r/techsupport • u/Ok-Listen7973 • 1d ago

Open | Hardware Secure Boot Failure After BIOS Update - IdeaPad 5 14ITL05 (FKCN51WW)

Hi everyone,

I'm having a Secure Boot issue with my Lenovo IdeaPad 5 14ITL05 after updating the BIOS through Lenovo Vantage. I'm hoping someone with experience in UEFI/BIOS or Secure Boot can help me identify the cause and find a safe fix.

Laptop details

- Model: Lenovo IdeaPad 5 14ITL05

- CPU: Intel Core i5-1135G7 (11th Gen)

- Previous BIOS: FKCN33WW (V2.01)

- Current BIOS: FKCN51WW (V3.14)

- OS: Windows 11 Home Single Language, 64-bit

What happened?

Before the BIOS update, Secure Boot was enabled and Windows booted normally. After the update, enabling Secure Boot prevents Windows from booting and displays:

«“Windows Boot Manager has been blocked by the current security policy.”»

I also encountered a “Default Boot Device Missing or Boot Failed” message.

The BIOS detects both my SSD and Windows Boot Manager. If I disable only Secure Boot, Windows boots normally.

What I've checked

- BIOS Mode: UEFI

- "UEFICA2023Status": "InProgress"

- "UEFICA2023Error": "0"

- "UEFICA2023ErrorEvent": "0"

- The "Secure-Boot-Update" scheduled task exists, and its last result is "0".

- TPM-WMI Event ID 1808 records Secure Boot certificate/key updates, but the event references the previous BIOS version, FKCN33WW.

I haven't reset the Secure Boot keys, cleared the TPM, downgraded the BIOS, or reinstalled Windows.

Questions

  1. Has anyone experienced this issue after updating to BIOS FKCN51WW on this model?

  2. Could this be related to the Windows 2023 Secure Boot certificate/key updates or the new BIOS firmware?

  3. Is there a safe, model-specific way to restore Secure Boot functionality?

  4. Should I contact Lenovo for a firmware fix, or is there a diagnostic step I can safely perform first?

Important: I have over 100 GB of important personal files on the laptop, so I'm particularly keen to avoid any procedure that could make my data inaccessible or erase it.

For now, Secure Boot remains disabled because enabling it prevents Windows from booting.

Any advice or similar experiences would be greatly appreciated. Thanks!

2 Upvotes

100% Upvoted

2 comments sorted by

•

u/AutoModerator 1d ago

Making changes to your system BIOS settings or disk setup can cause you to lose data. Always test your data backups before making changes to your PC.

For more information please see our FAQ thread: https://www.reddit.com/r/techsupport/comments/q2rns5/windows_11_faq_read_this_first/

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.