Turn on "Allow Microsoft & 3rd Party UEFI CA" under Security > Secure Boot
新版本的 Rufus 不用turn off "Secure Boot"
我猜你的P15S比我的新(我的是 P15s Gen 1),那就要 Turn on "Allow Microsoft 3rd Party UEFI CA"
https://download.lenovo.com/pccbbs/mobiles_pdf/Enable_Secure_Boot_for_Linux_Secured-core_PCs.pdf