can't find it anywhere in the BIOS, you don't have that option.

    Good luck,

    WOT

    Updated to include a BIOS screenshot:

    UEFI with secure boot disabled-secureboot.jpg
      My Computers


  8. Posts : 16,278
    W10Prox64
       #18

    WOT said:
    @KB1240: The original OS offered on your Lenovo desktop was Windows 7; therefore, you may not even have a secure boot option in you BIOS to enable or disable. However, if it is there, it would be readily identifiable in the the Security settings (as an enable/disable toggle). Now, I looked to see if there were any BIOS updates available for your desktop, and if I found your correct model, a new update was released on 12/29/2016:

    http://pcsupport.lenovo.com/us/en/pr...5ish/downloads

    However, I have no idea if that BIOS update contains any updates to add/show a Secure Boot Option because the readme is just instructional (no change log).

    In summary, if you can't find it anywhere in the BIOS, you don't have that option.

    Good luck,

    WOT
    If the original OS was W7, Secure Boot may not be an option if the system was "upgraded" to W10 (and why I asked in Post #8). But OP says it's 1 year old and came with W10 installed (Post #10), so I still don't understand then, why the system would not have shipped with UEFI+Secure Boot enabled, as they are instructed to do so by MS? Something is not right here: either the system was upgraded from W7, or the settings have been changed at one point, or Belarc is mis-reading the information.
      My Computer


  9. WOT
    Posts : 471
    Win 10 Pro 15063.332 (ex-Insider)
       #19

    simrick said:
    If the original OS was W7, Secure Boot may not be an option if the system was "upgraded" to W10 (and why I asked in Post #8). But OP says it's 1 year old and came with W10 installed (Post #10), so I still don't understand then, why the system would not have shipped with UEFI+Secure Boot enabled, as they are instructed to do so by MS? Something is not right here: either the system was upgraded from W7, or the settings have been changed at one point, or Belarc is mis-reading the information.
    You logic is sound (as always). The only thing I can say is the BIOS should have the option to enable or disable secure boot (as shown in my screenshot). At this point I think the OP needs to contact Lenovo support and ask them directly. As you are aware, laptop manufacturers are well known for limiting what options are available in the BIOS for user configuration. Who knows, maybe the latest BIOS update might unhide that option?
      My Computers


  10. Posts : 1,079
    10 + Linux
       #20

    KB1240 said:
    I am using Windows 10 Home (x64) Build 14393.1066(RS1) which came on the computer about a year ago when it was new.
    A year ago we were on version 1511, upgrading to version 1607 may have caused this issue and you wouldn't be the first.

    Reset BIOS to factory setting won't hurt if you get <<false>> reading in powershell. You even have the solution in post # 14. Thanks to @Anibor.

    All the best,
    Last edited by MikeMecanic; 07 May 2017 at 19:53.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Đ Designer Media Ltd
All times are GMT -5. The time now is 04:52.
Find Us




Windows 10 Forums