Issue
- Your computer does not boot normally after a Safe Start or Full Disk Encryption in ESET Endpoint Encryption and ESET Full Disk Encryption
- Microsoft Surface
- Lenovo
- Boot loading loop
Solution
Affected models
The default Secure Boot mode is set to load Microsoft bootloader files only. Update the UEFI BIOS settings to allow third-party configuration, including ESET Endpoint Encryption and ESET Full Disk Encryption files.
Microsoft Surface
-
Click Change configuration.
Figure 1-1 -
Select Microsoft & 3rd-party CA and click OK.
Figure 1-2
Lenovo
-
Click Security. Click the toggle next to Allow Microsoft 3rd Party UEFI CA.
Figure 2-1
Boot loading loop
Users with Secured Core enabled may experience a boot loading loop. Disable Secured Core to boot the machine normally.
Affected versions:
- Microsoft Surface Laptop 5 Firmware version 9.101.143 and later
- Microsoft Surface Pro 9 Firstware version 12.200.143.0 and later
