Windows 10: System firmware access is denided when attempting to update a Secure Boot Variable

As the title says, in Event Viewer -> Windows Logs -> System, I see this "Error" after every system restart. Along with it, there are 3 "Warnings", of which the first is:The application-specific permission settings do not grant Local Activation permission for the COM Server application with CLSID {2593F8B9-4EAF-457C-B68A-50F6B8EA6B54} and APPID {15C20B67-12E7-4BB6-92BB-7AFF07997402} to the user "me" from address LocalHost Using LRPC running in the application container Unavaila

:)

 

un-able to access secure boot

Hello ReginaldPinder

Welcome to the Microsoft Community.

Accessing Secure Boot settings in the BIOS/UEFI firmware can be tricky sometimes, especially if the options aren't readily visible or accessible from Windows 10. Here are a few steps you might try to resolve this issue:

1. Directly Access BIOS/UEFI Settings:
   
   1. Restart your computer and press the key to enter the BIOS/UEFI settings. This key is often displayed during the boot process and might be F1, F2, F10, DEL, ESC, or another key, depending on the manufacturer of your motherboard or computer.
      
   2. Once in the BIOS/UEFI, navigate to the boot or security tab to find Secure Boot settings.
      
2. Check for UEFI Boot Mode:
   
   Ensure your system is actually booting in UEFI mode, as Secure Boot is a feature of UEFI. You can check this in Windows by opening System Information and looking for BIOS Mode under the System Summary; it should say UEFI. If it says Legacy, you'll need to change the boot mode in your BIOS/UEFI settings.
   
3. Update or Reset BIOS/UEFI Firmware:
   
   1. If you're sure the Secure Boot option should be there but isn't, consider updating your BIOS/UEFI firmware to the latest version. Manufacturers sometimes add features or fix bugs in firmware updates.
      
   2. If you're not comfortable updating the BIOS/UEFI firmware yourself, or if the problem persists after an update, a reset to default settings might help. There's usually an option to do this within the BIOS/UEFI menu.
      
4. Enable CSM or Legacy Support (if applicable):
   
   In some cases, Secure Boot settings may not be available or may be greyed out because CSM (Compatibility Support Module) or Legacy Support is enabled. Try disabling CSM or switching from Legacy to UEFI mode, but be aware this might require reinstallation of Windows for proper booting.
   
5. Consult Motherboard Manual or Manufacturer Support:
   
   If none of the above steps work, consult the manual for your motherboard or contact the manufacturer's customer support. They might offer specific guidance for accessing Secure Boot settings for your particular hardware.
   
6. Windows Recovery Environment (Windows RE):
   
   If the UEFI Firmware Settings option is missing when you go to Settings > Update & Security > Recovery > Advanced startup > Restart now > Troubleshoot > Advanced options, your system might not be recognizing the UEFI environment properly. In such cases, contacting support for your motherboard or PC manufacturer may be necessary.
   

Remember that making changes to BIOS/UEFI settings can affect your system's functionality, so proceed with caution and make sure to back up important data before making any significant changes.

If there is anything not clear or I can't understand your problem, please do not hesitate to let me know.

Best Regards

| Microsoft Community Support Specialist

 

Secure Boot and UEFI Firmware updates?

If laptop is so old that it came with Windows 7, a firmware update is highly unlikely. Updating bios has nothing to do with secure boot anyway.

 

secure variable update is locked down

What are the precise steps to resolve: secure variable update is locked down