secure boot enabled but status disabled lenovo

reddit.com › r/lenovolegion › secure boot status disabled

r/LenovoLegion on Reddit: Secure Boot status disabled

February 28, 2024 -

Hello everyone Since yesterday i'm trying to enable secure boot. But even if i select enabled in secure boot the status won't change. I tried everything i could find but can't change the status. For information this my specs : Windows 11 Lenovo IdeaPad Gaming 3 15ARH05 AMD Ryzen 5 All help is welcomed Thanks in advance

Top answer

1 of 5

Try to use that option "Restore factory keys" and it will work. I had the same issue and I have Legion Pro purchased without the Windows license.

2 of 5

"restore factory keys" so that platform mode changes from "setup mode" to "user mode" and then u can enable secure boot

Lenovo Community

forums.lenovo.com › t5 › Lenovo-IdeaPad-1xx-3xx-5xx-7xx-Edge-LaVie-Z-Flex-Laptops › Unable-to-enable-secure-boot-on-a-lenovo-laptop › m-p › 5142134

Unable-to-enable-secure-boot-on-a-lenovo-laptop - English Community - LENOVO COMMUNITY

April 22, 2022 - My device is Lenovo ideapad gaming 3 15ach6 with a ryzen 5 5600h. The device is running windows 11 enterprise. ... If it says Secure Boot is enabled, but Secure Boot Status shows it is disabled, your Platform Mode is probably set to "Setup Mode" instead of "User Mode".

Videos

01:50

YouTube

How To Fix Secure Boot Status Disabled on Lenovo ThinkBook Laptops ...

January 7, 2025

315

support.lenovo.com

Disable and Enable Secure Boot in BIOS - Lenovo Support Quick Tips ...

01:00

YouTube

Lenovo Laptopta Secure Boot Nasıl Açılır? - YouTube

October 13, 2022

View all

Lenovo Support

support.lenovo.com › us › en › solutions › ht515493-secure-boot-mode-cannot-be-set-thinkpad

Secure Boot Mode cannot be set - ThinkPad - Lenovo Support US

Learn how to resolve the Secure Boot Mode issue on your ThinkPad. Follow the guide to fix the issue that the Secure boot option shows Disabled and cannot be changed.

uBackup

ubackup.com › aomei software › articles › how to solve secure boot status disabled on lenovo laptops

How to Solve Secure Boot Status Disabled on Lenovo Laptops

September 5, 2025 - If the BIOS Mode displays UEFI and the Secure Boot State shows Off, it means that Secure Boot is currently disabled. ☎ Now, you'll need to make Secure Boot status enabled on Lenovo.

reddit.com › r/lenovolegion › no able to enable secure boot

r/LenovoLegion on Reddit: No able to enable secure boot

October 28, 2021 -

Legion 5i. Just updated to windows 11 and for some reason I'm not able to enable secure boot in the bios. The option to enable and disable is there in security, but updating it doesn't change anything.

Btw, I need to enable secure boot cause of games like valorant's anti cheat vanguard.

(I weirdly like windows 11 so I want to keep rolling back as the last option)

Top answer

1 of 2

You need to set Platform in "User Mode", Secure Boot in "Standard Mode" and Load Setup Defaults. You could do it by Restoring Factory Keys: BIOS - Security - Secure Boot - Restore Factory Keys - Enter BIOS - Restart - OS Optimized Defaults - Enabled BIOS - Restart - Load Setup Defaults - Enter Go to BIOS - Main and check if UEFI Secure Boot is ON.

2 of 2

I just closed and reopened bios and the status updated to enabled

Lenovo Community

forums.lenovo.com › t5 › Lenovo-IdeaPad-1xx-3xx-5xx-7xx-Edge-LaVie-Z-Flex-Laptops › My-secure-boot-is-enabled-but-my-secure-boot-status-is-disabled-how-can-I-fix-it › m-p › 5271877

My-secure-boot-is-enabled-but-my-secure-boot-status-is ...

