Microsoft’s August 2024 security update could prevent Linux from booting on some Windows–Linux dual-boot PCs. It applied Secure Boot Advanced Targeting (SBAT), a protection intended to block vulnerable Linux EFI shim bootloaders. Microsoft meant to leave detected dual-boot systems untouched, but says some customized configurations were not detected and received the setting anyway. The resulting error was “Verifying shim SBAT data failed: Security Policy Violation. Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation.” Microsoft later said the offending settings were absent from the September 2024 security update and later updates.
Why did the August 2024 update affect Linux booting?
Secure Boot checks software involved in starting a computer. SBAT helps prevent vulnerable boot components from running. In the August 13, 2024 Windows 11 KB5041571 notes, Microsoft said the update applied SBAT to Windows systems to stop vulnerable Linux EFI shim bootloaders. The security goal was to block vulnerable bootloaders, not to remove Linux or erase users’ files. Microsoft’s KB5041571 notes describe that intent.
Microsoft intended to avoid applying the SBAT setting when it detected a Windows/Linux dual-boot system. Its known-issue guidance says some customized dual-boot configurations escaped detection. On those systems, Linux could then fail its shim SBAT security check during startup. This was a Linux boot failure; the cited Microsoft guidance does not say that Windows or personal files were erased. Microsoft’s KB5041160 known-issue entry and its August 27 preview-update notes document the detection problem and error.
Does the August 2024 problem still require action?
Microsoft’s later status says the September 2024 security update and subsequent updates did not contain the settings that caused this dual-boot issue. For systems that dual-boot Windows and Linux, Microsoft says no additional steps are necessary after installing the September 2024 update or a later one. That is Microsoft’s general update guidance, not a diagnosis of every current boot failure. If Linux still will not start, identify the exact error and check the current guidance for your Linux distribution and device before changing firmware settings.
Free tools Windows power users keep installed
One-click scans. No signup required.
#1 Best Overall
- Wide Compatibility: Lexar D70E external SSD features a cable-free design with dual USB-C and USB-A connectors for direct, seamless backups across Mac, PC, tablets, and mobile devices
- High-Speed Transfer: Lexar portable SSD D70E supports USB 3.2 Gen 2×2 USB-C up to 2000MB/s read and 1800MB/s write, USB-A up to 1000MB/s read and 900MB/s write to transfer files quickly. Performance may be lower if not supoorting USB 3.2 Gen 2 on Mac and other systems
- Large Capacities: Lexar D70E PSSD offers up to 2TB of storage, effortlessly expanding your digital workspace for seamless productivity. Actual usable memory capacity may vary. 1GB equals 1 billion bytes
- Durable & Compact: Lexar external solid state drive D70E weights only 55g, featuring a metal housing with an integrated lanyard loop for everyday carry and added protection
- Convenient Backups: With the Lexar App, Lexar D70E external SSD could automatically backup photos and videos for convenient use
Which Ubuntu systems were affected?
Canonical’s Ubuntu-specific guidance, published August 22, 2024, described systems with Secure Boot enabled, the relevant Windows update installed, and a shim older than version 15.8. It said existing Ubuntu dual-boot installations were affected except Ubuntu 24.04 LTS. At that time, however, the Ubuntu 24.04 LTS release installation ISO still used shim 15.7, so Canonical advised using updated installation media for fresh installs on affected systems. Canonical’s August 2024 Ubuntu guidance is historical and version-specific; it should not be treated as a current fix for every Ubuntu installation or for other Linux distributions.
For a reader assessing the old incident, the relevant distinctions were whether Linux was already installed or being installed fresh, whether Secure Boot was enabled, which distribution and shim version were in use, and whether Windows had received the September 2024 or later update. The Ubuntu version threshold and media advice above apply to Canonical’s stated August 2024 scope, not to all distributions.
Rank #2
- Wide Compatibility: Lexar D70E external SSD features a cable-free design with dual USB-C and USB-A connectors for direct, seamless backups across Mac, PC, tablets, and mobile devices
- High-Speed Transfer: Lexar portable SSD D70E supports USB 3.2 Gen 2×2 USB-C up to 2000MB/s read and 1800MB/s write, USB-A up to 1000MB/s read and 900MB/s write to transfer files quickly. Performance may be lower if not supoorting USB 3.2 Gen 2 on Mac and other systems
- Large Capacities: Lexar D70E PSSD offers up to 2TB of storage, effortlessly expanding your digital workspace for seamless productivity. Actual usable memory capacity may vary. 1GB equals 1 billion bytes
- Durable & Compact: Lexar external solid state drive D70E weights only 55g, featuring a metal housing with an integrated lanyard loop for everyday carry and added protection
- Convenient Backups: With the Lexar App, Lexar D70E external SSD could automatically backup photos and videos for convenient use
How is this different from Secure Boot certificate problems?
The August 2024 SBAT regression should not be confused with Secure Boot certificate trust or revocation changes. Microsoft’s Secure Boot certificate-transition guidance, last updated August 4, 2026, explains that a signed shim may still fail if the firmware does not trust its signing certificate. A shim signed with the 2011 certificate can continue to boot only if the firmware database still contains Microsoft UEFI CA 2011 and neither the shim nor its SBAT level has been revoked. These are separate conditions from the 2024 update’s dual-boot detection failure. Consult current distribution and device documentation before changing Secure Boot or firmware settings. Microsoft’s Secure Boot 2023 certificate-transition guidance for Linux distributions provides the current certificate context.
