How to Enable Secure Boot on UEFI Systems?

SymptomsWhen attempting to enable Secure Boot, the system does not allow you to select the option to enable or disable Secure Boot. This is due to the way Acer's UEFI implementation requires a Supervisor Password be set in order to access this option.
UEFI is a newer technology that replaces the older standard BIOS.
DiagnosisCreating a Supervisor Password in UEFI will allow you to access the Secure Boot options. It is important that you remember this password as it will be required to make any changes in the UEFI interface.
SolutionCreate a Supervisor Password to gain access to the Secure Boot option.
Refer to our FAQ for all the steps on how to access Secure Boot on Desktops, Notebooks, and Tablets:
Enable or Disable Secure Boot in Windows 8

Das macht man 2-3 mal und dann ist nix mehr mit Bios. Dann kommt Passwort ist falsch und das war's dann. Hab ich schon auf verschiedenen Lappis gehabt. Sprich TOSHIBA... und Aspire E1-571g. Beim Toshi den Baustein ausgelötet neuen gekauft, beschrieben und wieder eingelötet. Kostet schlappe 150,-€. Mal schauen was beim Acer rauskommt.Vielleicht gibt es ja noch einen Jumper um das UEFI BIOS zurückzusetzen

Similar Messages

Windows 8.1 Ent eval enabled Secure Boot I think

I want to get my laptop back to its original format.
Currently dual booting Windows7/8.1
During the installation of Windows 8.1 Enterprise evaluation it paused to say it was going to enable secure boot. I did'nt think much of it I thought I could change it back from the bios. Did it flash my firmware? I checked the system status
with msinfo32.exe; was legacy mode and with powershell; secure boot not supported. I don't have any options to disable secure boot in the bios nor from within Windows -"I know how to disable it in windows 8.1". I can't boot a foreign
operating system, but I can boot a Microsoft OS which sounds like secure boot to me. I want to get it back to running Windows 7 dual booting with Linux. I use both at work and need both. I made the mistake by loading the Eval on my primary
laptop. I read I need to revert back to Windows 7 completely, formating and re-installing the OS. Will this clear my secure boot simulation issue? I have not changed the partitions or removed any O/S's. What's the best way
to proceed?

Hi,
I want to explain that, Secure Boot is indepent with system, you can disable it in UEFI interface.
To disable Secure Boot, you can follow the steps below:
1.Before disabling Secure Boot, consider whether it is necessary. From time to time, your manufacturer may update the list of trusted hardware, drivers, and operating systems for your PC. To check for updates, go to Windows Update, or check your manufacturer's
website.
2.Open the PC BIOS menu. You can often access this menu by pressing a key during the bootup sequence, such as F1, F2, F12, or Esc.
Or, from Windows, hold the Shift key while selecting Restart. Go to Troubleshoot > Advanced Options: UEFI Firmware Settings.
3.Find the Secure Boot setting, and if possible, set it to Disabled. This option is usually in either the Security tab, the Boot tab, or the Authentication tab.
4.Save changes and exit. The PC reboots.
I found an aticle that teach how to install dual-boot Windows 7 and Ubuntu 12.04 on a PC with UEFI hardware:
http://www.linuxbsdos.com/2012/10/11/dual-boot-windows-7-and-ubuntu-12-04-on-a-pc-with-uefi-hardware/
Hope this helps.
Roger Lu
TechNet Community Support

Secure Boot Status: DISABLED. Cannot enable Secure Boot via BIOS.

BIOS Security Page displays:
Secure Boot ENABLED
Secure Boot Status DISABLED
I have attempted to ENABLE Secure Boot multiple times but Secure Boot Status remains DISABLED
This problem occured after BIOS Upgrade to v3.07
I have Lenovo G510 Laptop
Windows 8.1
BIOS Version 79CN48WW (v3.07)
I have tried the recommended solution of "Reset to Setup Mode" and "Restore Factory Keys".
This did not solve the problem, Secure Boot Status still indicates DISABLED.
Please suggest an alternative solution to this problem.

I was scared to attempt the recommended solution of "Reset to Setup Mode" and "Restore Factory Keys", but it actually worked for me!
U430p

How to re-enable secure boot ?

