Microsoft has finally released a support update detailing how to troubleshoot BSODs that appear on Lenovo ThinkPads due to the August 2020 Patch Tuesday for Windows 10 version 2004.
Users started reporting errors after the August cumulative update KB566782 for Windows 10 version 2004 appeared on 2019 and 2020 Lenovo ThinkPads. However, Microsoft notes that the issue appeared in the preview KB4568831 (OS Build 19041.423) on July 31, 2020.
Lenovo offered a solution that involved disabling the Enhanced Windows Biometric Security setting in BIOS Setup under the Security and Virtualization settings section.
The issue arose when Lenovo's Vantage application that updates hardware drivers attempted to use the Intel Management Engine to interface with firmware, which was blocked by the BIOS in the security update.
Microsoft has now published a detailed description of the error, its symptoms, cause, and workaround . The solution it provides is the same as Lenovo's, but it comes with a strong security warning from Microsoft. Microsoft also explains how Lenovo Vantage bypasses Microsoft's security controls in Windows.
Users may be able to bypass the BSOD screen, but they are putting their computers at risk by implementing the workaround, Microsoft says.
The workaround also affects some of Microsoft's latest security features for Windows 10, such as Hypervisor Code Integrity to protect the operating system from malicious drivers, as well as Windows Defender Credential Guard.
“This workaround may make a computer or a network more vulnerable to attack by malicious users or malicious software. We do not recommend that you implement this workaround, but we are required to notify you and you can use your own discretion,” Microsoft states.
The good news for affected users is that Microsoft and Lenovo are working together on a fix. However, Microsoft has not said when the solution will be available.
