Windows Boot Manager has been blocked by the current security policy

Question

hi im trying to start up valorant and it keep saying van9003 which says that i have to enable secure boot. my device is ideapad gaming 3 15arh7, im using amd as my processor and last week i reinstall my windows and everything because a malware got to my laptop and i had to clean everything. The last time i played this game i could open it but now it requires me to enable the security boot. i opened my bios and enabled it but then it says "Windows Boot Manager has been blocked by the current security policy" i alr reset factory key i switch to the setup mode then reset the factory keys again the enable it again, still said the same thing. when it boots it keeps saying network drive smthn smthn error 1 till like 3 then it stops and stay in a black screen. what do i do? for now I've only disable it again to gain access to my laptop again but now idk what to do so i can play this game. the bios start alr use UEFI (when i checked msinfo32) so idk what happened

Answer 1

The error indicates Secure Boot is enabled in firmware, but Windows Boot Manager is not trusted by the current Secure Boot configuration. The goal is to restore the default Secure Boot keys and then re‑enable Secure Boot so Windows can boot normally and Valorant’s anti‑cheat requirements are met.

Follow these steps in order:

1. Reset Secure Boot keys to factory defaults
   1. Restart the device and enter the UEFI/BIOS setup (typically by pressing a key such as F1, F2, F12, Esc, or similar during power‑on; check the Lenovo documentation for the exact key).
   2. Go to the Secure Boot section.
   3. Use the option to Reset Secure Boot keys to factory defaults (or similar wording). If there are both Clear and Reset options, use Reset, not Clear. The goal is to restore the manufacturer’s default Secure Boot variables and keys.
   4. Save changes and exit.
2. Test boot with Secure Boot temporarily off
   1. Go back into UEFI/BIOS.
   2. Set Secure Boot to Disabled.
   3. Save and boot into Windows.
   4. Once in Windows, verify it starts normally and that the system disk is still the primary boot device.
3. Rebuild Windows boot files if needed If the device still has trouble booting when Secure Boot is on, rebuild the EFI boot files:
   1. Boot into Windows with Secure Boot disabled.
   2. Open an elevated Command Prompt (Run as administrator).
   3. Run these commands one by one, pressing Enter after each:

            mountvol s: /s
            del s:\*.*/f /s /q
            bcdboot %systemroot% /s S:
      

   4. Confirm that BCDBoot reports “Boot files successfully created.”
   5. Restart back into Windows (still with Secure Boot disabled) to confirm it boots.
4. Re‑enable Secure Boot
   1. Restart and enter UEFI/BIOS again.
   2. Ensure the firmware is set to UEFI (not Legacy/CSM) and that the Windows drive is the first boot option.
   3. In the Secure Boot section, set Secure Boot to Enabled.
   4. If there is a mode selection (such as Standard / Windows UEFI mode / Custom), choose the standard or Windows‑specific mode so the built‑in keys are used.
   5. Save and exit.
   6. Confirm that Windows now boots without the “Windows Boot Manager has been blocked by the current security policy” message.
5. If Windows still will not boot with Secure Boot enabled
   1. Turn Secure Boot off again so the device is usable.
   2. Repeat the key reset to factory defaults in firmware.
   3. If the problem persists even after rebuilding boot files, perform a Windows reinstall from recovery media with Secure Boot enabled, then re‑enable Secure Boot after installation if the installer temporarily changes it.
   4. If none of these steps work, contact the device manufacturer (Lenovo) for firmware‑specific guidance, as recommended when Secure Boot cannot be re‑enabled successfully.

Once Windows boots normally with Secure Boot enabled and UEFI mode active, Valorant should pass its Secure Boot check (assuming TPM 2.0 is already enabled and active).

---

References:

• How to manage the Windows Boot Manager revocations for Secure Boot changes associated with CVE-2023-24932
• Disabling Secure Boot
• Secure the Windows boot process
• Windows 11 and Secure Boot
• Secure boot state is still off tried alot of things - Microsoft Q&A
• why don't i have the 2023 secure boot keys - Microsoft Q&A
• Can't enable secure boot - Microsoft Q&A

Answer 2

The AI solution worked for me!

Answer 3

trying dave's method

Answer 4

1

Start your laptop, just as Windows attempts to load (spinning dots), press and hold Power Button for 5 - 10 seconds to perform a Hard Shut Down

Do this twice

On the third start Windows will boot into the Recovery Environment and from there you can access System Repair, Safe Mode, Command Prompt... etc.

Go to Troubleshoot - Advanced Option - Command Prompt

Run this command and press Enter.

bootrec /FixMbr

Run this command and press Enter.

bootrec /FixBoot

Run this command and press Enter.

bootrec /ScanOs

Run this command and press Enter.

bootrec /RebuildBcd

Then reboot your System.

2

If that does not resolve the problem.

Click your Start Button, then just type msinfo and press Enter, please provide a screenshot of the resulting System Information window.