Discovered today 11/9/2022 on a Surface Go 2 that not only does Secure Boot need to be disabled but also TPM to be able to boot from a USB stick. Look into the new regarding newer Lenovo laptops, I'll be avoiding them now. They've done a deal with Microsoft that the Secure Boot mode in the BIOS will be protected with a Microsoft CA certificate. So if its disabled you'll struggle to install Linux because the CA Certificate doesn't work in Linux. This is a scummy move by both Microsoft and Lenovo. This is the very reason no one wanted Microsoft to control Secure Boot.
I am using Lenovo Thinkpad E15 a new one, and now I am trying to install linux on it but the boot drive itself is not showing in the boot menu -> I have used fedora iso using both media writer and rufus and tried on both USB ports and tried disabling secure boot and both TPM and it doesn't worked. Now I am trying with ubuntu it doesn't worked too can you please tell me whats the issue
I still have the issue. I turned off secure boot and tried to boot in but it still sends me back to the Boot Manager. I am using a Lenovo L13 Yoga Generation 2.
I believe this is purely SECURE BOOT and not really related to UEFI. As mentioned the point is to stop you using a boot disc, USB stick or USB drive to load any tools to bypass Windows login, which can be done with Konboot. However, SECURE BOOT is pretty pointless unless you set a password to the BIOS which can be dangerous as if you forget it, it can be difficult and sometimes impossible to clear the password.
One thing to bear in mind if you still can't boot after disabling Secure Boot and can't find a Legacy Mode option: Intel had announced that by 2020, they would start phasing out support for Legacy Mode. So if you're still not able to boot from USB, make sure that your are using the UEFI option when preparing your USB drive.
It's possible that you need to load a driver before you can see the available disks, such as an Intel RST or a RAID driver. This is an issue my colleague and I had when we were trying to deploy a USB image onto some Dell Optiplex machines some months back.
On newer LENOVO systems like the P16 laptop, after disabling Secure Boot, you'll be able to boot USB sticks like VENTOY USB. But then you still won't be able to access any disk because BITLOCKER is turned on by default on Windows based systems. You could disable Bitlocker and convert all drives to be Bitlocker free and the disable Secure Boot, but in that case you loose the protection in case your laptop gets lost or is stolen. The choice is yours.
Blocked, with an admin password? You'll need to reset it, if that's been set then we'll assume you got it second hand? You'll need to look at Lenovo's site on how to reset it without the password. Back in the old days it required just removing the CMOS battery.
I have question . I need to disable CSM SUpport and submit BOTH on UEFI /LEGAVY BOOT, on a lenovot14 but the options are grayed out even after I disabled secureboot
Hi, can anyone explain how to move the USB to the top of the Boot Order within the Boot Menu. Currently using a X1 Carbon Gen 9 and my Boot Menu GUI is identical to the one in this video. Just cannot figure out how to move the USB from the bottom position to the top in the the order. Thank you.
I am facing the same issue but on Lenovo V50T-13imb and though after disabling secure boot and configuring rest of the options i am unable to boot me USB, its UEFI and running smooth on other devices but not Lenovo V50T.
Hello Thanks for this information. Even after I disabled Secure boot - I'm still not able to boot from USB. There's no UEFI option on my ThinkPad. Any other ideas? I've tried to reorder the boot order as well and that didn't work. My USB has Windows 10 Enterprise on NTFS file format. Thanks appreciate any suggestions.
@@deva594 Won't hurt to update the BIOS but you shouldn't need to. Are you then pressing F12 after turning this security setting off in my video? When pressing F12 so you get the boot menu does the plugged in USB stick show as a device?
@@TheStevenWhiting I'm actually running into this issue as well on a T14 Gen 1. Turn off the Secure and then F12 to the USB and it just blinks before going back to the boot menu. I use the USB on older Lenovo machines without issues. Any ideas?
I have a lenevo l14 and it does not contain any OS. I was trying to install ubuntu and issue got created due to some mistake from me. Now while trying to install the ubuntu, the SSD drive is not getting detected in which I need to install the ubuntu. I tried to debug using live ubuntu from bootable USB. Looked gparted, looked disk analyser. But SSD drive is not shown anywhere. I am stuck. Please help me if possible.
If you boot from a USB stick again and don't go into Linux. Just boot as if you're going to reinstall it. It should then see the SSD as you're doing a new install.
@@TheStevenWhiting I also tried that. Instead of using "Try Ubuntu" , I selected "Install Ubuntu". In that scenarios I am not able to see SSD drive. I am just able to see /dev/sdb which points to the bootable usb. In BIOS also, I am not able to see nvme as part of bootable device. Previously I was able to see nvme in the list of bootable device. Thanks for the reply.