Hi All,
On my X1 Carbon, I had to move from Win 8.1 pro to 8.1 Ent. I did a fresh install from scratch to only install what I need.
During my setup, I had to disable Secure boot, to boot on a USB Key, install 8.1 Enterprise. Now that everything is working, I would like to re-enable the secure boot option.
If I don't it directly in the BIOS, the laptop doesn't book any more.
ANy idea how to do it ? Do I have to import key from my 8.1 Ent to the Bios or something like this ?
Thank you
Christopher
Solved!
Go to Solution.

If you want to install Windows 8.1 in UEFI mode, and thus be able to Secure Boot it, you must set your machine to Secure Boot off, while installing, and in the Startup section of the BIOS, set UEFI/Legacy Boot to UEFI only.
NB, for a USB device to be able to install a UEFI version, it must be formatted to Fat32. I have no clue why this is required, but it is. I have installed Vista / 7 / 8 in EFI/UEFI mode from a basic Fat32 drive for many years if required.
I have seen this go wrong on a couple of machines, mainly because the HD is initialized as a MBR drive, and the generic MS Windows 8.1 ISO will not give you an option to initialize it as a GPT or a MBR drive, which the Recovery Media from Lenovo for Windows 8 actually does.
You can then either use a Windows bootable media to enter Repair/Recovery mode, and formatting your HD through the DISKPART utility or what is simpler, boot up a liveCD image of gParted and clear your drive completely by initializing the drive as GPT, exit the utility and then installing Windows 8.1, which will, due to the UEFI only selection in the Startup procedure, boot up your Windows 8.1 installation in UEFI mode and once finished, you will be able to turn Secure Boot back on.
Hope this helps!
Cheers!
ThinkPad W540 (20BG) - i7-4800MQ/24GB // ThinkPad T440s (20AQ) - i7-4600U/12GB
ThinkPad T440p (20AW) - i7-4800MQ/16GB // ThinkPad Helix (3698-6EU) - i5-3337U/4GB
ThinkPad W520 (4282-W4Q) - i7-2720QM/32GB // ThinkPad T400 (2767-W1C) - P9500/8GB
ThinkPad T61 (7665-CTO) - T7700/4GB // ThinkPad T60p (8741-C2G) - T7400/4GB

