Secure Boot: How To Enable After Clean Windows Installation

[goodwinds]

Hello, I just received a new T480s. I immediately swapped the standard 128 GB SSD with a new 1 TB NVMe SSD; I needed to performa a new and clean installation of Windows 10 from the original ISO downloaded from Microsoft. In order to complete the initial setup I had to disable Secure Boot.

Now I would like to enable Secure Boot again but, if I do it, I am unable to boot Windows 10. I need to disable it in order to perform Windows boot.

What am I doing wrong? What do I need to do to enable Secure Boot again?

Thanks

[Saperkus]

Which partition table do you use - MBR or GUID (GPT)?

[Omiyatei1]

Does your clean installation image contain KB4467691?

There was a post that KB4467691 somehow bother SecureBoot and some workarouds are mentioned.

See refer to Thinkpad L440 hanging at boot due to KB4467691/SecureBoot conflict .