[Solved] -Any drive boot failure after BIOS update

Community Support
,
1

I have Framework 13 (AMD Ryzen AI 9 HX 370), the pre built one. I had zero issues with it, I am happy with the purchace. I am using NixOS (nixos-unstable channel). Lately I noticed occasional screen flickering only on the top of the screen, I switched kernels from 7.1.7 to 6.18.x, did not help, then I updated the BIOS in hope that would fix something, so I ran:

fwupdmgr refresh --force

fwupdmgr get-updates

fwupdmgr update

All went without issues, even the BIOS update seem to went well… except that issues got bigger.

I can not boot anything anymore, nor the hard drive nor the USB drive, it says “[drive name] boot failure”, and if press Ok, it just shows a qrcode for No Boot Device Found

I can only access the BIOS settings now.

2

I read somewhere here that the BIOS updates enables Secure Boot, maybe try disabling that will help.

3

I tried to find the option for secure boot, I hope I went through all options, but did not find anywhere any mention of “Secure Boot”. I do have otherwise Lanzaboote (GitHub - nix-community/lanzaboote: Secure Boot & Measured Boot for NixOS [maintainers=@blitz @raitobezarius @nikstur] · GitHub) on the hard drive which require secure boot enabled. But anyway that would not explain why freshly baked nixos usb drive would fail to boot as well.

4

I’m still waiting for my Framework but according to the KB it must be here:

  1. Boot into BIOS by tapping F2 just before the Framework splash screen.
  2. Arrow down to Administer Secure Boot. Press enter.
  3. Arrow down to Enforce Secure Boot. Press enter, select Disabled, press enter.
  4. Press F10 to save and reboot. With Yes selected, press Enter.
    Secure Boot explained

Well if it doesn’t boot a secure boot enabled OS could also just mean that the correct keys are missing.

5

Once you gave me the correct way (my way was just press F2 on the qrcode page, it never occur to me to press F2 right after turning it on) to open BIOS and the idea on that secure boot keys might be missing, I went to update that, and find a way on Lanzaboote page:

  1. Enter secure boot setup mode: Enable Secure Boot
  2. Boot into disabled secure boot laptop
  3. Since I had keys generated already, I just had to do `sudo sbctl enroll-keys --microsoft`
  4. Reboot into BIOS and enforce secure boot back on

Works

Thank you!

6

I’m glad it worked. You’re welcome!