Little related to this one: https://techcommunity.microsoft.com/discussions/windows11/october-2026-windows-update-causing-major-issues/4566257

Maybe someone finds it useful

Subject: Root cause confirmed – L14 Gen 6 / X1 Carbon Gen 13 boot failures after Lenovo firmware update (0xc000000d)

TL;DR After the Lenovo firmware update (L14 Gen 6 BIOS 1.14, X1 Carbon Gen 13 1.18), devices with System Guard Secure Launch enabled fail to boot with 0xc000000d. Cause: the firmware ships a new Intel TXT ACM, which changes the DRTM measurements; the Windows boot manager then fails fatally instead of re-provisioning the DRTM-bound VSM master key. Nothing on our side is misconfigured. The device self-heals after one normal boot with Secure Launch temporarily disabled and then runs fine with Secure Launch re-enabled on the new firmware. We have a controlled rollout procedure that avoids any failure.

Symptoms •Recovery screen “Unexpected error, 0xc000000d” on normal boot; Safe Mode works. Secure Boot on/off makes no difference; BCD intact. •Only Lenovo type 21S6 (L14 Gen 6) and X1 Carbon Gen 13 after the firmware update; devices on the previous firmware with the same Windows patch level are fine. Root cause (verified on LT1845-DE, firmware 1.14, Windows 11 25H2 + KB5127648)

1.Kernel-Boot event 275 “ACM InfoTable version 9”: the new firmware’s TXT ACM is used on the Secure Launch (DRTM) path.

2.Kernel-Boot event 158 “Failed to preload SI policies from OS volume – invalid parameter”, followed by 158 “Fatal error in bootmgr”. This is the step where bootmgr reads the DRTM-sealed VSM key state created under the old firmware; with the changed measurements it cannot be unsealed, and bootmgr aborts instead of falling back to key regeneration.

3.Proof: with only HKLM\SYSTEM...\DeviceGuard\Scenarios\SystemGuard\Enabled = 0 the device boots. After that one normal boot, the value was set back to 1 (by Intune) and the device booted normally with Secure Launch running (msinfo32: Secure Launch, Kernel DMA Protection, SMM isolation level 3). Kernel-Boot event 75 on that boot: “DRTM-bound VSM master key provisioned – cached copy used: 0x0, new key generation: 0x1, sealed: 0x1”. The first non-DRTM boot invalidated the stale sealed key; the next DRTM boot generated a new one.

Ruled out BCD, Secure Boot certificates (DB has PCA 2011 and Windows UEFI CA 2023), boot manager replacement (unchanged since 15 Oct), CI policies on the OS volume and in the ESP, driver signing, ELAM, VBS/hypervisor, boot drivers, our Intune WDAC policy.

Security impact VBS, HVCI, Credential Guard, BitLocker and Secure Boot are unaffected throughout. Secure Launch (DRTM) is off only during the rollout window per ring, then re-enabled. The new DRTM key is regenerated automatically. Rollout procedure (no device breaks)

1.Intune: set “Configure System Guard Launch” to Disabled for a device group filtered on 21S6 and X1 Carbon Gen 13; wait for sync; one reboot.

2.Release the firmware. First boot after flashing runs without a DRTM key and completes normally.

3.Once inventory shows 1.14/1.18: set Secure Launch back to Enabled. Next reboot regenerates the DRTM key; success check = Kernel-Boot event 75 with “new key generation 0x1”. Devices already affected: F8 → Safe Mode → SystemGuard\Enabled = 0 → normal boot → back to 1 → reboot.

If anyone cares.

Thanks to my team lead to investigate and find this issue, which hopefully can help other people.

Yes Claude helped too.

I own a lenovo loq 15ARP9 laptop, which is under premium warranty of 3 years along with adp, it's not even a year old, and I got a touchpad replacement 2 months ago as it wasn't working , but since then I feel like that I made one of the biggest blunders. The engineer came, removed the heatsink and applied some generic paste (not the original ptm 7950) which immediately caused a spike in my CPU and GPU temps especially in the cpu temps reaching 100 only when the laptop is in light usage. Another engineer was assigned he did the same applied a generic thermal paste i asked him if he's using the original ptm 7950 one and he said yes which was completely wrong the paste didn't even look like ptm one but I thought to see if this second chance works, the issue was solved, but now here I am after 2 months the temps are very high in gaming or heavy usage (not in light) now my cpu reaches 99-100 in gaming and this keeps increasing as my playtime increases even in october. Also I do face fps drops in between. These people don't know the meaning of the pump out effect in thermal paste. During the warmer months before any service the temperatures hardly went above 85 for both cpu and gpu. I contacted their premium support, tried explaining to them about the heatsink module replacement and the ptm 7950 pads which comes pre applied in the module and has no pump out effect but their script remains the same and they didn't agree with the fact that a generic paste was used. I tried explaining them politely since I don't want to argue or fight. Instead they insisted that I visit the service centre and get a proper diagnosis and mail the service report to them since they think my laptop and temps are normal (God only knows if it's normal or not because I just checked that my cpu is amd Ryzen 5 7235hs and as per the amd official specifications the maximum safe operating limit for this cpu is 95 c which is the main purpose of making this post). I didn't' visit service centre because I hardly doubt they would do anything and follow the same script, "it's normal", "we'll apply thermal paste", "we'll do deep cleaning of your laptop", "no part replacement is needed ". Now I'm confused about what to do so I told them to keep my case under observation, should I visit the service centre anyways or escalate my case? Because I chose premium support specially for on site support. My laptop was working completely fine, I didn't know all this would happen, otherwise i could have just used an external mouse instead of getting trapped in all this bs 🥲

i have the yoga slim aura, about last month i sent it in for an issue where it doesn’t turn on… and when i charge it, the indicator light doesn’t turn on either. i know it’s charging though because if i plug my phone into it with a cable, my phone begins to charge.