Whenever I am escaping from the boot menu it gives an error at the top left corner that “Error could not detect network connection “ and goes again to the same boot screen. Please help how to get out of this boot screen and see windows
Sounds like its failing to boot from the drive and then attempting to boot from the network (some corporate setups use this for rolling out new installs of Windows) but can't find a network so you're getting a failed error. Only option is to find a spare USB stick that has a bootable copy of Linux on to see if you can boot from that to see what is going on with the Windows drive.
This laptop does not support Legacy Mode right ? Fuckin hell i've got one to configure for a user and no way to start a usb win imaged key in Legacy mode
@@BlackJack-tv7ty ..then i will have to share my settings with you... but i'm away from my place.. sadly i can not access easily to it... I will be back end of July... i have watched few tutorials on here.. but I will not forget about letting or getting back to you asap....I wiped my one and it's perfectly running now...keep well
Hi. It worked for me Step 1: Create a USB bootable with Rufus app. format USB drive with Rufus app. Then select GPT and set the target system to UEFI Then create your USB bootable file. And wait until it done Step 2: insert your USB bootable to your computer. Step 3: power on your laptop, then press F1 to enter to BIOS ( I use Lenovo T14) Step 4: Disable Secure boot, then change the boot order by setting your USB drive at the first position. Then Press F10 to save changes...now your laptop should boot normally. Let me know if it worked.
Discovered today 11/9/2022 on a Surface Go 2 that not only does Secure Boot need to be disabled but also TPM to be able to boot from a USB stick.
Look into the new regarding newer Lenovo laptops, I'll be avoiding them now. They've done a deal with Microsoft that the Secure Boot mode in the BIOS will be protected with a Microsoft CA certificate. So if its disabled you'll struggle to install Linux because the CA Certificate doesn't work in Linux. This is a scummy move by both Microsoft and Lenovo. This is the very reason no one wanted Microsoft to control Secure Boot.
I am using Lenovo Thinkpad E15 a new one, and now I am trying to install linux on it but the boot drive itself is not showing in the boot menu -> I have used fedora iso using both media writer and rufus and tried on both USB ports and tried disabling secure boot and both TPM and it doesn't worked. Now I am trying with ubuntu it doesn't worked too can you please tell me whats the issue
Big thanks! This instruction helped me reinstall Windows 11 on ThinkPad T14s. :)
I still have the issue. I turned off secure boot and tried to boot in but it still sends me back to the Boot Manager. I am using a Lenovo L13 Yoga Generation 2.
Does the boot menu show the USB stick at all?
@@TheStevenWhiting Yes it does
It shows my USB
@@TheStevenWhiting I'll try setting the USB first in the boot order
@@eliteanx07_ Yes it needs to be first or you choose it if it has a menu system. Not all of them do
Thank u soooo much. How did I not think of That… i’m so glad i spotted ur video
Its not obvious. I've never seen this setup in a BIOS before.
Hi, thank you for the great tips! in the video you mentioned that you have another video on making a USB stick bootable. Can you share the link?
Yep it's this ua-cam.com/video/wo5VGkrFpzE/v-deo.html
Trying same way, but still not working
I believe this is purely SECURE BOOT and not really related to UEFI. As mentioned the point is to stop you using a boot disc, USB stick or USB drive to load any tools to bypass Windows login, which can be done with Konboot. However, SECURE BOOT is pretty pointless unless you set a password to the BIOS which can be dangerous as if you forget it, it can be difficult and sometimes impossible to clear the password.
One thing to bear in mind if you still can't boot after disabling Secure Boot and can't find a Legacy Mode option:
Intel had announced that by 2020, they would start phasing out support for Legacy Mode. So if you're still not able to boot from USB, make sure that your are using the UEFI option when preparing your USB drive.
I have neither of them only usb Boot
I created USB boost with type GPT, I can't choose disk for window when setup. In window don't show anything to choose.
It's possible that you need to load a driver before you can see the available disks, such as an Intel RST or a RAID driver. This is an issue my colleague and I had when we were trying to deploy a USB image onto some Dell Optiplex machines some months back.
On newer LENOVO systems like the P16 laptop, after disabling Secure Boot, you'll be able to boot USB sticks like VENTOY USB. But then you still won't be able to access any disk because BITLOCKER is turned on by default on Windows based systems. You could disable Bitlocker and convert all drives to be Bitlocker free and the disable Secure Boot, but in that case you loose the protection in case your laptop gets lost or is stolen. The choice is yours.
