I have a Lenovo T450 with a locked BIOS that only allows booting from HD or PXE.

I have installed Ubuntu using PXE but I would like to add an entry in GRUB to boot from a USB just in case there is an issue in future.

If I go into the BIOS the following relevant settings are:

  • UEFI Secure Boot = Off
  • Config - USB UEFI BIOS Support = Enabled
  • Security - I/O Port Access - USB Port = Enabled
  • Security - Secure Boot = Disabled

The only thing that looks to be blocking the USB is the fact that it is excluded from the boot order choices and I can't add it back.

The BIOS diagnostic text on boot lists the USB drive by name so it is recognized.

I looked at this question on manually adding an entry to grub

However, grub>ls only shows my hard disk and not my USB drive.

Although, when I boot into Ubuntu I can read the drive and see the UUID with blkid.

I installed Plop Boot Manager and added entries to /etc/grub.d/40_custom

menuentry "Plop Boot Manager 5" {
    linux16 /boot/plop/plpbt.bin

menuentry "Plop Boot Manager 6" {
    linux16 /boot/plop/pbm6

However, neither of these work. v5 errors with

Loading EHCI Driver
Searching on Hosts
Host 1
Port 1: Device Connected
Driver Removed
Loading UHCI Driver
Searching on Hosts
Driver Removed
Loading OHCI Driver
Searching on Hosts
Driver Removed

Changing the setup to Force USB 1.1 to Mode 1 or Mode 2 doesn't fix it.

v6 says PBM6 - Init hardware..RegisterPartitions: Error then when it loads it only shows the SATA drive and not the USB drive in the menu.

What other options are there?

Since the USB is recognized in Ubuntu is it possible to add an extra partition with a kernel in it that loads the USB drivers then chains the boot to load from the USB?

  • 1
    While not same model, this user reset system. docs.google.com/document/d/… Have you updated UEFI to latest available from Lenovo? Resetting system will change all your UEFI settings. I keep a list so I can easily redo them whenever I update UEFI. – oldfred Dec 4 '19 at 16:21
  • I don't see how anything in that doc is relevant. Like you say it is for a different model. And as mentioned in the question, the BIOS is locked. If you look up the T450 you will see that you can't unlock it due to extra security on the board. – opticyclic Dec 4 '19 at 17:44
  • Most systems will let you set or reset a UEFI password by removing coin battery on motherboard or jumpering some pins next to coin battery. cocosenor.com/articles/computer/… – oldfred Dec 4 '19 at 19:59
  • Most systems do. But as mentioned in the comment above yours, the T450 doesn't as it has extra security on the board. – opticyclic Dec 5 '19 at 15:51
  • Manual says you just have to enter the UEFI password to unlock it. If you do not have the UEFI password, then only a dealer can unlock it, and he should check to see if reported as stolen. – oldfred Dec 5 '19 at 16:40

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.