[SOLVED] Unable to boot in UEFI System

For several days I have been trying to get Arch to boot on my desktop by following the Beginners' guide and refering to other Arch wiki articles as well as Arch Forum posts for any problems that I had. I have tried a few bootloaders such as GRUB, gummiboot, and rEFInd and they all give the same result when I attempt to boot - a blinking cursor with no menu and then it returns me to the BIOS;. My UEFI motherboard is the ASUS VI Hero. I have disabled secure boot and both fast boots. I use a live USB with UEFI that is able to boot on my system and was created with dd.
Below are the outputs of some commands that might be useful.
root@archiso ~ # lsblk
NAME MAJ:MIN RM SIZE RO TYPE MOUNTPOINT
sda 8:0 0 223.6G 0 disk
├─sda1 8:1 0 512M 0 part
├─sda2 8:2 0 4G 0 part
└─sda3 8:3 0 219.1G 0 part
sdb 8:16 0 931.5G 0 disk
├─sdb1 8:17 0 487.3M 0 part
└─sdb2 8:18 0 931G 0 part
sdc 8:32 0 232.9G 0 disk
├─sdc1 8:33 0 100M 0 part
└─sdc2 8:34 0 232.8G 0 part
sdd 8:48 1 3.8G 0 disk
├─sdd1 8:49 1 595M 0 part /run/archiso/bootmnt
└─sdd2 8:50 1 31M 0 part
loop0 7:0 0 256.8M 1 loop /run/archiso/sfs/airootfs
loop1 7:1 0 32G 1 loop
└─arch_airootfs 254:0 0 32G 0 dm /
loop2 7:2 0 256M 0 loop
└─arch_airootfs 254:0 0 32G 0 dm /
Windows 7 is on sdc and Arch is on sda (sdb is an extra storage device for Windows). Both sdc and sda are SDDs.
root@archiso ~ # parted /dev/sda print
Model: ATA SanDisk SDSSDHII (scsi)
Disk /dev/sda: 240GB
Sector size (logical/physical): 512B/512B
Partition Table: gpt
Disk Flags:
Number Start End Size File system Name Flags
1 1049kB 538MB 537MB fat32 boot, esp
2 538MB 4833MB 4295MB linux-swap(v1)
3 4833MB 240GB 235GB ext4
root@archiso ~ # cat /mnt/etc/fstab
# UUID=0dff590b-24f1-47a2-870e-3f4d2c5bcb6a
/dev/sda3 / ext4 rw,relatime,data=ordered,discard 0 1
# UUID=FA3A-728C
/dev/sda1 /boot vfat rw,relatime,fmask=0022,dmask=0022,codepage=437,iocharset=iso8859-1,shortname=mixed,errors=remount-ro 0 2
# UUID=524e2980-d1e6-4948-88f9-c193682d5a9e
/dev/sda2 none swap defaults 0 0
# efibootmgr
BootCurrent: 0003
Timeout: 1 seconds
BootOrder: 0000,0001,0002,0003
Boot0000* grub
Boot0001* Hard Drive
Boot0002* ubuntu
Boot0003* UEFI: General USB Flash Disk
Boot0008 Hard Drive
Ignore ubuntu, that was on my HDD from before but has been removed. The grub option usually disappears after reboot unless I run efibootmgr -O after I install the bootloader. Using efibootmgr -v option, the output is a bit hard to read.
# efibootmgr -v
BootCurrent: 0003
Timeout: 1 seconds
BootOrder: 0000,0001,0002,0003
Boot0000* grub HD(1,800,100000,f9c04628-178b-4c94-9b92-62c04f2a5151)File(\EFI\grub\grubx64.efi)
Boot0001* Hard Drive BIOS(2,0,00)..GO..NO........u.W.D.C. .W.D.1.0.E.Z.E.X.-.0.8.M.2.N.A.0....................A.................................>..Gd-.;.A..MQ..L. . . . .W. .-.D.M.W.3.C.1.F.6.4.5.0.4.6........BO..NO........u.S.a.m.s.u.n.g. .S.S.D. .8.4.0. .E.V.O. .2.5.0.G.B....................A.................................>..Gd-.;.A..MQ..L.1.S.B.D.S.N.F.A.7.1.3.0.7.5. .L. . . . ........BO..NO........o.S.a.n.D.i.s.k. .S.D.S.S.D.H.I.I.2.4.0.G....................A...........................>..Gd-.;.A..MQ..L.4.1.3.4.3.7.0.4.7.0.2.0. . . . . . . . ........BO..NO........u.G.e.n.e.r.a.l. .U.S.B. .F.l.a.s.h. .D.i.s.k....................A.............................B..Gd-.;.A..MQ..L.G.e.n.e.r.a.l. .U.S.B. .F.l.a.s.h. .D.i.s.k........BO
Boot0002* ubuntu HD(1,800,f3a9e,3eaa3162-6352-4ad8-a725-89c738f2b3ad)File(\EFI\Ubuntu\grubx64.efi)
Boot0003* UEFI: General USB Flash Disk ACPI(a0341d0,0)PCI(1d,0)USB(1,0)USB(1,0)HD(1,fc,f800,612a5c68)..BO
Boot0008 Hard Drive BIOS(2,0,00)..GO..NO........o.S.a.n.D.i.s.k. .S.D.S.S.D.H.I.I.2.4.0.G....................A...........................>..Gd-.;.A..MQ..L.4.1.3.4.3.7.0.4.7.0.2.0. . . . . . . . ........BO..NO........u.W.D.C. .W.D.1.0.E.Z.E.X.-.0.8.M.2.N.A.0....................A.................................>..Gd-.;.A..MQ..L. . . . .W. .-.D.M.W.3.C.1.F.6.4.5.0.4.6........BO..NO........u.S.a.m.s.u.n.g. .S.S.D. .8.4.0. .E.V.O. .2.5.0.G.B....................A.................................>..Gd-.;.A..MQ..L.1.S.B.D.S.N.F.A.7.1.3.0.7.5. .L. . . . ........BO..NO........o.G.e.n.e.r.a.l. .U.S.B. .F.l.a.s.h. .D.i.s.k....................A.......................B..Gd-.;.A..MQ..L.G.e.n.e.r.a.l. .U.S.B. .F.l.a.s.h. .D.i.s.k........BO
I mount /dev/sda3 to /mnt and /dev/sda1 to /mnt/boot before I arch-chroot and when I tried grub, I installed with:
# grub-install --target=x86_64-efi --efi-directory=/boot--bootloader-id=grub --recheck
No errors are reported. I then make a config file for grub with:
# grub-mkconfig -o /boot/grub/grub.cfg
Last edited by DetotatedWam (2015-04-01 22:12:06)