December 2, 2023 - Welcome to Lenovo and Motorola community. If the website doesn't work properly without JavaScript enabled. Please enable it to continue

Lenovo Support

support.lenovo.com › us › en › solutions › ht509044-how-to-enable-secure-boot-on-think-branded-systems-thinkpad-thinkstation-thinkcentre

How to enable Secure Boot on Think branded systems - ThinkPad, ThinkStation, ThinkCentre - Lenovo Support US

This article shows you how to enable Secure Boot on ThinkPad, ThinkStation, and ThinkCentre systems. Secure your device with these step-by-step instructions.

Lenovo Community

forums.lenovo.com › t5 › Gaming-Laptops › Secure-Boot-Enabled-but-Disabled › m-p › 5301324

Secure-Boot-Enabled-but-Disabled - English Community - LENOVO COMMUNITY

April 3, 2024 - Sorry to hear that you're having trouble with the Secure Boot feature. This issue might be due to a conflict with the BIOS settings. Possible cause would be the Platform Mode being set to Setup Mode. To set it back to User Mode, select Restore Factory Keys under Security Tab in BIOS.

reddit.com › r/valoranttechsupport › secure boot enabled but status not active

r/ValorantTechSupport on Reddit: Secure boot enabled but status not active

October 2, 2023 -

My Laptop is Lenovo LOQ 15IRH8.

Saw some videos on how to fix the issue but they did on PC and they told to change the mode to custom and then back to standard but setting to change the mode is greyed out.

How to fix this issue?

Top answer

1 of 5

Are you on UEFi mode if not check your partition of your drive and see if it's GPT and not MBR If it's MBR you need to switch it to GPT make sure to back up your personal stuff before doing that all

2 of 5

I had the same issue, I managed to solve it by pressing random buttons my amazing IT skills. Try using "Restore Factory Keys" under the Secure Boot menu then toggle the mode.

Find elsewhere

Google Bing Mojeek

Lenovo Community

forums.lenovo.com › t5 › Gaming-Laptops › I-can-t-change-the-status-of-secure-boot › m-p › 5288110

I-can-t-change-the-status-of-secure-boot

February 3, 2024 - Welcome to Lenovo and Motorola community. If the website doesn't work properly without JavaScript enabled. Please enable it to continue

YouTube

youtube.com › watch

[LENOVO] How To Solve Secure Boot Status Disabled on Lenovo Laptops - YouTube

02:02

In this video, learn how to solve the "Secure Boot Status Disabled" issue on Lenovo laptops. Secure Boot is an essential BIOS feature that enhances system se...

Published January 10, 2025

reddit.com › r/lenovo › secure boot shows as enabled on bios but it’s current status is disabled.

r/Lenovo on Reddit: Secure Boot shows as enabled on BIOS but it’s current status is disabled.

April 27, 2022 -

My laptop is a Lenovo Yoga C740 and I have been trying to play valorant but the game will not launch because of error Van 1067. Basically says that TPM 2.0 is not installed, which it is or secure boot is disabled which it’s not. However when checking the current status of the secure boot it shows as disabled on both the disk manager and BIOS. I’ve checked tons of websites and everything seems normal with my laptop except for the secure boot status. Any ideas on what to do?

Top answer

1 of 3

Have you checked if Intel PTT is enabled in BIOS? That's the on-chip firmware TPM 2.0 module.

2 of 3

Look for the Restore Factory Keys option in the BIOS. That should allow Secure Boot to switch to Enabled. Unless you use BitLocker, then Restore Factory Keys may result in not being able to boot.

Lenovo Community

forums.lenovo.com › t5 › Lenovo-C-E-K-L-M-N-and-V-Series-Laptops › BIOS-Secure-Boot-State › m-p › 5287289

BIOS-Secure-Boot-State - English Community - LENOVO COMMUNITY

January 31, 2024 - If the Secure Boot option is greyed out, you may need to disable 'Platform Mode' or 'Legacy Support' first (if these options are available). Once you've enabled Secure Boot, save your changes and exit the BIOS setup.

