10-05-2018 12:30 PM
I recently had my mainboard replaced by a lenovo technician after my thinkpad T460p switched off and refused to turn on again.
The new mainboard has BIOS version 2.15 installed, which is fairly ancient.
I now wanted to update to the latest BIOS (2.26) via the bootable CD method.
I can successfully boot from a usb stick with the aforementioned image installed and start the bios update.
However, ~5 seconds after the installer says it is now updating the firmware, I get the following error, claiming that I can't update the BIOS because BIOS Guard is enabled:
Now my question is: How can I disable this BIOS guard to be able to update my BIOS? I can't seem to find a setting named something like that in my BIOS.
I have full access to the machine and its BIOS. Secure Boot is disabled, CSM boot is enabled, a harddrive password is set.
Any more information that I can provide to solve this issue?
Thanks and greetings
Solved! Go to Solution.
10-05-2018 02:46 PM
Look on the security tab in the BIOS. There should be an entry for Intel SGX and one for Devgice guard. Try turning those off
10-05-2018 03:10 PM
Thanks for that tip!
I had both settings disabled, so simply disabling those doesn't help.
HOWEVER, when I changed SGX Control from "Disabled" to "Software Controlled" (Current State: Disabled), the BIOS update worked!