Page History
| Created date | Updated date | Affects version | Fix version |
|---|---|---|---|
24 Aug |
| Drive Eraser - 7.8.1 SB | N/A |
...
Some devices may fail to boot Blancco Drive Eraser if "Allow Microsoft 3rd Party UEFI CA" is not enabled or "Enable MS UEFI CA Key" BIOS/UEFI option is disabled under the " Secure Boot Key Management" settings in Secure Boot Configuration.
Boot settings.
This setting is named differently between the vendors but is normally located under Security and specifically Secure Boot settings section. Refer to below screenshots to identify the setting for different vendors:
| UI Tabs | |||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
This issue affects most of the latest generation devices and some examples listed belowThe name of the setting can be different for different vendors. A list of devices mentioned below are known to be affected by this issue:
| Make | Model | Setting to allow booting Secure Boot enabled | ||||
|---|---|---|---|---|---|---|
| Lenovo | X1 Yoga | HP | ProBook 650 G8 | Allow Microsoft 3rd Party UEFI CA - On | ||
| Lenovo | ThinkPad T14 Gen 3 | Allow Microsoft 3rd Party UEFI CA - On | ||||
| HP | ProBook 650 G8 | X1 Yoga | Enable MS UEFI CA Key | Lenovo | ThinkPad T14 Gen 3 | Enable MS UEFI CA Keykey - checkbox selected |
| Dell | Latitude 5540 | Enable MS Microsoft UEFI CA Key - On | ||||
| Dell | Latitude 7310 | Enable MS Microsoft UEFI CA Key - On |
Cause
With the mentioned setting disabled If Microsoft 3rd party UEFI CA is not allowed/enabled it is not possible to authenticate the Drive Eraser ISO leading the booting to booting the failfail.
This is due to a Microsoft requirement which instructs vendors to disable 3rd party certificates by default on newer devices.
Lenovo offers an official statement for this behavior.
Resolution
If Secure Boot cannot be fully disabled make sure that the "Enable MS Microsoft 3rd party UEFI CA Key" option is allowed/enabled as well to allow successfully boot Drive Eraser to boot successfully.Lenovo offers a official statement for this behavior.