Lenovo Community

forums.lenovo.com › t5 › Windows-11 › Secure-Boot-is-enabled-but-shows-disabled › m-p › 5124255

Secure-Boot-is-enabled-but-shows-disabled

January 28, 2022 - Welcome to Lenovo and Motorola community. If the website doesn't work properly without JavaScript enabled. Please enable it to continue

reddit.com › r/lenovo › secure boot status greyed out

r/Lenovo on Reddit: Secure boot status greyed out

March 25, 2025 -

How do I make it not greyed out a selectable? I have a lenovo flex 5 and I'm not really good with computer stuff.

Top answer

1 of 3

Either reset the Secure Boot keys or reset the BIOS. There's a Restore Factory Keys option, just go press Enter using the keyboard and see if you got options to reset the keys. If you can't do that, then go to the Exit tab, go down to Load Optimized Defaults and select Yes when asked to reset the settings. Next, go up to Save & Exit, press Enter and select Yes to reset the BIOS.

2 of 3

Need to change Platform Mode from Setup to User by selecting Restore Factory Keys, then enable Secure Boot. https://support.lenovo.com/us/en/solutions/ht515493-secure-boot-mode-cannot-be-set-thinkpad

Lenovo Community

forums.lenovo.com › t5 › Lenovo-IdeaPad-1xx-3xx-5xx-7xx-Edge-LaVie-Z-Flex-Laptops › secure-boot-status-is-off-even-after-enabiling-it-on-bios-menu › m-p › 5308172

secure-boot-status-is-off-even-after-enabiling-it-on-bios- ...

May 6, 2024 - Welcome to Lenovo and Motorola community. If the website doesn't work properly without JavaScript enabled. Please enable it to continue

Lenovo Community

forums.lenovo.com › t5 › Gaming-Laptops › Secure-Boot-Stuck-in-Setup-Mode-after-BIOS-Update-–-Lenovo-LOQ › m-p › 5395568

Secure-Boot-Stuck-in-Setup-Mode-after-BIOS-Update-–-Lenovo-LOQ - One Language Community - LENOVO COMMUNITY

August 19, 2025 - Result: Secure Boot remains Disabled, even after reinstall. ... I have a Lenovo LOQ laptop and after a recent BIOS update, Secure Boot no longer works correctly. ... Secure Boot is set to Enabled in BIOS, but Status remains Disabled.

reddit.com › r/lenovo › loq 15aph8 secure boot issue – windows only boots when secure boot is disabled

r/Lenovo on Reddit: LOQ 15APH8 Secure Boot issue – Windows only boots when Secure Boot is disabled

March 13, 2026 -

Hi everyone,

I’m having a strange Secure Boot issue with my Lenovo LOQ 15APH8. If Secure Boot is disabled, Windows boots normally without any problems. But if I enable Secure Boot, the system does not boot and I get the message “Default Boot Device Missing or Boot Failed.”

My laptop is a Lenovo LOQ 15APH8 (Type 82XT0053UK) with a Ryzen 7 7840HS running Windows 11. The BIOS version was LYCN48WW and I also tried downgrading it to LYCN47WW.

When Battlefield 6 was released it required Secure Boot, so I enabled it back then and everything worked normally. I had been using the laptop like that since around November with Secure Boot enabled and never had any problems. I didn’t play BF6 for a while, and a few days ago when I tried to launch it again the game complained about Secure Boot, which is when I realized something was wrong.

Since then I tried several things to fix it: resetting Secure Boot keys, restoring factory keys, rebuilding the EFI boot files using bcdboot, confirming that the system is running in UEFI mode, and even reinstalling Windows.

When I downgraded the BIOS, Secure Boot showed as Enabled in the BIOS settings, but when I checked in Windows using msinfo32 it still showed Secure Boot State as Off. After that I reset the factory keys again and now the BIOS itself shows Secure Boot as Disabled, and if I enable it the system refuses to boot and Windows will not load.

