VeraCrypt icon indicating copy to clipboard operation
VeraCrypt copied to clipboard

Couldn't upgrade BIOS with system encryption of Windows 11

Open muradurm opened this issue 4 months ago • 0 comments

Notebook HUAWEI MateBook D 16 (2022). Huawei PC manager notified about new BIOS version available (v1.28). After clicking "reboot for upgrade BIOS" notebook boots as usually displaying Veracrypt prompt for password, then boots to Windows and PC Manager continues to show "new BIOS available". I disabled Veracrypt setting "Automatically fix boot configuration issues that may prevent Windows from starting" but it didn't help.

Expected behavior

BIOS updater creates a folder in the EFI partition (with new BIOS files) and a record in EFI table which links to this files to boot it after clicking "reboot for upgrade BIOS". After reboot updater should be launched, update the BIOS, remove the record in EFI table and boot as usual.

Observed behavior

After clicking "reboot for upgrade BIOS" notebook boots as usually displaying Veracrypt prompt for password and then boots to Windows without BIOS upgrade.

Steps to reproduce

  1. I disabled Veracrypt setting "Automatically fix boot configuration issues that may prevent Windows from starting".
  2. Clicked "reboot for upgrade BIOS" provided by Huawei PC manager.
  3. Notebook rebooted without upgrading BIOS

I managed to upgrade BIOS:

  1. I booted Debian Linux CLI from USB drive, and launched "efibootmgr -v".
  2. It displayed entries of EFI table, the last entry was "2021 Bios upgrade"
  3. I entered "efibootmgr --bootnext 2021"
  4. I entered "reboot"
  5. Bios updater launched and updated BIOS

Your Environment

Windows 11 Pro

VeraCrypt version: 1.26.15

Operating system and version: Windows 11 23H2 22631.4317

System type: 64-bit

muradurm avatar Oct 12 '24 01:10 muradurm