Secure boot blocking Windows Boot Manager on Lenovo LOQ 15IRH8

Ensuring Secure Boot Functionality on Your Lenovo LOQ 15IRH8 After BIOS Update

Introduction

Secure Boot is a crucial security feature designed to prevent unauthorized operating systems and malicious software from loading during the boot process. However, after recent BIOS updates, some users have encountered issues enabling Secure Boot on their systems, including the Lenovo LOQ 15IRH8. This article explores common causes and provides guidance on how to troubleshoot and resolve Secure Boot conflicts, ensuring your system maintains both security and functionality.

Understanding the Issue

Recent BIOS updates can sometimes alter the configuration of Secure Boot, causing it to switch to setup mode. In this state, Secure Boot enforcement is disabled, and attempts to enable it may fail or result in conflicts — such as blocking the Windows Boot Manager. Restoring factory keys or resetting BIOS settings might initially enable Secure Boot but can also obstruct Windows Boot Manager if not configured correctly.

What Has Been Tried

Several standard troubleshooting steps have been attempted, including:

• Installing all available system updates.

• Running BIOS updates via Command Prompt and Task Scheduler.

• Reinstalling Windows through Windows Update.

• Rebuilding the Boot Configuration Data (BCD).

• Resetting BIOS to default settings.

Despite these efforts, Secure Boot remains problematic, with some solutions involving complex database modifications or key management, which can be risky without proper expertise.

Recommended Solutions

1. Verify Secure Boot Settings in BIOS

2. Enter BIOS Setup: Restart your laptop and press the appropriate key (usually F2, F10, or Delete) to enter BIOS/UEFI.

3. Locate Secure Boot Options: Navigate to the Security or Boot menu.

4. Enable Secure Boot: Ensure Secure Boot is enabled. If it remains in setup mode, proceed to the next steps.

5. Clear Secure Boot Keys and ReEnroll

6. Clear Keys: In BIOS, find the option to clear or delete existing Secure Boot keys.

7. Save and Reboot: Save changes and restart.

8. Reconfigure Keys: After clearing, reinitialize Secure Boot keys to factory defaults, if available.

9. Ensure UEFI Mode is Enabled

10. Confirm that the system is booting in UEFI mode—not Legacy BIOS.

11. This setting can typically be found in the BIOS under Boot Options.

12. Disable Fast Boot and Secure Boot Temporarily

13. Sometimes, disabling features like Fast Boot before re-enabling Secure Boot can help.

14. Disable Fast Boot in BIOS, then reattempt configuring Secure Boot.

15. Update BIOS to the Latest Version