How to re-enable secure boot ?

Hi All,
On my X1 Carbon, I had to move from Win 8.1 pro to 8.1 Ent. I did a fresh install from scratch to only install what I need.
During my setup, I had to disable Secure boot, to boot on a USB Key, install 8.1 Enterprise. Now that everything is working, I would like to re-enable the secure boot option.
If I don't it directly in the BIOS, the laptop doesn't book any more.
ANy idea how to do it ? Do I have to import key from my 8.1 Ent to the Bios or something like this ?
Thank you
Christopher
Solved!
Go to Solution.

If you want to install Windows 8.1 in UEFI mode, and thus be able to Secure Boot it, you must set your machine to Secure Boot off, while installing, and in the Startup section of the BIOS, set UEFI/Legacy Boot to UEFI only.
NB, for a USB device to be able to install a UEFI version, it must be formatted to Fat32. I have no clue why this is required, but it is. I have installed Vista / 7 / 8 in EFI/UEFI mode from a basic Fat32 drive for many years if required.
I have seen this go wrong on a couple of machines, mainly because the HD is initialized as a MBR drive, and the generic MS Windows 8.1 ISO will not give you an option to initialize it as a GPT or a MBR drive, which the Recovery Media from Lenovo for Windows 8 actually does.
You can then either use a Windows bootable media to enter Repair/Recovery mode, and formatting your HD through the DISKPART utility or what is simpler, boot up a liveCD image of gParted and clear your drive completely by initializing the drive as GPT, exit the utility and then installing Windows 8.1, which will, due to the UEFI only selection in the Startup procedure, boot up your Windows 8.1 installation in UEFI mode and once finished, you will be able to turn Secure Boot back on.
Hope this helps!
Cheers!
ThinkPad W540 (20BG) - i7-4800MQ/24GB // ThinkPad T440s (20AQ) - i7-4600U/12GB
ThinkPad T440p (20AW) - i7-4800MQ/16GB // ThinkPad Helix (3698-6EU) - i5-3337U/4GB
ThinkPad W520 (4282-W4Q) - i7-2720QM/32GB // ThinkPad T400 (2767-W1C) - P9500/8GB
ThinkPad T61 (7665-CTO) - T7700/4GB // ThinkPad T60p (8741-C2G) - T7400/4GB

Similar Messages

  • How to Enable Secure Boot on UEFI Systems?

    SymptomsWhen attempting to enable Secure Boot, the system does not allow you to select the option to enable or disable Secure Boot.  This is due to the way Acer's UEFI implementation requires a Supervisor Password be set in order to access this option.
    UEFI is a newer technology that replaces the older standard BIOS.
    DiagnosisCreating a Supervisor Password in UEFI will allow you to access the Secure Boot options. It is important that you remember this password as it will be required to make any changes in the UEFI interface.
    SolutionCreate a Supervisor Password to gain access to the Secure Boot option. 
    Refer to our FAQ for all the steps on how to access Secure Boot on Desktops, Notebooks, and Tablets:
    Enable or Disable Secure Boot in Windows 8

    Das macht man 2-3 mal und dann ist nix mehr mit Bios. Dann kommt Passwort ist falsch und das war's dann. Hab ich schon auf verschiedenen Lappis gehabt. Sprich TOSHIBA... und Aspire E1-571g. Beim Toshi den Baustein ausgelötet neuen gekauft, beschrieben und wieder eingelötet. Kostet schlappe 150,-€. Mal schauen was beim Acer rauskommt.Vielleicht gibt es ja noch einen Jumper um das UEFI BIOS zurückzusetzen

  • Windows 8.1 Ent eval enabled Secure Boot I think

    I want to get my laptop back to its original format.
    Currently dual booting Windows7/8.1
    During the installation of Windows 8.1 Enterprise evaluation it paused to say it was going to enable secure boot.  I did'nt think much of it I thought I could change it back from the bios.  Did it flash my firmware?  I checked the system status
    with msinfo32.exe; was legacy mode and with powershell; secure boot not supported.  I don't have any options to disable secure boot in the bios nor from within Windows -"I know how to disable it in windows 8.1".  I can't boot a foreign
    operating system, but I can boot a Microsoft OS which sounds like secure boot to me.  I want to get it back to running Windows 7 dual booting with Linux.  I use both at work and need both.  I made the mistake by loading the Eval on my primary
    laptop.  I read I need to revert back to Windows 7 completely, formating and re-installing the OS.  Will this clear my secure boot simulation issue?  I have not changed the partitions or removed any O/S's.   What's the best way
    to proceed?

