Reddit
reddit.com › r/lenovolegion › secure boot status disabled
r/LenovoLegion on Reddit: Secure Boot status disabled
February 28, 2024 -
Hello everyone Since yesterday i'm trying to enable secure boot. But even if i select enabled in secure boot the status won't change. I tried everything i could find but can't change the status. For information this my specs : Windows 11 Lenovo IdeaPad Gaming 3 15ARH05 AMD Ryzen 5 All help is welcomed Thanks in advance
Lenovo Community
forums.lenovo.com › t5 › Lenovo-IdeaPad-1xx-3xx-5xx-7xx-Edge-LaVie-Z-Flex-Laptops › Unable-to-enable-secure-boot-on-a-lenovo-laptop › m-p › 5142134
Unable-to-enable-secure-boot-on-a-lenovo-laptop - English Community - LENOVO COMMUNITY
April 22, 2022 - If it says Secure Boot is enabled, but Secure Boot Status shows it is disabled, your Platform Mode is probably set to "Setup Mode" instead of "User Mode".
BIOS-Secure-Boot-State - English Community - LENOVO COMMUNITY
Restart your computer and press the F1 key to enter the BIOS setup. Navigate to the 'Security' tab and select 'Secure Boot'. If the Secure Boot option is greyed out, you may need to disable 'Platform Mode' or 'Legacy Support' first (if these options are available). More on forums.lenovo.com
Secure Boot won’t enable after BIOS update (Lenovo Legion Slim 7)
/u/ Kaasschaaf- Based on what you’ve described, you’ve already covered most of the correct prerequisites for enabling Secure Boot, so this looks less like a basic configuration issue and more like something being blocked at the firmware or key level—especially since it started right after BIOS version 11M0CN42WW. Here are the most likely causes and what we recommend checking next: 🔍 Possible Causes Secure Boot keys not properly re-applied Even if you selected “Restore Factory Keys”, sometimes the keys don’t fully commit after a BIOS update. Try this sequence: Enter BIOS Set Secure Boot Mode to Custom Clear all Secure Boot keys Reboot back into BIOS Set Secure Boot Mode back to Standard Restore Factory Keys again Enable Secure Boot and save This forces a clean reinitialization of the key database. 2. BIOS firmware issue (very possible) Since the issue began immediately after updating to 11M0CN42WW, this strongly suggests a firmware regression or bug. We’ve seen cases where: Secure Boot settings don’t persist Changes appear applied but silently fail Keys don’t properly bind after update 👉 Recommended actions: Check if a newer BIOS version is available and update if so If no newer version exists, consider rolling back to a previous BIOS version (if available on your model’s support page) 3. Hidden dependency: OS Boot Loader state Even if you’re in UEFI + GPT, Secure Boot can fail if the Windows bootloader isn’t properly signed or registered. Boot into Windows and run: bcdedit /enum Look for: path \EFI\Microsoft\Boot\bootmgfw.efi If anything looks off, you may need to repair the bootloader using Windows recovery tools 4. Fast Boot / CSM / Legacy remnants Double-check these BIOS settings: CSM (Compatibility Support Module) → Disabled Boot Mode → UEFI only OS Optimized Defaults → Enabled (if available) Even if msinfo32 shows UEFI, leftover legacy config can interfere. 5. BitLocker interaction (less likely but worth noting) Even with your recovery key available, BitLocker can sometimes interfere with firmware changes. Temporarily suspend BitLocker, then try enabling Secure Boot again from BIOS. Addie_Lenovo More on reddit.com
17
2
April 16, 2026enable-secure-boot - English Community - LENOVO COMMUNITY
trying to start a game the secure boot option is disabled, after looking at some advice on the internet I tried to re-enable it from the BIOS but going to the security page it does not appear (lenovo legion 5) More on forums.lenovo.com
Secure boot status greyed out
Either reset the Secure Boot keys or reset the BIOS. There's a Restore Factory Keys option, just go press Enter using the keyboard and see if you got options to reset the keys. If you can't do that, then go to the Exit tab, go down to Load Optimized Defaults and select Yes when asked to reset the settings. Next, go up to Save & Exit, press Enter and select Yes to reset the BIOS. More on reddit.com
12
3
March 25, 2025Videos
00:51
How To Enable & Disable Secure Boot For Lenovo Legion Laptop - YouTube
00:30
Disable and Enable Secure Boot in BIOS | Lenovo Support Quick Tips ...