Boot\ Secure Boot menu >
Secure Boot state: Disabled
Platform Key (PK) state: Unloaded
OS Type: Windows UEFI mode
I have tried setting "OS Type" to "Other OS" before but that doesn't change anything. I just tried it again and the BIOS freezes upon "Save Changes & Reset".
Boot\ Secure Boot menu\ Key Management >
PK Management: Unloaded
KEK Management: Unloaded
DB Management: Unloaded
DBX Management: Unloaded
The other day, I deleted all of them and backed them up on a USB in order to disable secure boot.
Note: After looking at this menu again I am noticing options to append from file for KEK, DB, and DBX that might help.
Append KEK from File
Allows you to load the additional
KEK from a storage device for an
additional db and dbx loaded
management.
[Yes]
Load the default KEK
[No]
Load from a USB storage device
Append db from File
Allows you to load the additional db
variable from a storage device so
that more custom signed UEFI
executble files can be loaded.
*UEFI executabled files include UEFI
boot loaders, drivers and
applications.
[Yes]
Load the default db
[No]
Load from a USB storage device
Append dbx from File
Allows you to load the additional
dbx variable from a storage device
so that more custom signed UEFI
executble files cannot be loaded.
*UEFI executabled files include UEFI
boot loaders, drivers and
applications.
[Yes]
Load the default dbx
[No]
Load from a USB storage device
Boot\ CSM (Compatibility Support Module)
Launch CSM: Enabled
Boot Device Control: UEFI and Legacy OPROM
Boot from Network Devices: Legacy OPROM first
Boot from Storage Devices: Both, UEFI first
Boot from PCI-E/PCI Expansion Devices: Legacy OPROM first
As a side note: After a reboot, I noticed the Arch boot option disappeared again.
Head_on_a_Stick wrote:Have you managed to boot any other distributions that are not compatible with Secure Boot?
I have been able to boot Windows 7 and ubuntu but I beleive both are compatible with Secure Boot so, no.
Head_on_a_Stick wrote:The Arch live ISO has the EFI applications PreLoader.efi & HashTool.efi included so that will boot up with Secure Boot enabled.
I will try this and post the results.
Edit: Now my BIOS Freezes everytime I try to save & exit.
Last edited by DetotatedWam (2015-04-01 19:59:18)

Two Range Expanders - How to enable security?

I have a linksys router (wrt54g ver 2) and two WRE54G range expanders both version 3. Everything is working fine but I can't enable security because I can't access the set up webpage of one of the expanders. Any ideas? Or maybe I can use Mac Filtering but would I use the mac address of the expanders or the wireless computers? Or any other way to make my little network secure?
I have Windows XP and broadband.
Thanks.

