SER9 "I can't enable firmware protection".

Jay Ruck

Hello,

I just received my brand new SER9 that I purchased from Amazon. Needless to say, I was going through several of the security settings and noticed that the computer wouldn’t allow me to enable firmware protection. There isn’t even an option to do so on the “core isolation” screen. The computer is new and I haven’t added any 3rd party applications yet, I only installed the Google Chrome browser.

Can someone please help me out with this?

support10

Jay Ruck

Hello Jay,

Could you please send us a picture of SN code at the bottom of machine ?

Could you please take a picture of the BIOS main screen of your machine for us to see?
Then we will see if your BIOS need to update.

Pls try to reset the Local Security Policy,this is the tutorial: https://www.makeuseof.com/windows-11-reset-local-security-policy/
and you can also try this tutorial:https://www.elevenforum.com/t/enable-or-disable-kernel-mode-hardware-enforced-stack-protection-in-windows-11.14966/

Have a nice day!

Jay Ruck

Hello,

Please see the attached photos. I have reset the Local Security Policy and am still receiving the same result.

Thanks,

Image description

support6

Jay Ruck
Hello,

Your BIOS version is already the latest, so you don’t need to update the BIOS version again.
1.About starting secure boot ,please refere： ① Please repeatedly press delete key as soon as you turn on the PC, go to BIOS.

②Navigate to Security page. Click secure boot and choose enable , change the secure boot mode to custom, press F4 to save.

③ When the PC restarts, press delete key to go to BIOS again. change the secure boot mode to standard and press F4 to save. The status will become active.

2.About enabling firmware protection，please refere this ： pls try to reset the Local Security Policy,this is the tutorial: https://www.makeuseof.com/windows-11-reset-local-security-policy/
and you can also try；

Best Regards!
Wendy
Customer Support

Jay Ruck

support6

Hello,

Here’s what I done:

I enabled secure boot and changed boot mode to custom and restarted the computer.
I enabled secure boot and changed boot mode to standard and restarted the computer.
I reset the local security policy per the link you provided.

Please see the attached photos of the steps I took.

Can someone please help me with this issue? I’m still having the same problem as before. My computer still won’t allow me to enable firmware protection.

Image description

support7

Here are some potential solutions:

Check TPM and virtualization settings
TPM (Trusted Platform Module): Make sure TPM 2.0 is enabled in BIOS/UEFI and working properly.
AMD-V: For AMD processors, make sure AMD virtualization (AMD-V) is enabled in BIOS. This is key to enabling core isolation and other advanced security features.
Press Win + R to open the Run dialog box, enter secpol.msc and press Enter to open Local Security Policy.
Go to Local Policies > Security Options, check the policies related to Secure Boot, Firmware Protection, and Core Isolation, and make sure they are set to Not Configured or Enabled.
Disable antivirus software