02:44
[Lenovo] How To Fix Secure Boot Enabled But Secure Boot Status ...
01:50
How To Fix Secure Boot Status Disabled on Lenovo ThinkBook Laptops ...
Lenovo Support
support.lenovo.com › us › en › solutions › ht509044-how-to-enable-secure-boot-on-think-branded-systems-thinkpad-thinkstation-thinkcentre
How to enable Secure Boot on Think branded systems - ThinkPad, ThinkStation, ThinkCentre - Lenovo Support US
This article shows you how to enable Secure Boot on ThinkPad, ThinkStation, and ThinkCentre systems. Secure your device with these step-by-step instructions.
Lenovo Support
support.lenovo.com › us › en › videos › nvid500424-disable-and-enable-secure-boot-in-bios-lenovo-support-quick-tips
Disable and Enable Secure Boot in BIOS - Lenovo Support Quick Tips - Lenovo Support US
Follow the instructions to Enable or Disable secure boot in BIOS. It is not recommended to disable secure boot unless instructed to by a support professional.
uBackup
ubackup.com › aomei software › articles › how to solve secure boot status disabled on lenovo laptops
How to Solve Secure Boot Status Disabled on Lenovo Laptops
September 5, 2025 - If the BIOS Mode displays UEFI and the Secure Boot State shows Off, it means that Secure Boot is currently disabled. ☎ Now, you'll need to make Secure Boot status enabled on Lenovo.
Lenovo Community
forums.lenovo.com › t5 › Lenovo-C-E-K-L-M-N-and-V-Series-Laptops › BIOS-Secure-Boot-State › m-p › 5287289
BIOS-Secure-Boot-State - English Community - LENOVO COMMUNITY
January 31, 2024 - Restart your computer and press the F1 key to enter the BIOS setup. Navigate to the 'Security' tab and select 'Secure Boot'. If the Secure Boot option is greyed out, you may need to disable 'Platform Mode' or 'Legacy Support' first (if these options are available).
YouTube
youtube.com › watch
[LENOVO] How To Solve Secure Boot Status Disabled on Lenovo Laptops - YouTube
In this video, learn how to solve the "Secure Boot Status Disabled" issue on Lenovo laptops. Secure Boot is an essential BIOS feature that enhances system se...
Published January 10, 2025
Lenovo Support
support.lenovo.com › us › en › solutions › ht515493-secure-boot-mode-cannot-be-set-thinkpad
Secure Boot Mode cannot be set - ThinkPad - Lenovo Support US
Learn how to resolve the Secure Boot Mode issue on your ThinkPad. Follow the guide to fix the issue that the Secure boot option shows Disabled and cannot be changed.
Reddit
reddit.com › r/lenovo › secure boot won’t enable after bios update (lenovo legion slim 7)
r/Lenovo on Reddit: Secure Boot won’t enable after BIOS update (Lenovo Legion Slim 7)
April 16, 2026 -
Hi all,
I’m running into an issue with Secure Boot on my Lenovo Legion after a BIOS update (11M0CN42WW), and I’m a bit stuck.
Situation:
-
Secure Boot is currently disabled
-
When I enable it in BIOS, it either doesn’t stick or causes issues
-
IT initially said it’s fine to leave disabled, but I actually need it for software
What I’ve already checked:
-
System is running in UEFI mode (confirmed via msinfo32)
-
Disk is GPT (checked in Disk Management)
-
Secure Boot mode = Standard
-
Factory keys have been restored
-
BitLocker recovery key is available (so that shouldn’t block changes)
Context:
The issue started after a BIOS update, so I suspect something there (keys, firmware bug, etc.)
Question:
What could still prevent Secure Boot from enabling in this situation?
Is this likely:
-
a BIOS bug?
-
something with keys not applying correctly?
-
or something I’m still overlooking?
