Some ThinkPad models on the Skylake platform, such as X1 Carbon and X1 Yoga, may encounter situations where SecureBoot cannot be disabled in the BIOS, OS Optimized Default, Boot, Network Boot, UEFI/Legacy Boot, and other options cannot be changed;
Gray is not available.
Cause analysis:
Microsoft introduced a new security feature from Windows 10: Device Guard)
This option is located in Security-Device Guard in BIOS.
When option is enabled, the Default options of VT virtualization, SecureBoot, and OS Optimized are automatically enabled to lock the boot priority menu, and these options cannot be changed.
Solution:
There is a certain risk of modifying the BIOS. Please perform operations under the guidance of professional personnel to prevent damage to the device!
1. Boot into BIOS;
How to enter BIOS:
In Windows, when the Lenovo logo appears, the F1/Fn + F1 key is frequently clicked;
Win8, 8.1, and 10 systems, boot normally into the system, choose restart in the system, restart the Lenovo logo frequently click F1/Fn + F1 key.
2. After entering the BIOS, find the Security-Device Guard option and set it to Disabled;
3. Click "save" and exit.