Hi. I have buy a new thinkbook 15 G2, but my bios don't has all the option described in the video. It's blocked?
Blocked, with an admin password? You'll need to reset it, if that's been set then we'll assume you got it second hand? You'll need to look at Lenovo's site on how to reset it without the password. Back in the old days it required just removing the CMOS battery.
Thanks
I have question . I need to disable CSM SUpport and submit BOTH on UEFI /LEGAVY BOOT, on a lenovot14 but the options are grayed out even after I disabled secureboot
I'm starting to read some laptops are doing away with legacy support altogether. You'll have to look up the laptop and see if this is one of them.
Hi, can anyone explain how to move the USB to the top of the Boot Order within the Boot Menu. Currently using a X1 Carbon Gen 9 and my Boot Menu GUI is identical to the one in this video. Just cannot figure out how to move the USB from the bottom position to the top in the the order. Thank you.
Just do it in the BIOS and then use the arrow keys to move it up. Normally tells you the key to press to move it up.
I am facing the same issue but on Lenovo V50T-13imb and though after disabling secure boot and configuring rest of the options i am unable to boot me USB, its UEFI and running smooth on other devices but not Lenovo V50T.
Maybe an issue with the USB port
Hello Thanks for this information. Even after I disabled Secure boot - I'm still not able to boot from USB. There's no UEFI option on my ThinkPad. Any other ideas? I've tried to reorder the boot order as well and that didn't work. My USB has Windows 10 Enterprise on NTFS file format. Thanks appreciate any suggestions.
What model of ThinkPad? What USB stick trying to boot from? Have you tested the stick to make sure its readable? It also has to be bootable
@@TheStevenWhiting ThinkPad P15 Gen1, Onn USB stick and yes it's readable. I'm reading up and perhaps I need to update the Bios?
@@deva594 Won't hurt to update the BIOS but you shouldn't need to. Are you then pressing F12 after turning this security setting off in my video? When pressing F12 so you get the boot menu does the plugged in USB stick show as a device?
@@deva594 Get it fixed?
@@TheStevenWhiting I'm actually running into this issue as well on a T14 Gen 1. Turn off the Secure and then F12 to the USB and it just blinks before going back to the boot menu. I use the USB on older Lenovo machines without issues. Any ideas?
Does these same steps work on the X1 carbon laptops? Looks the same i would think!
Most likely. Its purely Secure Boot that was causing this issue.
@@TheStevenWhiting Yes TY
Thank you so much! I couldn't figure out why it would just flash black and not boot to my USB stick...
Glad its helped people.
Thank you it worked on my Lenovo T14
Does not help on mine. Just black screen and power and ESC leds lit.
My secure boot is off but I still get stuck in that boot loop🙁
If you have a USB stick in then it can't be bootable.
I have a lenevo l14 and it does not contain any OS. I was trying to install ubuntu and issue got created due to some mistake from me.
Now while trying to install the ubuntu, the SSD drive is not getting detected in which I need to install the ubuntu. I tried to debug using live ubuntu from bootable USB. Looked gparted, looked disk analyser. But SSD drive is not shown anywhere. I am stuck. Please help me if possible.
If you boot from a USB stick again and don't go into Linux. Just boot as if you're going to reinstall it. It should then see the SSD as you're doing a new install.
@@TheStevenWhiting I also tried that. Instead of using "Try Ubuntu" , I selected "Install Ubuntu". In that scenarios I am not able to see SSD drive. I am just able to see /dev/sdb which points to the bootable usb. In BIOS also, I am not able to see nvme as part of bootable device.
Previously I was able to see nvme in the list of bootable device.
Thanks for the reply.
@@nikhilgupta965 Can you see the SSD anywhere in the BIOS? You should be able to see it in the BIOS somewhere.
@@TheStevenWhiting No, I am not able to see SSD anywhere in BIOS.
@@TheStevenWhiting Now also getting msg at startup, 0183: bad crc of secutiry setting in efi variable
Whenever I am escaping from the boot menu it gives an error at the top left corner that “Error could not detect network connection “ and goes again to the same boot screen. Please help how to get out of this boot screen and see windows
Sounds like its failing to boot from the drive and then attempting to boot from the network (some corporate setups use this for rolling out new installs of Windows) but can't find a network so you're getting a failed error. Only option is to find a spare USB stick that has a bootable copy of Linux on to see if you can boot from that to see what is going on with the Windows drive.