Any help or similar experiences would be really appreciated
Top answer 1 of 4
1
/u/ Kaasschaaf- Based on what you’ve described, you’ve already covered most of the correct prerequisites for enabling Secure Boot, so this looks less like a basic configuration issue and more like something being blocked at the firmware or key level—especially since it started right after BIOS version 11M0CN42WW. Here are the most likely causes and what we recommend checking next: 🔍 Possible Causes Secure Boot keys not properly re-applied Even if you selected “Restore Factory Keys”, sometimes the keys don’t fully commit after a BIOS update. Try this sequence: Enter BIOS Set Secure Boot Mode to Custom Clear all Secure Boot keys Reboot back into BIOS Set Secure Boot Mode back to Standard Restore Factory Keys again Enable Secure Boot and save This forces a clean reinitialization of the key database. 2. BIOS firmware issue (very possible) Since the issue began immediately after updating to 11M0CN42WW, this strongly suggests a firmware regression or bug. We’ve seen cases where: Secure Boot settings don’t persist Changes appear applied but silently fail Keys don’t properly bind after update 👉 Recommended actions: Check if a newer BIOS version is available and update if so If no newer version exists, consider rolling back to a previous BIOS version (if available on your model’s support page) 3. Hidden dependency: OS Boot Loader state Even if you’re in UEFI + GPT, Secure Boot can fail if the Windows bootloader isn’t properly signed or registered. Boot into Windows and run: bcdedit /enum Look for: path \EFI\Microsoft\Boot\bootmgfw.efi If anything looks off, you may need to repair the bootloader using Windows recovery tools 4. Fast Boot / CSM / Legacy remnants Double-check these BIOS settings: CSM (Compatibility Support Module) → Disabled Boot Mode → UEFI only OS Optimized Defaults → Enabled (if available) Even if msinfo32 shows UEFI, leftover legacy config can interfere. 5. BitLocker interaction (less likely but worth noting) Even with your recovery key available, BitLocker can sometimes interfere with firmware changes. Temporarily suspend BitLocker, then try enabling Secure Boot again from BIOS. Addie_Lenovo
2 of 4
1
Hi, did you fix this? I'm facing a similar issue and on hardware as well, thanks in advance!
Lenovo Community
forums.lenovo.com › t5 › Gaming-Laptops › enable-secure-boot › m-p › 5227797
enable-secure-boot - English Community - LENOVO COMMUNITY
May 30, 2023 - Secure Boot's "Platform Mode" might be in Setup Mode, which prevents Secure Boot from Enabling. To fix that you need to select the option to "Restore Factory Keys" (from the same BIOS page) to change "Platform Mode" back to User Mode, and then save and exit the BIOS.
Reddit
reddit.com › r/lenovo › secure boot status greyed out
r/Lenovo on Reddit: Secure boot status greyed out
March 25, 2025 -
How do I make it not greyed out a selectable? I have a lenovo flex 5 and I'm not really good with computer stuff.
Top answer 1 of 3
1
Either reset the Secure Boot keys or reset the BIOS. There's a Restore Factory Keys option, just go press Enter using the keyboard and see if you got options to reset the keys. If you can't do that, then go to the Exit tab, go down to Load Optimized Defaults and select Yes when asked to reset the settings. Next, go up to Save & Exit, press Enter and select Yes to reset the BIOS.
2 of 3
1
Need to change Platform Mode from Setup to User by selecting Restore Factory Keys, then enable Secure Boot. https://support.lenovo.com/us/en/solutions/ht515493-secure-boot-mode-cannot-be-set-thinkpad
Reddit
reddit.com › r/lenovolegion › no able to enable secure boot
r/LenovoLegion on Reddit: No able to enable secure boot
October 28, 2021 -
Legion 5i. Just updated to windows 11 and for some reason I'm not able to enable secure boot in the bios. The option to enable and disable is there in security, but updating it doesn't change anything.
Btw, I need to enable secure boot cause of games like valorant's anti cheat vanguard.
(I weirdly like windows 11 so I want to keep rolling back as the last option)
Top answer 1 of 2
13
You need to set Platform in "User Mode", Secure Boot in "Standard Mode" and Load Setup Defaults. You could do it by Restoring Factory Keys: BIOS - Security - Secure Boot - Restore Factory Keys - Enter BIOS - Restart - OS Optimized Defaults - Enabled BIOS - Restart - Load Setup Defaults - Enter Go to BIOS - Main and check if UEFI Secure Boot is ON.
