Skip to main content

Reverting 10X boot restrictions & returning to classic 10

Prerequisites

Tweak USB contents

  • Plug in the setup USB drive
  • Navigate to efi\boot inside your USB drive
  • Rename bootx64.efi to winx64.efi
  • Copy the EFI shell file you've downloaded to that directory and rename it to bootx64.efi
  • Create a file on the root of your USB drive called startup.nsh and open it in Notepad
  • Paste this text into Notepad and save the file
    dmpstore -d SecureBootPlatformID -guid 77FA9ABD-0359-4D32-BD60-28F4E78F784B
    fs0:\efi\boot\winx64.efi
    fs1:\efi\boot\winx64.efi
    fs2:\efi\boot\winx64.efi
    fs3:\efi\boot\winx64.efi
    fs4:\efi\boot\winx64.efi
    fs5:\efi\boot\winx64.efi
    fs6:\efi\boot\winx64.efi
    fs7:\efi\boot\winx64.efi
    fs8:\efi\boot\winx64.efi
    fs9:\efi\boot\winx64.efi
    fsA:\efi\boot\winx64.efi
    
  • The USB drive is now ready to use

Extra troubleshooting

Recent devices with Intel Pentium (Gold) chips that use Insyde BIOS are prone to entering a faulty Secure Boot state, resulting in the machine booting to a black screen with Security Boot Fail written in the middle, even though UEFI says Secure Boot is off. To fix this issue, do the following:

  • Turn Secure Boot on
  • Save changes and boot back to UEFI settings
  • Turn Secure Boot off
  • Secure Boot should now be fully disabled again