Gracias por tu ayuda. Era muy facil el ajuste, pero mi laptop es moderna y trae esa BIOS que enseñas en el video. Saludos!
You are the man
Whats the usb for?
User gave it to me as it was stuck in a boot loop so I had to wipe it and install Windows Enterprise fresh.
thanks, worked on my X1
Nice to hear because i need to do this!
How to open thinkPad E i7 laptop can not be opened
?
Hi there i don cant boot from usb with linux mini y goes your steps and dont can boot
Double check you've made the USB stick bootable
Is there anyway to boot windows without needing USB stick?
Yes, install Windows on the internal drive. But if its not already installed, then you'll need it on a USB stick first.
@@TheStevenWhiting what about on an external ssd that uses usb?
@@ProfBlaq Yes it will work just like its a USB drive
@@TheStevenWhiting unfortunately didnt work. Everytime i restart, the system flashes black and then goes back to the Lenox screen
unfortunately I can't disable secure boot. It's greyed out. I wanted to buy a new bios chip but the seller says that it won't work..
Password protected? You can't buy a new BIOS chip, not since the 80s.
@@TheStevenWhiting no password protection. Is your second phrase sarcasm? 🤔
I can't even update my bios because I need to burn it on CD🤦🏻♂️
saved me, thanks a lot !
That helps a lot, thanks!
usb booteable en esquema de particion GPT, UEFI (no-csm)
Hiii thanks for video 😊😊
I can't turn off the secure boot
Maybe various reasons why. Can't say unless saw the machine.
Thank you!! ❤🎉🎉
thanks sir.. it solve.. thanks for the reason
This laptop does not support Legacy Mode right ? Fuckin hell i've got one to configure for a user and no way to start a usb win imaged key in Legacy mode
Don't panic, it does ua-cam.com/video/bokeIBf2pp0/v-deo.html turn off "kernal DMA Protection" in Security/Virtualisation in the BIOS.
Thank you good sir!
thank you very much
On my system the secure boot option is greyed out and wont let me change it. Why is this? Help please
See if fast boot is on, turn it off see if secure boot re-enables. Could be another issue causing it not to see secure boot.
Thanks for Hint...
gracias man de chile !!
Ohh Good Job THK
Thank you
Appreciate it
Thanks You si sirve pensé que no podría pero muchas gracias
i have fixed mine thnx...but i had to change UEFI only to Both as well...thnx
text me if u still want to be helped i can share my Bios settings..lol
@@slambk hello, can you tell me brother ?
@@BlackJack-tv7ty for start have U tried to create ur bootable Us from Rufus? the MBR and the other option have you tried that?
@@slambk yeah I've tried that
@@BlackJack-tv7ty ..then i will have to share my settings with you... but i'm away from my place.. sadly i can not access easily to it... I will be back end of July... i have watched few tutorials on here.. but I will not forget about letting or getting back to you asap....I wiped my one and it's perfectly running now...keep well
thank you very much!
Helped for me
Hi. It worked for me
Step 1: Create a USB bootable with Rufus app.
format USB drive with Rufus app.
Then select GPT and set the target system to UEFI
Then create your USB bootable file. And wait until it done
Step 2: insert your USB bootable to your computer.
Step 3: power on your laptop, then press F1 to enter to BIOS ( I use Lenovo T14)
Step 4: Disable Secure boot, then change the boot order by setting your USB drive at the first position. Then Press F10 to save changes...now your laptop should boot normally.
Let me know if it worked.
solve checking media Lenovo think book
T15 ask me password?
Reset it. Removing the BIOS battery should work.
thanks :)
thanks! thinkpad L14 Gen1 Intel 2020 worked
I love you Men
the solution is good but in my case it remains the same
What remains the same?
dear i do the setting as i saw but it just blinks when i select boot from USB HDD@@TheStevenWhiting
ua-cam.com/video/PyiTFfzrbDE/v-deo.html i use this method also by but after thios method on startup it ask bitlocker key.@@TheStevenWhiting
That normally points to the USB HDD not being bootable. Did you set it up to be bootable?@@TechMoviles
How to set it bootable? @@TheStevenWhiting
Pwd forget bios
Don't know if still valid in new laptops but used to be, you could take the BIOS battery out and it would clear the password.
@@TheStevenWhiting 0 tips into the white side if the net
For 10th geb
Hola
why are u whispering....not able to here your voice clearly
Not whispering. Turn your volume up.
Thanq you so much m’y friend 🫡
Have T14 it requires a password and i cant disable at the secure boot options its just grey, what can i do
Removing bios battery might clear it but I've not tried.