Welcome to our peer-to-peer forums, where owners help owners. Need help now? Visit eSupport here.

English Community

Software and Operating SystemSecurity & Malware
All Forum Topics
Options

3 Posts

06-20-2020

United States of America

2 Signins

30 Page Views

  • Posts: 3
  • Registered: ‎06-20-2020
  • Location: United States of America
  • Views: 30
  • Message 11 of 17

Re:Device Guard BIOS Setting?

2020-06-22, 4:58 AM

thanks for reply , I got the issue , issue with read access as my Superwiser password is enable and when I entered it give me only read access. Do u have any idea about the same. 

Reply
Options

3 Posts

06-20-2020

United States of America

2 Signins

30 Page Views

  • Posts: 3
  • Registered: ‎06-20-2020
  • Location: United States of America
  • Views: 30
  • Message 12 of 17

Re:Device Guard BIOS Setting?

2020-06-22, 11:36 AM

How to remove Superwiser password from thinkpadt470, I am getting all read access. Any master password . 

Reply
Options

434 Posts

07-08-2019

Canada

626 Signins

7618 Page Views

  • Posts: 434
  • Registered: ‎07-08-2019
  • Location: Canada
  • Views: 7618
  • Message 13 of 17

Re:Device Guard BIOS Setting?

2020-06-24, 15:56 PM

Hi @Sarvesh1306,

 

I don't know how to remove the supervisor password in the T470. I recommend you ask in the ThinkPad T400 section of the forum. 

 

Be aware that in newer laptops, it could require a motherboard replacement, but the definitive answer should be in the T400 forum section.

 

Martin

Using Browser Search to find your answers in Lenovo and Moto Community

I'm a volunteer, NOT a Lenovo employee.
If I solved your issue, please click Accept as a Solution.
If my post helped, consider giving me a Thumbs Up.

Main: P52 (I7-8750H P1000 FHD 16GB 2TB-SSD 1TB-HDD)
Also, 2x M820z, 1x P520c, 1x ideaCentre 300S-11IBR

Reply
Options

5 Posts

09-20-2017

Poland

7 Signins

124 Page Views

  • Posts: 5
  • Registered: ‎09-20-2017
  • Location: Poland
  • Views: 124
  • Message 14 of 17

Re:Device Guard BIOS Setting?

2020-10-16, 9:06 AM

Hello everyone. Got a little question - I want to dual boot Windows 10 + latest Ubuntu. I've installed Ubuntu (had to disable the Device Guard to boot from USB), but after it I cannot see it in boot options when Device Guard is on, have to turn it off.
Is there a way to have it turned on while being able to boot Ubuntu (on local drive)?

Reply
Options

6849 Posts

10-29-2009

United States of America

17782 Signins

165144 Page Views

  • Posts: 6849
  • Registered: ‎10-29-2009
  • Location: United States of America
  • Views: 165144
  • Message 15 of 17

Re:Device Guard BIOS Setting?

2020-10-16, 12:13 PM

Device Guard is a Microsoft invention and specific to Windows 10.  It is not an industry-standard security feature.  You will not be able to enable Device Guard and still boot to Ubuntu.

Reply
Options

434 Posts

07-08-2019

Canada

626 Signins

7618 Page Views

  • Posts: 434
  • Registered: ‎07-08-2019
  • Location: Canada
  • Views: 7618
  • Message 16 of 17

Re:Device Guard BIOS Setting?

2020-10-17, 14:50 PM

@someotherguy 

Quick question : could it be related to Secure Boot? I know Device Guard forces Secure Boot...

 

If not, OP can get pretty much the same protection as Device Guard by manually configuring the BIOS parameters as Device Guard is mostly a shortcut...

 

Martin

Using Browser Search to find your answers in Lenovo and Moto Community

I'm a volunteer, NOT a Lenovo employee.
If I solved your issue, please click Accept as a Solution.
If my post helped, consider giving me a Thumbs Up.

Main: P52 (I7-8750H P1000 FHD 16GB 2TB-SSD 1TB-HDD)
Also, 2x M820z, 1x P520c, 1x ideaCentre 300S-11IBR

Reply
Options

6849 Posts

10-29-2009

United States of America

17782 Signins

165144 Page Views

  • Posts: 6849
  • Registered: ‎10-29-2009
  • Location: United States of America
  • Views: 165144
  • Message 17 of 17

Re:Device Guard BIOS Setting?

2020-10-19, 0:17 AM

Device Guard modifies the Secure Boot database such that only Microsoft first-party or Lenovo first-party signed files can be booted.  The Microsoft third-party certificate (which is used to sign linux boot loaders) is removed from the Secure Boot database when Device Guard is enabled (this is Microsoft's requirement).  For this reason, it is generally not possible to boot linux with Device Guard enabled in BIOS setup.  This is the simple answer.

 

The more complicated answer is that you can install your own Secure Boot keys and then sign the linux boot loader yourself with those keys.  This kind of process will still work with Device Guard enabled.  But, I've never heard of anyone installing their own Secure Boot keys and then additionally enabling Device Guard - though technically it could be done.

Reply
Forum Home

Community Guidelines

Please review our Guidelines before posting.

Learn More

Check out current deals!

Go Shop
X

Save

X

Delete

X

No, I don’t want to share ideas Yes, I agree to these terms