2 of 2
1
I just closed and reopened bios and the status updated to enabled
Lenovo Community
forums.lenovo.com › t5 › Gaming-Desktops › Cannot-Enable-Secure-Boot-in-BIOS › m-p › 5188706
Cannot-Enable-Secure-Boot-in-BIOS
December 12, 2022 - Welcome to Lenovo and Motorola community. If the website doesn't work properly without JavaScript enabled. Please enable it to continue
Lenovo Community
forums.lenovo.com › t5 › Lenovo-IdeaPad-1xx-3xx-5xx-7xx-Edge-LaVie-Z-Flex-Laptops › secure-boot-status-is-off-even-after-enabiling-it-on-bios-menu › m-p › 5308172
secure-boot-status-is-off-even-after-enabiling-it-on-bios- ...
May 6, 2024 - Welcome to Lenovo and Motorola community. If the website doesn't work properly without JavaScript enabled. Please enable it to continue
Lenovo Community
forums.lenovo.com › t5 › Gaming-Laptops › Can-t-enable-secure-boot-on-Lenovo-LOQ-15IRH8 › m-p › 5396158
Can-t-enable-secure-boot-on-Lenovo-LOQ-15IRH8 - One Language Community - LENOVO COMMUNITY
August 22, 2025 - Navigate to "Troubleshoot" > "Advanced ... /fixmbr bootrec /fixboot bootrec /scanos bootrec /rebuildbcd · Restart your laptop and check if Secure Boot is enabled without blocking the Windows Boot Manager....
Lenovo Community
forums.lenovo.com › t5 › ThinkPad-T400-T500-and-newer-T-series-Laptops › I-cannot-disable-secure-boot-or-other-BIOS-settings › m-p › 5288206
I-cannot-disable-secure-boot-or-other-BIOS-settings
February 3, 2024 - Welcome to Lenovo and Motorola community. If the website doesn't work properly without JavaScript enabled. Please enable it to continue
Lenovo Community
forums.lenovo.com › t5 › Lenovo-IdeaPad-1xx-3xx-5xx-7xx-Edge-LaVie-Z-Flex-Laptops › My-secure-boot-is-enabled-but-my-secure-boot-status-is-disabled-how-can-I-fix-it › m-p › 5271877
My-secure-boot-is-enabled-but-my-secure-boot-status-is ...
December 2, 2023 - Welcome to Lenovo and Motorola community. If the website doesn't work properly without JavaScript enabled. Please enable it to continue
Lenovo Community
forums.lenovo.com › t5 › Gaming-Laptops › Secure-Boot-Stuck-in-Setup-Mode-after-BIOS-Update-–-Lenovo-LOQ › m-p › 5395568
Secure-Boot-Stuck-in-Setup-Mode-after-BIOS-Update-–-Lenovo-LOQ - One Language Community - LENOVO COMMUNITY
August 19, 2025 - Result: Secure Boot remains Disabled, even after reinstall. ... I have a Lenovo LOQ laptop and after a recent BIOS update, Secure Boot no longer works correctly. ... Secure Boot is set to Enabled in BIOS, but Status remains Disabled.
Lenovo Community
forums.lenovo.com › t5 › Windows-11 › Secure-Boot-is-enabled-but-shows-disabled › m-p › 5124255
Secure-Boot-is-enabled-but-shows-disabled
January 28, 2022 - Welcome to Lenovo and Motorola community. If the website doesn't work properly without JavaScript enabled. Please enable it to continue
Reddit
reddit.com › r/lenovo › secure boot shows as enabled on bios but it’s current status is disabled.
r/Lenovo on Reddit: Secure Boot shows as enabled on BIOS but it’s current status is disabled.
April 27, 2022 -
My laptop is a Lenovo Yoga C740 and I have been trying to play valorant but the game will not launch because of error Van 1067. Basically says that TPM 2.0 is not installed, which it is or secure boot is disabled which it’s not. However when checking the current status of the secure boot it shows as disabled on both the disk manager and BIOS. I’ve checked tons of websites and everything seems normal with my laptop except for the secure boot status. Any ideas on what to do?
Top answer 1 of 3
1
Have you checked if Intel PTT is enabled in BIOS? That's the on-chip firmware TPM 2.0 module.
2 of 3
1
Look for the Restore Factory Keys option in the BIOS. That should allow Secure Boot to switch to Enabled. Unless you use BitLocker, then Restore Factory Keys may result in not being able to boot.