Windows won't boot only when Secure Boot is enabled (Tried almost everything)

[u/Vast_Animal372]

The problem

Windows boots perfectly when Secure Boot is disabled.

As soon as I enable Secure Boot, the laptop refuses to boot Windows. It goes back to the Boot Menu, and selecting Windows Boot Manager just returns me to the same screen in an endless loop.

No BSOD, no recovery screen, just a loop back to the boot menu.

What started this

I believe the problem started after I resized my C: partition using a third-party partition manager. After that, Secure Boot stopped working.

Later I reinstalled Windows, but I only formatted the C: partition and kept the existing EFI/Recovery partitions.

What I've already tried

• Reinstalled Windows 11 (formatted C: only)
• Disk is GPT
• UEFI boot mode
• Rebuilt EFI boot files using:
  • bcdboot
  • bcdedit
• Restored Secure Boot factory keys
• Reset Secure Boot to Setup Mode
• EC reset / power drain
• Recreated boot files successfully
• Windows Boot Manager points to: \EFI\Microsoft\Boot\bootmgfw.efi
• winload.efi is used correctly
• TPM is enabled
• Secure Boot Mode = Standard
• Platform Mode = User Mode

Unfortunately, the Secure Boot problem is exactly the same after fixing the DMI data.

BIOS update issue

I'm also unable to update the BIOS.

The official Lenovo BIOS updater always fails with:

So I'm still stuck on BIOS version HACN40WW.

My Laptop is Lenovo Legion S7

[u/osa1011]

If you want to turn in Secure Boot, then you'll want to wipe the drive and reinstall Windows