Has anyone got a Macrium Reflect X USB SSD rescue media device to boot when Secure Boot is enabled?


Is this SSD a standalone Windows build? Meaning it has its own local EFI volume which isn't shared?

Typically when you use the boot manager in the BCD, it uses the same boot manager to host a variety of different boot devices. But you can override that in the BIOS boot priority and boot directly from a specific device. This way, the shared boot manager on another drive's EFI volume is ignored.

I presuming your normal boot manager works fine for your primary disk, but if you're booting directly from the external SSD, then the EFI volume on that SSD hasn't been updated. So bcdboot needs to be run on that volume.

I am trying to boot from a usb ssd. I change the boot order in the BIOS. I hope this answers your question. It boots perfectly when secure boot is disabled.
 

My Computers My Computers

  • At a glance

    Windows 11 Pro 25H2 26200.8737AMD Ryzen 7 5825U with Radeon Graphics16GB
    OS
    Windows 11 Pro 25H2 26200.8737
    Computer type
    Laptop
    Manufacturer/Model
    Acemagic LX15PRO
    CPU
    AMD Ryzen 7 5825U with Radeon Graphics
    Motherboard
    BIOS CT_BI_AMI_LX15PRO_AB8139_A-004
    Memory
    16GB
    Screen Resolution
    1920 x 1080
    Hard Drives
    SSD 2TB
    Internet Speed
    30 Mbps
    Browser
    Brave
    Antivirus
    Webroot SecureAnywhere Complete beta
  • At a glance

    Windows 11 Pro 23H2 22631.2506Atom N450 1.66GHz2GB
    Operating System
    Windows 11 Pro 23H2 22631.2506
    Computer type
    Laptop
    Manufacturer/Model
    HP Mini 210-1090NR PC (bought in late 2009!)
    CPU
    Atom N450 1.66GHz
    Memory
    2GB
    Browser
    Brave
    Antivirus
    Webroot
  • Acer Swift SF114-34 laptop
    OS Windows 11 Pro 26200.8737
    CPU Pentium Silver N6000
    RAM 4GB
    BIOS v1.17
    SSD Samsung 970 EVO Plus SSD 2TB (an upgrade)
That's what I thought.

1. Disable Secure Boot.
2. Boot from the other SSD.
3. Confirm if you have June 2026 or later installed on this Windows. June 2026 will have the SVN 9.0 files present.

4A. If you have June 2026 installed locally, run the update script (no -BootMedia option). This will update this SSD's own EFI volume.

4B. If you haven't got June installed, you can try transplanting the newer boot files from the primary (other Windows) drive. Mount that drive so it has drive letter W:

Code:
mountvol S: /S
bcdboot W:\Windows /s S: /f UEFI /bootex
mountvol S: /d

5. Now you should be able to enable Secure Boot, and boot from this SSD.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
Back
Top Bottom