BIOS Update using windows makes Grub disappear

I made the mistake of updating my Lenovo Legion 5’s bios using the Lenovo tool in Windows on my dual boot machine. After the update, the machine boots directly into Windows. I rebooted into the basic BIOS and found that Windows was now in the first position and Opensuse Grub in the second position. I reordered the entries so that Opensuse is now in the first position, but the machine still boots directly into Windows. I know there is a way to fix this problem, but I cannot remember what it is. I think it has something to do with authorizing Opensuse somehow in UEFI, but I cannot remember how. Does anyone have a solution to this problem?


Apparently Lenovo has decided that allowing linux is contrary to the requirements of secure-boot

Responsible stewardship of the UEFI secure boot ecosystem

I don’t know whether that is the cause of your problem. But if it is, then you may need to disable secure-boot in your BIOS to allow booting openSUSE.

BIOS resets on UEFI PCs usually result in reenabling Windows boot. Where that’s set, it needs to be changed to other OS, whatever it is that Lenovo calls it.

After disabling secure boot, the computer did boot into Grub as it did before. If your reference is correct, it seems absurd – making a system less secure in the name of increasing security. I’m not sure, though, that secure boot was disabled before the BIOS upgrade.

Yes, I agree that it seems absurd. Lenovo seems to have a strange interpretation of Windows booting requirements. As far as I know, other manufacturers are not doing this.

This notebook works as is. The vendor says:

100-day right of return: The statutory right of revocation applies for the first 14 days. Additionally, Galaxus offers an optional right of return until day 100 from the date of receipt.

ThinkBook:~ # inxi -zSM 
  Kernel: 5.19.8-1-default arch: x86_64 bits: 64 Console: pty pts/4 Distro: openSUSE Tumbleweed 
  Type: Laptop System: **LENOVO** product: 21A4 v: **ThinkBook 15 G3 ACL** serial: <filter> 
  Mobo: LENOVO model: LNVNB161216 v: SDK0T76530 WIN serial: <filter> UEFI: LENOVO 
    v: GQCN29WW(V1.15) date: **11/04/2021** 
ThinkBook:~ #
ThinkBook:~ # efibootmgr 
**BootCurrent: 0003**
Timeout: 0 seconds
BootOrder: 0003,0005,0000,2002,2001,2003
Boot0000* openSUSE
Boot0001* EFI PXE 0 for IPv4 (7C-8A-E1-BF-FA-F3) 
Boot0002* EFI PXE 0 for IPv6 (7C-8A-E1-BF-FA-F3) 
**Boot0003* opensuse-secureboot**
Boot0005* Windows Boot Manager
Boot2001* EFI USB Device
Boot2003* EFI Network
ThinkBook:~ # 

Presumably no firmware update is required.