First of all you need to setup your router, and get your wireless computers working. Then later, we can work on the range expanders.
To setup WEP security, do the following:
Turn off all your computers, except for one computer that it wired to the WRT54G.
Make sure the computer is wired to one of the numbered ports on the WRT54G, not the Internet port. Also, make sure the wireless card in the computer is turned off.
In the computer, temporarily turn off your software firewall.
Point your browser to 192.168.1.1
Enter your user name (if any) and password.
This will take you to the router's setup pages.
Go to the "Wireless" tab, "Basic Wireless Settings" subtab.
Change your SSID to a unique name. Do not use "linksys". This is the name of your wireless network, and eventually, you will need to enter it into all your network devices (computers, router, expanders, etc.).
Set "SSID Broadcast" to "enabled".
Write down the "Wireless channel" that you are using, and save the paper.
Click on the "Save Settings" button, then wait (3-60 seconds) for the screen to refresh.
Next go to the "Wireless MAC filter" subtab.
Set the "Wireless MAC filter" to "disabled" for now. (If you want to use this feature, we will need to come back later to set it up).
If you changed anything on this page, click the "Save Setting" button, and again wait for a screen refresh.
Next go to the "Security" tab, "Wireless Security" subtab.
Set the "Security Mode" to "WEP".
Click the "Save Settings" button, and again wait for a screen refresh. (Note: the "Save Settings" might not work until you do the rest of the stuff in this paragraph.)
Set the "Default Transmit Key" to "1".
Set the WEP encryption to "64bit 10 hex digits"
Insert your passphrase of 8 to 16 characters (no spaces), then click the "Generate" button.
Copy down "key 1" (it should be 10 hex digits) on a piece of paper and save it.
Click on the "Save Settings" button, and again wait for a refresh.
Exit your browser.
Power cycle your modem, router, and computer.
Login to your router again. Now verify that all of the above settings are still present in the router. If not, put them in again, and be sure to click on the "Save Settings" button on each page that you update. After you have your router setup correctly, disconnect the wire between your computer and router, then power cycle your entire system again.
Now, you must setup your computer for wireless. This setup varies from system to system. So you may have to try a few things to get it to work.
First, in the computer, temporarily turn off your software firewall.
Next, turn on your wireless card and try to display the available networks in your area. Look for the network with your SSID. If you see it, the display will probably also say "encrypted" or "WEP". Click on your network, then click on "Connect". The computer will then ask for your password. At this point, enter your 10 hex digit WEP "key 1", not your WEP password or passphrase. It should then connect. If it does connect, verify that you have a properly working wireless Internet connection.
If it does not connect, then go to your wireless settings and look for something called "Preferred Networks" or "Profiles". In this area, you will be able to enter the info on your network (SSID, WEP, and your "key 1" ). Also, setup your network as your default network, with automatic login. You may need to right click on your network and set this up in "Properties" or perhaps in "settings". Also, while you are here, delete any networks named "linksys", and also delete any other network that you do not recognize, or that you no longer use.
Once you get one computer working, then setup your other computers for wireless. Get all your wireless computers working properly first, and verify that they have a properly working wireless Internet connection.
When you have this done, let me know, then we can setup the range expanders.
But you must have a properly working wireless system before you can expand the range.
Message Edited by toomanydonuts on 08-13-2007 06:30 PM

How to enable security in HRMS

Hello
I want to know is there any way we can enable security in HRMS such a way that we can hide/mask National Identification Number/Salary etc from application and also from back end.
Thanks!

Security could be enable in HRMS in various ways . Using Security profile in Oracle HRMS controls the list of Employees that are visible to a given user from “Employee/Person Screen”.
For hide/mask National Identification Number/Salary information you can go with Form personlization.
Thanks

How to restore Windows boot after resizing system partition ?

I have an fairly new HP Pavilion 14-n228ca notebook which I intend to use mostly for Linux, but still wish to occasionally run the WIndows 8.1 that it shipped with.
I installed CentOS 6.5 using the dual-boot procedure I have used many times in the past with XP and Vista, viz. resize the main NTFS filesystem, delete the partition and recreate it smaller at the exact same start byte.
Normally (on XP,Vista) Windows boots from GRUB, but here I get an error "file \Boot\BCD - missing or contains errors"
F9 at boot gets me a hardware boot menu, where I have a choice of "OS boot manager", EFI file, or "notebook hard drive". The last gets me GRUB. The first drops me to a repair menu where I can try autorepair, which fails, or a command
line.
The command line allows me to run diskpart and assign a drive letter to the system partition, at which point I can run chkfs successfully and access files.
If I try "bootrec /rebuildbcd" it finds one valid volume at \\?\GLOBALROOT\Device\HardDiskVolume4\Windows but then says "system cannot find the file specified"
How can I restore the ability to boot the Windows partition, preferably without messing up the Linux one ?