Quick Recap
Best Value
- Fit For All Needs: Designed with dual USB-A and USB-C plugs, this solid state drive meets all your data transfer and storage needs across your USB-C smartphone, iPhone 16, iPad Pro, tablet, laptop, and USB-A computer, Smart TV, in-car audio system
- Ultra Data Transfer: This USB SSD improve USB 3.2 Gen 2 technology to achieve amazing data transfer speed of up to 1000MB/s,it could transfer 4K videos,high definition photos,game data and more
- Plug and Work: Widely compatible with Windows Android, Linux and Mac OS, this USB C solid state drive is plug-and-work without any adapter or software installation. Also compatible with USB 3.1/USB 3.0/USB 2.0
- Sturdy and Reliable: This SSD is made of zinc alloy,can be used for various environments.High quality SSD standard improve data security and performance reliability
- Slim and Portable: Designed in a fashion racing car design and slim profile measuring 79.7x21.2x8.5 mm/3.14x0.83x0.33 inch, this external SSD is easy to carry in your bag. Turning covers ensure your data is protected on the move
Rank #4
- 【Stable 1090MB/s Speed, No Drop】MOVE SPEED Vpro Series portable ssd writes at 1090MB/s full speed across the entire 2TB external SSD with no slowdowns, even during large transfers. Additionally, the upgraded SSD-class 2tb external ssd features significantly enhanced heat dissipation, ensuring optimal performance and a better overall user experience while maintaining high-speed data transfer.
- 【Dual Interfaces and Data Backup】MOVE SPEED Vpro series USB C flash drive have USB 3.2 Gen 2 & Type-C dual interfaces. USB 3.2 Gen2 port is for computer, laptop, and usb c port is for Android phone and phone with USB C port. Portable ssd with dual ports are more convenient for data transfer between different devices, let you switch easily storage space.
- 【SSD Level Chip & Zinc Alloy Case】MOVE SPEED USB 3.2 Gen2 flash drive 2tb is made of advanced SSD level chip technology and high-quality zinc alloy materials. SATA Solid-state drives are now condensed into the form of USB C external drive. SSD external only takes 1 seconds to transmit 1GB file. What's more, ssd 2tb external has excellent waterproof, dust-proof, anti-drop, high temperature and anti-magnetic properties.
- 【Wide Compatibility and Easy to Use】USB 3.2 Gen2 flash drive ssd is universal for Android USB-C Phone, iPhone 15, iPhone 16, iPhone 17 Series, desktop, laptop, car audio system, smart TV and More. Real Plug and Play, extremely simple to use. Plugs directly into your android phone or computer, no cable and software required. The usb c ssd portable comes with a keychain leather case for easy portability and storage. Come and use this ssd 2tb external to transfer files for you！！
- 【What's in the Box】Package included: MOVE SPEED V Pro series solid state USB drive x1, thumb drive leather case x1, User Manual x1, 7x 24 friendly customer service and 30-days 100% refund if any displeasure, lifetime tech support. Our after-sale team will deal with your issue in 24 hours.
Rank #3
- 【Stable 1090MB/s Speed, No Drop】MOVE SPEED Vpro Series portable ssd writes at 1090MB/s full speed across the entire 1TB flash drive with no slowdowns, even during large transfers. Additionally, the upgraded SSD-class 1tb external ssd features significantly enhanced heat dissipation, ensuring optimal performance and a better overall user experience while maintaining high-speed data transfer.
- 【Dual Interfaces and Data Backup】MOVE SPEED Vpro series USB C flash drive have USB 3.2 Gen 2 & Type-C dual interfaces. USB 3.2 Gen2 port is for computer, laptop, and usb c port is for Android phone and phone with USB C port. Portable ssd with dual ports are more convenient for data transfer between different devices, let you switch easily storage space.
- 【SSD Level Chip & Zinc Alloy Case】MOVE SPEED USB 3.2 Gen2 flash drive 1tb is made of advanced SSD level chip technology and high-quality zinc alloy materials. SATA Solid-state drives are now condensed into the form of USB C external drive. usb 3.2 gen 2 flash drive only takes 1 seconds to transmit 1GB file. What's more, ssd 1tb external has excellent waterproof, dust-proof, anti-drop, high temperature and anti-magnetic properties.
- 【Wide Compatibility and Easy to Use】USB 3.2 Gen2 flash drive ssd is universal for Android USB-C Phone, iPhone 15, iPhone 16, iPhone 17 Series, desktop, laptop, car audio system, smart TV and More. Real Plug and Play, extremely simple to use. Plugs directly into your android phone or computer, no cable and software required. The usb c ssd portable comes with a keychain leather case for easy portability and storage. Come and use this ssd 1tb external to transfer files for you！！
- 【What's in the Box】Package included: MOVE SPEED V Pro series solid state USB drive x1, thumb drive leather case x1, User Manual x1, 7x 24 friendly customer service and 30-days 100% refund if any displeasure, lifetime tech support. Our after-sale team will deal with your issue in 24 hours.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