    Hi,
    I want to explain that, Secure Boot is indepent with system, you can disable it in UEFI interface.
    To disable Secure Boot, you can follow the steps below:
    1.Before disabling Secure Boot, consider whether it is necessary. From time to time, your manufacturer may update the list of trusted hardware, drivers, and operating systems for your PC. To check for updates, go to Windows Update, or check your manufacturer's
    website.
    2.Open the PC BIOS menu. You can often access this menu by pressing a key during the bootup sequence, such as F1, F2, F12, or Esc.
    Or, from Windows, hold the Shift key while selecting Restart. Go to Troubleshoot > Advanced Options: UEFI Firmware Settings.
    3.Find the Secure Boot setting, and if possible, set it to Disabled. This option is usually in either the Security tab, the Boot tab, or the Authentication tab.
    4.Save changes and exit. The PC reboots.
    I found an aticle that teach how to install dual-boot Windows 7 and Ubuntu 12.04 on a PC with UEFI hardware:
    http://www.linuxbsdos.com/2012/10/11/dual-boot-windows-7-and-ubuntu-12-04-on-a-pc-with-uefi-hardware/
    Hope this helps.
    Roger Lu
    TechNet Community Support

  • Secure Boot Status: DISABLED. Cannot enable Secure Boot via BIOS.

    BIOS Security Page displays:
    Secure Boot ENABLED
    Secure Boot Status DISABLED
    I have attempted to ENABLE Secure Boot multiple times but Secure Boot Status remains DISABLED
    This problem occured after BIOS Upgrade to v3.07
    I have Lenovo G510 Laptop
    Windows 8.1
    BIOS Version 79CN48WW (v3.07)
    I have tried the recommended solution of "Reset to Setup Mode" and "Restore Factory Keys".
    This did not solve the problem, Secure Boot Status still indicates DISABLED.
    Please suggest an alternative solution to this problem.

    I was scared to attempt the recommended solution of "Reset to Setup Mode" and "Restore Factory Keys", but it actually worked for me!
    U430p

  • Yoga 11 Secure Boot State Off - How to enable it?

    Hi all, first of all I would like to provide you with some background information. I purchased (in Germany) 2 identical Yoga 11 machines (MAS29GE). Both had display ghosting issues and one of them had a lose trackpad. So, I sent them in for repair.
    After getting back the 2nd one as well, I wanted to see whether the BIOS versions are identical on them, since the repair report said that there was a BIOS update performed on both machines. The BIOS version seems to be the very same I had before sending them in: v1.2.58, 05.12.2012
    But then I noticed something strange: on one of the Yogas the Secure Boot State is Off. I checked it also with PowerShell and it shows False, meaning disabled.
    So, I called Lenovo support, but they weren't able to help me. The answer was that I cannot enter the BIOS to change this.
    However, I suspect that either the technicians entered the BIOS and forgot to enable secure boot later on, or something else messed it up. What I also noticed after receiving the Yogas back from repair is that the "Advanced Startup" in
    Windows shows more options on one machne than the other. Please, see the below images for details:
    Link to picture
    Link to picture
    I did 2x System restores already (1x quick, 1x secure), but the Secure Boot State did not change (this was to be expected since this settings is in the UEFI BIOS and not in Windows - nevertheless, was worth a try).
    As I read in other comments, Microsoft did not intend users to enter the BIOS on Windows RT machines.
    Please, note that I did not "Jailbreak" the system, for 1) I have no idea how to do it and 2) I don't intend to hack it. One reason why I bought Windows RT because I wanted to keep legacy x86 viruses out of the system.
    So, what do you suggest? I really do not wish to send the machine back for another 2 weeks only for 1 single change in the BIOS. Please, help! Thanks!
    Moderator note; picture(s) totalling >50K converted to link(s) Forum Rules
    Solved!
    Go to Solution.

    Hello,
    As far as I know, you are the only individual I have ever heard of who has received a Windows RT-based computer with the Secure Boot option disabled.
    Because of this, I am not certain what steps you would take to (re)enable this functionality on the device.
    What I would suggest you do is perhaps post a message on the Windows 8, RT Development and Hacking forum over at XDA-Developers, and perhaps one of the members over there can make some suggestions.
    Regards,
    Aryeh Goretsky
    I am a volunteer and neither a Lenovo nor a Microsoft employee. • Dexter is a good dog • Dexter je dobrý pes
    S230u (3347-4HU) • X220 (4286-CTO) • W510 (4318-CTO) • W530 (2441-4R3) • X100e (3508-CTO) • X120e (0596-CTO) • T61p (6459-CTO) • T43p (2678-H7U) • T42 (2378-R4U) • T23 (2648-LU7)
      Deutsche Community   Comunidad en Español Русскоязычное Сообщество

  • How do you globally enable security?

    I defined a port 443 listen socket, a virtual server class and virtual server for SSL. However when I apply the changes I get the following error:
    <web-server>/config/server.xml, line 25, column 407: Security is globally disabled in this server instance. Secure servers cannot be enabled
    How can I enable security? Where is "globally disabled"?
    Thank you!

