[SOLVED] USB image - Access Denied error

Élisabeth · 2021-09-11 17:16:57

Head_on_a_Stick wrote:

The equivalent command under Windows would be
bcdedit /enum bootmgr

identificateur {bootmgr}
device partition=\Device\HarddiskVolume2
path \EFI\Microsoft\Boot\bootmgfw.efi
description Windows Boot Manager
locale fr-FR
inherit {globalsettings}
default {current}
resumeobject {4fb97110-89ea-11eb-86f7-fd30943e1855}
displayorder {current}
toolsdisplayorder {memdiag}
timeout 30

Head_on_a_Stick · 2021-09-11 20:38:57

Sorry OP, my posts in this thread are irrelevant — I failed to read through the thread properly before answering and didn't appreciate that you're trying to boot a USB stick rather than an installed system.

Apologies for the noise.

Élisabeth · 2021-09-11 22:38:45

Head_on_a_Stick wrote:

Sorry OP, my posts in this thread are irrelevant — I failed to read through the thread properly before answering and didn't appreciate that you're trying to boot a USB stick rather than an installed system.
Apologies for the noise.

But thank you for trying to help.
Just unlucky that my first installation is fraught with so much difficulty.

larsH · 2021-09-11 22:57:39

Hi

I do not know if the following video is relevant https://www.youtube.com/watch?v=jw_ZNgEn874 . Apologize if not. Is CSM disabled ??

Have a nice day
Lars H

Élisabeth · 2021-09-11 23:05:56

In the meantime I have found out that the BIOS Superuser password of the PC is set, which prevents me from disabling Secure Boot.
(I bought the PC secondhand.)

So I have three options:

Disable Secure Boot. I must first unset the password by removing the CMOS battery.
Find a way to boot Devuan.
Use Debian.

Élisabeth · 2021-09-12 07:32:27

larsH wrote:

Hi
I do not know if the following video is relevant https://www.youtube.com/watch?v=jw_ZNgEn874 . Apologize if not. Is CSM disabled ??
...
Lars H

I can't change the BIOS settings because the BIOS is password protected.

Élisabeth · 2021-09-12 07:35:36

Élisabeth wrote:

the BIOS Superuser password of the PC is set, which prevents me from disabling Secure Boot.
So I have three options:
Disable Secure Boot. I must first unset the password by removing the CMOS battery.
...

I have been warned on the Lenovo forum that removing the battery won't clear the password and risks blocking me out of the PC.

ralph.ronnquist · 2021-09-12 08:26:05

My web search lead to
https://www.cocosenor.com/articles/comp … aptop.html
where at least the first option seems quite safe to try.

EDIT: duly edited. Thanks @Camtaf.

Camtaf · 2021-09-12 08:43:43

The above link gave me a 404 error, try this link
https://www.cocosenor.com/articles/comp … aptop.html

Élisabeth · 2021-09-12 09:10:08

I booted from a Debian USB into grub and tried to boot Devuan in the other USB drive:

Élisabeth wrote:

I entered the command usb, which returned the following error: Secure Boot forbids loading module from (hd1)/boot/grub/x86_64-efi/usbtest.mod

Does anyone know why Secure Boot rejects the above ?

Élisabeth · 2021-09-12 09:11:34

Camtaf wrote:

The above link gave me a 404 error, try this link
https://www.cocosenor.com/articles/comp … aptop.html

Ralph, Camtaf - thank you. Will try tonight.

rolfie · 2021-09-12 10:19:26

Élisabeth wrote:

In the meantime I have found out that the BIOS Superuser password of the PC is set, which prevents me from disabling Secure Boot. (I bought the PC secondhand.)

Asking the seller isn't an option? At least give it a try.

rolfie

larsH · 2021-09-12 11:20:29

Hi

The interesting part is that you can boot debian. But Devaun and Debian are using the same secureboot key as far I know of.

So what is the difference ??
Another option is to install Debian and then migrate to Devuan.
Or install Debian (or even Windows) and run Devuan in a virtual machine.
Or get another motherboard for the machine.
Maybe try to reset by removing the battery. You will most likely loose nothing if you have backup of your data. The problem might be loosing encrypted partitions by a reset. But backups solve that problem..

That is what I can think of right now
Lars H

Have a nice day

Élisabeth · 2021-09-12 17:44:54

rolfie wrote:

Élisabeth wrote:
In the meantime I have found out that the BIOS Superuser password of the PC is set[...]
Asking the seller isn't an option? At least give it a try.

No, bought it a long time ago.

Élisabeth · 2021-09-12 22:21:17

I just had an unexpected miracle when trying a variation of booting with both the Debian + Devuan USB sticks.

With both sticks plugged in I selected USB on the BIOS Select Boot Device screen, which gives no choice of USB drive when multiple are plugged in. The blue screen came up, I thought I was looking at Debian, but no, I did a double take and it said Devuan !!!!