At this point I’m not sure if this is a firmware bug, a corrupted Secure Boot database, or something related to the Insyde BIOS used on this laptop.

If anyone knows what might be causing this or has dealt with something similar, could you help me figure this out?

Top answer

1 of 5

i am having the same issue i also tried everything and worse part is lenovo does not give out previous versions of bios installations so now i am stuck waiting for a new bios update which can take months if you ever find out how to fix this please let me know. only happened with this version of bios LYCN48WW i am using a LOQ 16APH8. i hope they fix this next update soon.

2 of 5

Recovery & UEFI CA 2023 Certificate Installation Step 1 – Disable Secure Boot Open BIOS (F2) → Security → Secure Boot → Disabled Save & restart. Step 2 – Boot into Windows Enter BitLocker Recovery Key if prompted. Step 3 – Perform BIOS Update Update latest BIOS Version via Lenovo homepage Step 4 – Restore Factory Keys Open BIOS (F2) → Security → Secure Boot → Restore Factory Keys Save & restart. Step 5 – Boot into Windows Enter BitLocker Recovery Key if prompted. Step 6 – Manual Installation of the UEFI CA 2023 Certificate Run PowerShell as Administrator: 6.1 – Set Update Trigger Via powershell reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Secureboot /v AvailableUpdates /t REG_DWORD /d 0x5944 /f 6.2 – Start Secure Boot Update Task Via powershell Start-ScheduledTask -TaskName "\Microsoft\Windows\PI\Secure-Boot-Update" Wait until the registry value AvailableUpdates changes to 0x4100, then restart the device. 6.3 – Run the Task a Second Time Via powershell Start-ScheduledTask -TaskName "\Microsoft\Windows\PI\Secure-Boot-Update" Wait 10–15 seconds and restart the device again. 6.4 – Verify Final Status The registry value AvailableUpdates should now show 0x4000 – this indicates successful installation. Step 7 – Certificate Verification Checklist Run PowerShell as Administrator: Check Secure Boot Database (DB): Via powershell [System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI db).bytes) -match 'Windows UEFI CA 2023' Expected result: True Check KEK Database: Via powershell [System.Text.Encoding]::ASCII.GetString((Get-SecureBootUEFI kek).bytes) -match 'Microsoft Corporation KEK 2K CA 2023' Expected result: True Step 8 – Re-enable Secure Boot Open BIOS (F2) Security → Secure Boot → Enabled Save & restart ✅ The device should now boot successfully with Secure Boot enabled and the new UEFI CA 2023 certificates in place.

Super User

superuser.com › questions › 1890969 › my-secure-boot-is-enabled-yet-the-secure-boot-state-is-disabled

windows - My Secure Boot is enabled yet the secure boot state is disabled - Super User

Top answer

1 of 1

There are requirements to be met before you can try and change Secure Boot Status to Enabled. Before you begin, though, double check if you have the latest BIOS version.

Then your fight begins. First, you need to switch Platform Mode (one of the settings in your screenshot) to User mode. To do that you have to follow these steps:

Set Administrator Password (you can clear that password afterwards)
Clear Factory Keys (using the option in BIOS), then restart.

If Platform mode will not change, then you have to

clear keys in Windows (by running tpm.msc command)

If it didn't change still, then skip to the last paragraph. If it is now in User mode, but Secure boot is still disabled, then continue:

Re-set Secure Boot to enabled (that is: switch to Disabled, restart, get back to BIOS and set it to Enabled again).

If nothing works, then you need to make warranty claim - unfortunately this is quite common Lenovo issue, that allegedly is linked to poor manufacturing process and quality control.

Lenovo Community

forums.lenovo.com › t5 › Windows-11-Pre-Release-Discussions › Secure-boot-status › m-p › 5087203

Secure-boot-status - English Community

July 4, 2021 - Welcome to Lenovo and Motorola community. If the website doesn't work properly without JavaScript enabled. Please enable it to continue