    I figured it out. It's in chapter 6 of the Admin Guide. There is a section called "Configuring Security Globally".

  • UCS secure boot - should I enable?

    C220 M3 server shipped with 1.5(4d). Looking to upgrade to ucs-c220-huu-2.0.1a. This is the recommeded release on cisco.com.  Anyone have experience or recommendations on this? Should I use v2.0.1a and/or enable secure boot?  Thanks!

    If you're talking about Secure Boot then I'm assuming you're talking about UEFI.
    If so, and you're planning on running VMware, you may want to look at 2.0(3d)1 that came out a couple of days ago.  This has a fairly critical fix that fixes an issue where the onboard LOM's won't detect and load drivers properly in VMware when the system is booted with UEFI (this will prevent you installing VMware under UEFI - but it will work under legacy BIOS).  2.0(1)a still has this bug.
    I'm running 2.0(3d)1 and it seems to be good so far.

  • Windows 8.1 - Secure boot isn't properly configured

    Hello...
    i have brought new laptop...when i install 8.1
    it show the secure boot not correctly configure....
    please give me solution
                            How To Enable secure boot in bios...?????

    Dear Hiteshpadhara
    Welcome in lenovo community
    Have you tried to reset the BIOS using the F9 and F10 to save and exit ?
    Let us know
    Thanks 
    Alaa
    Did someone help you today? Press the star on the left to thank them with a Kudo!
    If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"! This will help the rest of the Community with similar issues identify the verified solution and benefit from it.
    Follow @LenovoForums on Twitter!

  • Secure Boot Platform Key?

    I am stumped on how to enable Secure Boot on my MSI Z87-G43 Gaming motherboard..
    I have a MSI GTX770 flashed to gop, I have my solid state drive set to GPT and uefi with windows 8.1 pro installed, Windows 8 Boot, Fast Boot, etc all work, except When I try to enable Secure Boot, it says:
     "secure boot can be changed only in user mode, try installing Platform Key (PK)"
    What is the platform key and how can i enable it or how can I get in usermode?
    I thought maybe it meant set up a bios password, one for Administrator, and one for User, so i did that, and tried logging in under User, and no luck, instead everything is greyed out.
    I tried googling that message's keywords but no luck...
    Any ideas or help would be appreciated.

    Thank you very much for the reply, just as you replied, I was about to write a follow up. I ended up stumbling upon a guide at Intel: https://communities.intel.com/community/vproexpert/blog/2012/06/26/microsoft-windows-8--enabling-secure-boot
    Worked like a charm.
    Set the mode from Standard to Custom, had it generate the factory keys, went back, set it back to standard and it allowed me to Enable Secure Boot 
    Thanks!

  • Upgrading Windows 7 (Legacy BIOS/MBR Disk) to Windows 8 (UEFI/GPT/Secure Boot)

    Hi there,
    I've recently purchased a W530 with Windows 7 pre-installed.  Ultimately, I'd like to replace this with Window 8 + Secure Boot.  I believe I can get Windows 8 via the Microsoft Upgrade offer for a reasonable price, since this was a recent purchase.
    What's the best way to reach my goal?
    The Windows 7 install uses Legacy BIOS to boot with an MBR disk.
    I had a quick look at Acronis, and I can see that it's possible that the "OS will be automatically converted to support UEFI booting" (http://www.acronis.com/support/documentation/ABR11/index.html#14021.html) when using it's tool.
    If I don't use this approach, what can I do?  Can I:
    1. Use Rescue and Recovery in Windows 7 (Legacy BIOS/MBR disk)
    2. Wipe the drive and reformat it with GPT?
    3. Install Windows 7 with UEFI enabled using the Rescue and Recovery made in step 1?
    4. At this point, I would now have UEFI and GPT.
    5. Perform an Upgrade from Windows 7 to Windows 8 and enable Secure Boot?
    Any thoughts as to whether this would work?
    Richard.

    Hi richii,
    The Acronis approach ends up in failure. Didn't give it a second look at the reason, since the tool it's not necessary. I also tried several other "automatic" tools without success.
    The recovery approach will fail because it's tied up to BIOS boot.
    But I've performed the conversion from BIOS to UEFI two times successfully. After some digging, is not SO hard. It's just... "undocumented". Very, very undocumented, hehe. I made a step-by-step guide: http://social.technet.microsoft.com/wiki/contents/articles/14286.converting-windows-bios-installatio...
    Let me know if it helps you...
    Anyway, if you don't have data/software, I would go for the clean install approach.
    Cheers.
    If I helped you, please give me some kudos! ^^

  • Enable secure session cookie on Sun ONE Web Server 6.1

    How can I enable secure session cookie (JSESSIONID) on Sun ONE Web Server 6.1?.
    For 6.0 is <session-cookie is-secure="true"/> inside the <web-app> tags in web-apps.xml but I'm not able to find this setting for 6.1.