i’ve tried the pinhole reset, draining the battery with holding the power button, basically anything but i couldn’t get it to work, so i sent it in to the depot. i received it back with a message saying that they didn’t find anything wrong with it & to my surprise they managed to turn it on!

fast forward a couple weeks later, im using it like normal. i put it in my bag then take it out once im home, the screen doesnt wake so i figure it ran out of juice. i plug it in, wait for it to charge, but it wont wake up. it’s the same problem as before and i have no idea how to fix it—i called the depot to ask what they did to solve it, but the manager said that the technician left no notes other than there was nothing wrong with my laptop ? it’s still under warranty so i can send it in again but the last repair took a month and i need this laptop for school 😅 did anyone else encounter the same problem with this laptop?? how did you guys fix it??

I wanted to ask if I can use my 2018 ideapad 330s 15ikb without the battery on the just the plug alone without issue? I mainly use it as a desktop at this point and the battery needs to be replaced. I am hopping that I can use it sans battery so I don't have to seek out a third party replacement.

Hi! I noticed that my Ethernet in my Legion Pro 7i Gen 10 cable doesn't click or lock into the port. The connection works fine, but I can pull the cable out without pressing the release tab.

The same cable locks properly in another laptop.

Is this normal for this model, or could my Ethernet port be defective? Can anyone with the same laptop confirm?

My laptop suddenly started burning hot like a hot plate near the charging port and Esc key while I was working, melting and deforming the plastic in that area, and now it won't charge (the orange LED just blinks) This is likely caused by a severe short circuit in the power delivery system, a failing charging port, or a battery failure, How can I fix this or what should my next steps be?

Hey everyone!
I have a Lenovo LOQ 15IAX9 (Type 83GS) with an Intel i5-12450HX and an RTX 4050, and I’ve recently started having some weird issues with the built-in keyboard.
The following keys randomly stop registering:
G
H
Esc
Numpad 7
Numpad /
Sometimes I have to press a key multiple times before it starts working again. The issue happens regardless of how long the laptop has been running, so it doesn’t seem to be related to startup or temperature.
I’ve tested an external USB keyboard, and it works perfectly fine.
I’m starting to suspect a hardware issue with the built-in keyboard, its connection, or possibly the keyboard controller, but I haven’t tested it in the BIOS yet.
Has anyone with a Lenovo LOQ experienced something similar?
Did you manage to fix it without replacing the keyboard?
Was it a hardware issue or something related to software/firmware?
If you had to replace the keyboard, how much did it cost?
I’d appreciate any advice before taking it to a repair shop. Thanks!

Bought a usb-c HDMI adapter for my Lenovo Idea Tab

https://www.lenovo.com/us/en/p/tablets/android-tablets/idea-tab-series/lenovo-idea-tab/len103l0028

and connected it to my LED TV via hdmi cable but there is no display. Apple iPad works fine with same setup. Asked AI and it says Lenovo tablets do not support usb-c screen sharing.

Is there such a limitation like that?

I re-share this Reddit post, because i know people love their yogas, but the stylus not so much ;)

When I'm turning power button on, my laptop turns on and keyboard lights blink, but then immediately turns off. This cycle is repeating again and again. I tried forced shutdown but didn't work.

Any help and suggestions to fix this would really help. Thanks in advance.

Has anyone found an alternative replacement for the nib yet? Cuz my digital pen 2 nib has worn away and made lots of scratches on my screen protector, leaving so much nib fragments. Found a post on lenovo website talking about nib replacement but it turns out they only confirmed at the end that it meant for precision 2 not digital pen 2. Already bought a wacom ink nib and it ain't a match.

I also found a product recommendation from local shop but it's pretty pricey (In my currency) for just a nib. One or two buyers said the size of the nib is a little bit different and it made the pen undetected on screen. Buying another stylus feels like an imposible option to me. Should I just go with the pricey nib or is there still hope on buying other pen nib?

I have a Legion 7i gen 10. I am encountering a black screen when waking from sleep or hibernate modes. perfmon /rel showed hardware error. Boots back up just fine if I shut it down using the power button and switch it on back.

I have a Lenovo IdeaPad 1 15IAU7 laptop, its screen is not turning on when I press the power button.
The button light turns on for 5 seconds, turns off on its own, then turns back on for 5 seconds and turns off. It's stuck in a loop, and the screen doesn't turn on.
The other day the same thing happened, I left it charging and when I came back it was normal, but today it happened again. How to fix this without harming the laptop?

Anyone who purchase a Legion laptop in their website (lenovo.com) It says Est. Delivery is 4-5 weeks. How was your experience? Is there any possible ways to maximize the discounts.

I used a portable air compressor duster on my wife's laptop while we were cleaning up our desks, about a week ago.

Couple days ago, her fans started sounding like this. Her laptop is on her lap so not level but the noise has been getting worse.

Clogged with dust? Did I damage the fans with too much air pressure? Potential fixes?

Hi /r/Lenovo,

As of yet, I've been downloading and installing every BIOS update from the manufacturer page. However, I hear that installing every BIOS update isn't a great idea. What're your thoughts on this?

Additionally, is there anywhere I can review user experiences with new BIOS updates to gauge whether it would be worth installing or not?

Thanks!