What was different ? - This was Chimaera netinstall, created with copy/paste.
(By copy/paste I mean: Format USB as FAT32, then copy paste the contents of the image via drag & drop.)

A recap of what I have tried :

[which image + USB] | [which write method] | [result]

Beowulf desktop-live | AnyBurn, Unetbootin-windows, dd-Windows | Secure Boot Access Denied error
Chimaera desktop-live | AnyBurn, Unetbootin-windows, dd-Windows, copy/paste | Secure Boot Access Denied error
Chimaera desktop-live + Debian | copy/paste | BIOS loads Debian, grub: Secure Boot refuses to load Devuan
Chimaera netinstall | AnyBurn, dd-Windows, copy/paste | no error, no load, BIOS re-presents Select Boot Device screen
Chimaera netinstall | Rufus | Secure Boot Access Denied error
Chimaera netinstall + Debian | AnyBurn, dd-Windows, copy/paste | BIOS loads Devuan installation menu

Just to be clear: The only successful attempt requires the Debian USB to be plugged in but it is not loaded or used in the process.

I have not yet attempted the actual installation.

Last edited by Élisabeth (2021-09-14 21:21:12)

fsmithred · 2021-09-12 22:59:48

Wow, that is weird. But then again, I have yet to see two uefi implementations that act the same way. If you install from there, be sure you know which drive you are installing to.

If you search at youtube for 'Lenovo T550 replace cmos battery' (or factory reset) you will find some videos showing you how to do it. If you do it, keep track of which screws go in which holes. They are not all the same.

Élisabeth · 2021-09-13 06:00:28

It looks like I don't need to disable Secure Boot now. I definitely won't be screwing with the laptop myself.

I've used a Linux desktop for 15 years but never done a system installation. Hence it had been suggested to me to use desktop-live.

I'm sure I'll need help with the netinstall here. It's my only PC.

rolfie · 2021-09-13 12:21:39

Have a look at https://www.devuan.org/os/install and drill down the links. Especially https://www.devuan.org/os/documentation … all-devuan may be useful. Unfortunately it only shows the legacy grub installation, not the efi version.

rolfie

ralph.ronnquist · 2021-09-13 13:37:59

@Élisabeth, the ISO file is supposed to be put onto a USB memory stick to reside from the physical block 0 and up on the USB. Copying onto a partition is not the right way.

To achieve that on windows seems unduly complicated but it should be possible, and in particular I believe dd-windows may be used for it. The important point is that the USB becomes an exact copy of the ISO from its block 0 up to whatever size the ISO is, and then the USB stick can have whatever on the blocks after that. (Somewhere I saw the suggestion that "the disk as a whole" is Partition0 with dd-windows)

The first partition on a disk starts some few blocks in and the first few blocks contain the partition table. The ISO file starts at block 0 and includes a partition table for its partition layout, which includes an EFI partition and a CDROM partition. All that must be put onto the USB memory stick from its block 0.

Note that when you "format the USB as FAT32" you actually create a single first partition on that USB, and then copy&paste just copies the ISO file to be a file on that partition. Doing that is not the right way. Again, just to have it repeated three times: you'll need to copy the ISO onto the USB stick as a whole to become the exact memory image of the USB stick from block 0 and up.

Ralph.

Élisabeth · 2021-09-13 16:41:10

ralph.ronnquist wrote:

@Élisabeth, the ISO file is supposed to be put onto a USB memory stick to reside from the physical block 0 and up on the USB. Copying onto a partition is not the right way.

I absolutely agree. I just tried this tip out of despair.

But, if you look at my post point 4, the PC does not boot from the Devuan USB regardless of whether I use dd, AnyBurn or copy, unless the Debian USB is in the other slot.

ralph.ronnquist · 2021-09-13 22:42:45

Ok; afaict AnyBurn has the "Burn image file to disc" button to master a USB stick from an ISO file, and if you used that, then the USB stick is mastered correctly.

The next would be to get an overview of which boot options the UEFI startup code sees. Apparently there is a windows' program named bootcfg to use for that.
https://docs.microsoft.com/en-us/window … ons-in-efi
If I understand correctly, you would start an Administrator command line shell for running bootcfg, and (from the doc) the applicable command seems to be bootcfg query. You should try that with the mastered USB in place, and perhaps also with the mastered Debian USB in the secondary place.

Please drop the resulting output here for us to look at.

EDIT: then I saw that apparently bcdedit is a replacement bootcfg... so maybe you already posted something. Though in that post it only shows the windows boot entry, so maybe you will need to repeat that with the mastered USB in place. My random doc pointer for bcdedit is
https://docs.microsoft.com/en-us/window … ds/bcdedit

EDIT2:
and this one is useful for bocdedit /enum variants
https://docs.microsoft.com/en-us/window … edit--enum
.. perhaps a good list from

bcdedit /enum osloader

.. or maybe

bcdedit /enum all

Élisabeth · 2021-09-14 06:27:46

ralph.ronnquist wrote:

AnyBurn has the "Burn image file to disc" button to master a USB stick from an ISO file, and if you used that, then the USB stick is mastered correctly.