    There is a fix in 6.1sp5 that enables the session cookie to be marked as secure.
    See the release notes and search for 6262885 under Issues Resolved in 6.1sp5:
    http://docs.sun.com/app/docs/doc/819-2479/6n4p1bdea?a=view

  • G500 Secure Boot Status Disabled cant change

    Hi everybody
    I have Lenovo G500 with Windows 8.1 Profecional
    I use UEFI boot mode, but there is a problem with secure boot.
    In BIOS Page Security I have
      SECURE BOOT                   ENABLED       
      SECURE BOOT STATUS    DISABLED    I cannot change it although I try everythink
    Windows 8.1 tell me in System informacion(msinfo32) I have secure boot off.
    I dont have any watermark in my Desktop.
    I only want to use SECURE BOOT.
    I tryed everythink ,but nothink help me.
    Solved!
    Go to Solution.

    Open the bios menu. If your secure boot is enabled, then in the security tab you will get two more options to "Reset to setup mode" and "Restore Factory Keys". just hit enter on those two options.
    then exit saving changes and enjoy.

  • How do I enable booting from CD/DVD and USB drives?

    Ok, I have been struggling with this all night, and I am stumped.  I have a brand new z510 notebook, and I need to do a clean install of windows 8.1.  Problem is that I can't seem to boot from CD or USB.  I have entered the bios, and although the DVD rom drive works, and it shown correctly in BIOS, it does NOT allow me to add it to the boot list.  Also, there is an option called 'Boot From USB'  I enable that, and still the USB boot does not show up in the boot list.  The only thing I have in the boot list is the 'Windows Boot Manager' and it lists the name of my drive.  
    I thought that maybe secure boot was the issue, but I tried disabling this, and is still doesn't let me do what I want. 
    I am kind of at my wit's end here.  I just paid $800 for a top of the line laptop, and I can't even boot from a cdrom.  Every computer I have had since the 1980s have allowed me to do just that without trouble.  
    What am I missing??
    Solved!
    Go to Solution.

    Do you see any BIOS settings like "Boot mode" with a "CSM" or "Legacy" type of item as a choice? You might try toggling that to see if you can successfully boot from external media that way.
    Disclaimer: I don't have a Z510 to confirm the BIOS screens. I'm going by inference from what I see on my Y2P and X1C.
    Please let me know if this works.
    Regards.
    Edit: LenBlazer was quicker on the draw.
    Please do post back with how things work out.
    English Community   Deutsche Community   Comunidad en Español   Русскоязычное Сообщество
    Community Resources: Participation Rules • Images in posts • Search (Advanced) • Private Messaging
    PM requests for individual support are not answered. If a post solves your issue, please mark it so.
    X1C3 Helix X220 X301 X200T T61p T60p Y3P • T520 T420 T510 T400 R400 T61 Y2P Y13
    I am not a Lenovo employee.

  • What Is "Silent Boot" And How Do I Enable It?

    Hey,
    I was wondering, My friend has an MSI MOBO, and when he turns his computer on, insead of listing all of that technical crap, it says in a full screen, MSI -- Link To The Future  he has an AMI Bios.
    I want my motherboard to say that too,  , so i was wondering how do you enable it....he has to press tab when he turns the computer on, but i tried that.  I have Phoenix Bios, maybe thats why  
    PLease help, ive also heard of it being called Silent Boot, but nothing in my users manual OR bios say that  
    HELP

    Crap, not in Advanced Chipset Features (It Says "Features" Phoenix  )
    Well, Thanks Anyway...
    Anyone Else Know?

  • How to change mail-enabled security group to security group

    Hi,
    As a test I have configured on the properties page of a security group an email adres. By doing this converted a security group to a mail-enabled security group. Also this group has been transferd to Office 365. But after testing I want to make the distribution
    groups on the Exchange in Office 365. So I deleted the emaila dres of the security group, but it still synchronized to Office 365 as a mail-enabled security group. How can I change in AD the mail-enabled security group to a security group?
    Thanks in advance

    Hi StijnS,
    For the O365 question there are Office 365 technical forums available at
    http://community.office365.com/en-us/f/default.aspx.
    The related article:
    Office 365 Forum Assistant
    http://blogs.technet.com/b/neilhobson/archive/2011/09/20/office-365-forum-assistant.aspx
    Hope this helps.
    We
    are trying to better understand customer views on social support experience, so your participation in this
    interview project would be greatly appreciated if you have time.
    Thanks for helping make community forums a great place.

Maybe you are looking for