I have an fairly new HP Pavilion 14-n228ca notebook which I intend to use mostly for Linux, but still wish to occasionally run the WIndows 8.1 that it shipped with.
I installed CentOS 6.5 using the dual-boot procedure I have used many times in the past with XP and Vista, viz. resize the main NTFS filesystem, delete the partition and recreate it smaller at the exact same start byte.
Normally (on XP,Vista) Windows boots from GRUB, but here I get an error "file \Boot\BCD - missing or contains errors"
F9 at boot gets me a hardware boot menu, where I have a choice of "OS boot manager", EFI file, or "notebook hard drive". The last gets me GRUB. The first drops me to a repair menu where I can try autorepair, which fails, or a command line.
The command line allows me to run diskpart and assign a drive letter to the system partition, at which point I can run chkfs successfully and access files.
If I try "bootrec /rebuildbcd" it finds one valid volume at \\?\GLOBALROOT\Device\HardDiskVolume4\Windows but then says "system cannot find the file specified"
How can I restore the ability to boot the Windows partition, preferably without messing up the Linux one ?
assuming your recovery partition is still extant, you can run that and go back to factory
backup files first natually
use a virtual machine linux or cloud
Corsair Carbide 300R with TX850V2
Asus M5A99FX PRO R2.0 CFX/SLI
AMD Phenom II 965 C3 Black Edition @ 4.0 GHz
G.SKILL RipjawsX DDR3-2133 8 GB
EVGA GTX 660 Ti FTW Signature 2 (GK104 Kepler)
Asus PA238QR IPS LED HDMI DP 1080p
ST2000DM001 & Windows 8.1 Professional x64
Microsoft Wireless Desktop 2000 & Wacom Bamboo CHT470M
Place your rig specifics into your signature like I have, makes it 100x easier to understand!
Hardcore Games Legendary is the Only Way to Play!

How to enable HTTPS Port in abap system

Hello All,
Hope all are doing great,can any one please tell me the procedure step by step how can i enable https port in my only abap system,is it required to enable ssl also for this?..
Regards,
Syed

Hi,
For enabling the HTTPS port you need to do alot many things
At first change the para meters in Rz10
icm/server_port_0 - PROT=HTTPS, PORT=1443, TIMEOUT=900
icm/HTTPS/verify_client - 1
ms/server_port_0 - PROT=HTTPS, PORT=1443
SE80 - Utilities > Settings > Internet Transaction Sevrer = HTTPS
and also check SMICM under Services HTTPS is not showing as Active
and still if you are facing any issue with the port check with the network team/firewall team whether any port is being blocked on the network/firewall.
Regards
Mohammed nizam

How to enable security Settings?

I cannot use my security settings to prevent a document from being editted. What do I need to do?

Use Adobe Acrobat for this.

How to enable security with users from an LDAP server

Hello all
My company is using a 10.1.3 Oracle LDAP server and I would like to authenticate users of my application against it.
Can anyone point to the correct documentation?
Thanks in advance
Thanassis

Thanks for your reply
I 've gone through "Introduction to ADF Security in JDeveloper 10.1.3.2" and also Chapter 30 of "Application Development Framework Developer's Guide For Forms/4GL Developers"
There still one thing I cannot understand : Where do I define the mapping between LDAP users and security roles?
THanassis

Secure Boot Platform Key?

I am stumped on how to enable Secure Boot on my MSI Z87-G43 Gaming motherboard..
I have a MSI GTX770 flashed to gop, I have my solid state drive set to GPT and uefi with windows 8.1 pro installed, Windows 8 Boot, Fast Boot, etc all work, except When I try to enable Secure Boot, it says:
"secure boot can be changed only in user mode, try installing Platform Key (PK)"
What is the platform key and how can i enable it or how can I get in usermode?
I thought maybe it meant set up a bios password, one for Administrator, and one for User, so i did that, and tried logging in under User, and no luck, instead everything is greyed out.
I tried googling that message's keywords but no luck...
Any ideas or help would be appreciated.