I used Create bootable USB Drive with the HDD option.

No, that's not the right thing. Doesn't it have the "Burn image to disc" option? All else will try to mess with the image.

Élisabeth · 2021-09-14 09:28:07

Élisabeth wrote:

ralph.ronnquist wrote:
AnyBurn has the "Burn image file to disc" button to master a USB stick from an ISO file, and if you used that, then the USB stick is mastered correctly.
I used Create bootable USB Drive with the HDD option.
No, that's not the right thing. Doesn't it have the "Burn image to disc" option? All else will try to mess with the image.

How did this repsonse get into my post ?

AnyBurn has this option. But it can't be used for USB. I immediately get an error: Aucune unité de gravure detectée (no engraving unit detected)

ralph.ronnquist · 2021-09-14 09:33:25

sorry about editing your post.. must be tired...

Ok. so AnyBurn is no good, then. Possibly dd-windows? but you must make sure to select The Whole usb stick and not any of its partitions.. except that possibly dd-windows uses the name "partition0" for the whole disk (again I've picked that idea from my web searching)

Élisabeth · 2021-09-14 09:36:55

bcdedit /enum osloader

 Chargeur de démarrage Windows
-----------------------------
identificateur          {current}
device                  partition=C:
path                    \WINDOWS\system32\winload.efi
description             Windows 10
locale                  fr-FR
inherit                 {bootloadersettings}
recoverysequence        {4fb97112-89ea-11eb-86f7-fd30943e1855}
displaymessageoverride  Recovery
recoveryenabled         Yes
isolatedcontext         Yes
allowedinmemorysettings 0x15000075
osdevice                partition=C:
systemroot              \WINDOWS
resumeobject            {4fb97110-89ea-11eb-86f7-fd30943e1855}
nx                      OptIn
bootmenupolicy          Standard

Chargeur de démarrage Windows
-----------------------------
identificateur          {4fb97112-89ea-11eb-86f7-fd30943e1855}
device                  ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{4fb97113-89ea-11eb-86f7-fd30943e1855}
path                    \windows\system32\winload.efi
description             Windows Recovery Environment
locale                  fr-FR
inherit                 {bootloadersettings}
displaymessage          Recovery
osdevice                ramdisk=[\Device\HarddiskVolume1]\Recovery\WindowsRE\Winre.wim,{4fb97113-89ea-11eb-86f7-fd30943e1855}
systemroot              \windows
nx                      OptIn
bootmenupolicy          Standard
winpe                   Yes

The officially official Devuan Forum!

#26 2021-09-11 17:16:57

Re: [SOLVED] USB image - Access Denied error

#27 2021-09-11 20:38:57

Re: [SOLVED] USB image - Access Denied error

#28 2021-09-11 22:38:45

Re: [SOLVED] USB image - Access Denied error

#29 2021-09-11 22:57:39

Re: [SOLVED] USB image - Access Denied error

#30 2021-09-11 23:05:56

Re: [SOLVED] USB image - Access Denied error

#31 2021-09-12 07:32:27

Re: [SOLVED] USB image - Access Denied error

#32 2021-09-12 07:35:36

Re: [SOLVED] USB image - Access Denied error

#33 2021-09-12 08:26:05

Re: [SOLVED] USB image - Access Denied error

#34 2021-09-12 08:43:43

Re: [SOLVED] USB image - Access Denied error

#35 2021-09-12 09:10:08

Re: [SOLVED] USB image - Access Denied error

#36 2021-09-12 09:11:34

Re: [SOLVED] USB image - Access Denied error

#37 2021-09-12 10:19:26

Re: [SOLVED] USB image - Access Denied error

#38 2021-09-12 11:20:29

Re: [SOLVED] USB image - Access Denied error

#39 2021-09-12 17:44:54

Re: [SOLVED] USB image - Access Denied error

#40 2021-09-12 22:21:17

Re: [SOLVED] USB image - Access Denied error

#41 2021-09-12 22:59:48

Re: [SOLVED] USB image - Access Denied error

#42 2021-09-13 06:00:28

Re: [SOLVED] USB image - Access Denied error

#43 2021-09-13 12:21:39

Re: [SOLVED] USB image - Access Denied error

#44 2021-09-13 13:37:59

Re: [SOLVED] USB image - Access Denied error

#45 2021-09-13 16:41:10

Re: [SOLVED] USB image - Access Denied error

#46 2021-09-13 22:42:45

Re: [SOLVED] USB image - Access Denied error

#47 2021-09-14 06:27:46

Re: [SOLVED] USB image - Access Denied error

#48 2021-09-14 09:28:07

Re: [SOLVED] USB image - Access Denied error

#49 2021-09-14 09:33:25

Re: [SOLVED] USB image - Access Denied error

#50 2021-09-14 09:36:55

Re: [SOLVED] USB image - Access Denied error

Board footer