Thank you very much for the reply, just as you replied, I was about to write a follow up. I ended up stumbling upon a guide at Intel: https://communities.intel.com/community/vproexpert/blog/2012/06/26/microsoft-windows-8--enabling-secure-boot
Worked like a charm.
Set the mode from Standard to Custom, had it generate the factory keys, went back, set it back to standard and it allowed me to Enable Secure Boot
Thanks!

Windows 8.1 - Secure boot isn't properly configured

Hello...
i have brought new laptop...when i install 8.1
it show the secure boot not correctly configure....
please give me solution
How To Enable secure boot in bios...?????

Dear Hiteshpadhara
Welcome in lenovo community
Have you tried to reset the BIOS using the F9 and F10 to save and exit ?
Let us know
Thanks
Alaa
Did someone help you today? Press the star on the left to thank them with a Kudo!
If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"! This will help the rest of the Community with similar issues identify the verified solution and benefit from it.
Follow @LenovoForums on Twitter!

Yoga 11 Secure Boot State Off - How to enable it?

Hi all, first of all I would like to provide you with some background information. I purchased (in Germany) 2 identical Yoga 11 machines (MAS29GE). Both had display ghosting issues and one of them had a lose trackpad. So, I sent them in for repair.
After getting back the 2nd one as well, I wanted to see whether the BIOS versions are identical on them, since the repair report said that there was a BIOS update performed on both machines. The BIOS version seems to be the very same I had before sending them in: v1.2.58, 05.12.2012
But then I noticed something strange: on one of the Yogas the Secure Boot State is Off. I checked it also with PowerShell and it shows False, meaning disabled.
So, I called Lenovo support, but they weren't able to help me. The answer was that I cannot enter the BIOS to change this.
However, I suspect that either the technicians entered the BIOS and forgot to enable secure boot later on, or something else messed it up. What I also noticed after receiving the Yogas back from repair is that the "Advanced Startup" in
Windows shows more options on one machne than the other. Please, see the below images for details:
Link to picture
Link to picture
I did 2x System restores already (1x quick, 1x secure), but the Secure Boot State did not change (this was to be expected since this settings is in the UEFI BIOS and not in Windows - nevertheless, was worth a try).
As I read in other comments, Microsoft did not intend users to enter the BIOS on Windows RT machines.
Please, note that I did not "Jailbreak" the system, for 1) I have no idea how to do it and 2) I don't intend to hack it. One reason why I bought Windows RT because I wanted to keep legacy x86 viruses out of the system.
So, what do you suggest? I really do not wish to send the machine back for another 2 weeks only for 1 single change in the BIOS. Please, help! Thanks!
Moderator note; picture(s) totalling >50K converted to link(s) Forum Rules
Solved!
Go to Solution.

Hello,
As far as I know, you are the only individual I have ever heard of who has received a Windows RT-based computer with the Secure Boot option disabled.
Because of this, I am not certain what steps you would take to (re)enable this functionality on the device.
What I would suggest you do is perhaps post a message on the Windows 8, RT Development and Hacking forum over at XDA-Developers, and perhaps one of the members over there can make some suggestions.
Regards,
Aryeh Goretsky
I am a volunteer and neither a Lenovo nor a Microsoft employee. • Dexter is a good dog • Dexter je dobrý pes
S230u (3347-4HU) • X220 (4286-CTO) • W510 (4318-CTO) • W530 (2441-4R3) • X100e (3508-CTO) • X120e (0596-CTO) • T61p (6459-CTO) • T43p (2678-H7U) • T42 (2378-R4U) • T23 (2648-LU7)
Deutsche Community Comunidad en Español Русскоязычное Сообщество

[SOLVED] Dual Boot Window 7 & Arch on a Uefi system.

From the Wiki
Windows 7 x86_64 versions support booting in x86_64 UEFI mode from GPT disk only, OR in BIOS mode from MBR/msdos disk only. They do not support IA32 (x86 32-bit) UEFI boot from GPT/MBR disk, x86_64 UEFI boot from MBR/msdos disk, or BIOS boot from GPT disk.
I don't understand this. As stated in the title I have a ueif system so that means I have to create a GPT disk ? I already have a gpt disk which I confirmed by running Arch Live USB. Under type it said GPT. I don't understand this at all
However if Arch is installed in BIOS-GPT in one disk and Windows is installed in BIOS-MBR mode in another disk, then the BIOS bootloader used by Arch CAN boot the Windows in the other disk, if the bootloader itself has the ability to chainload from another disk.
Note: If Arch and Windows are dual-booting from same disk, then Arch SHOULD follow the same firmware boot mode and partitioning combination used by the installed Windows in the disk.
In the Note above it says both Arch and Windows follow the same boot mode if they are dual booting from same disk. I DO NOT want to do this. I have already decided to partition my drive with 200 Gb going to Windows and 500 Gb going to Arch. Does this mean that I should install both in different modes i.e. Arch in Bios-GPT and Windows in Bios-MBR.
The recommended way to setup a Linux/Windows dual booting system is to first install Windows, only using part of the disk for its partitions. When you have finished the Windows setup, boot into the Linux install environment where you can create additional partitions for Linux while leaving the existing Windows partitions untouched.
UEFI systems
Both Gummiboot and rEFInd autodetect Windows Boot Manager \EFI\Microsoft\Boot\bootmgfw.efi and show it in their boot menu, so there is no manual config required.
For GRUB(2) follow GRUB#Windows_Installed_in_UEFI-GPT_Mode_menu_entry.
Syslinux (as of version 6.02 and 6.03-pre9) and ELILO do not support chainloading other EFI applications, so they cannot be used to chainload \EFI\Microsoft\Boot\bootmgfw.efi .
Computers that come with newer versions of Windows often have secure boot enabled. You will need to take extra steps to either disable secure boot or to make your installation media compatible with secure boot.
Being a beginner should I go with Gummiboot then. GRUB made a mess last time.
Also my secure boot is NOT enabled so is that good.
I have read the FAQs, Beginner's guide, Installation Guide, Dual Boot wiki entry but I just don't understand the above concepts. But it looks this this is the main thing in dual booting. Almost everything else is doable but this I have to get right on account of what happened the last time I installed Arch without getting the above right.
Last edited by Some Arch Lovin (2014-06-14 08:53:14)

A few issues with the dual boot setup
Hello again, I lost my dual factor authentication grid from lastpass. Opensuse was acutally overwriting new pdf files over my old pdf files so now that grid pdf is actually an Arch cheat cheet with the name last_pass_grid.pdf. And the gmail account I used to register to Arch forums is also in last pass.
This is why I created another account. I am some arch lovin.
The installation went smoothly but I could not dual boot Windows7 with Arch because my Win7 image is not UEFI bootable so had to dual boot win8(not a fan at all) and arch.
Almost everything is working correctly. I have a few issues that aren't affecting how the system is working but they still need sorting out.
I'll do them one at a time but I want to know from the admins if I should start a new thread? Because in a way this thread accomplished it job i.e. win7 and arch dual booting in uefi system.
If the answer is yes I should create a new thread depending upon the issue then I will do that but in case its a no since I have only 2-3 problems I am going to ask help for the first one.
My gummiboot is not working on startup. I have to press f12 and use bios booting menu to boot. The problem with that is if I put Windows at the top of the boot priority the bios does not show F12 and F2 at the time of booting up so I can't access the boot menu. I have to boot into Windows and crash it by holding the power button and then the F12 options shows up and I am able to boot into Arch. If I put Arch at the top then Windows keeps restoring back to an earlier version due to start up options.
NOTE : I can't be sure but one it did work(only once). I checked the images online to compare with what I saw and its very similar. An all black screen with three bootloading options
Windows
Arch
Opensuse(don't know why I created a completely new GPT partition table)
This is what I did while installing Gummiboot
# mount -t efivarfs efivarfs /sys/firmware/efi/efivars
# pacman -S gummiboot
# gummiboot install
I tried going through the gummiboot to see if I can do something but it very difficult to comprehend as a beginner. All I get is the characters gummiboot understands but thats all.
Last edited by Archer61 (2014-06-11 13:48:56)

How to Enable Secure Boot on UEFI Systems?

Similar Messages

Maybe you are looking for