diff --git a/SecurityPkg/VariableAuthenticated/RuntimeDxe/Variable.c b/SecurityPkg/VariableAuthenticated/RuntimeDxe/Variable.c
index ec857665fd..7ecc29b94b 100644
--- a/SecurityPkg/VariableAuthenticated/RuntimeDxe/Variable.c
+++ b/SecurityPkg/VariableAuthenticated/RuntimeDxe/Variable.c
@@ -2839,6 +2839,8 @@ VariableLockRequestToLock (
 {
   VARIABLE_ENTRY                  *Entry;
   CHAR16                          *Name;
+  LIST_ENTRY                      *Link;
+  VARIABLE_ENTRY                  *LockedEntry;
 
   if (VariableName == NULL || VariableName[0] == 0 || VendorGuid == NULL) {
     return EFI_INVALID_PARAMETER;
@@ -2857,11 +2859,23 @@ VariableLockRequestToLock (
 
   AcquireLockOnlyAtBootTime(&mVariableModuleGlobal->VariableGlobal.VariableServicesLock);
 
+  for ( Link = GetFirstNode (&mLockedVariableList)
+      ; !IsNull (&mLockedVariableList, Link)
+      ; Link = GetNextNode (&mLockedVariableList, Link)
+      ) {
+    LockedEntry = BASE_CR (Link, VARIABLE_ENTRY, Link);
+    Name = (CHAR16 *) ((UINTN) LockedEntry + sizeof (*LockedEntry));
+    if (CompareGuid (&LockedEntry->Guid, VendorGuid) && (StrCmp (Name, VariableName) == 0)) {
+      goto Done;
+    }
+  }
+
   Name = (CHAR16 *) ((UINTN) Entry + sizeof (*Entry));
   StrnCpy   (Name, VariableName, StrLen (VariableName));
   CopyGuid (&Entry->Guid, VendorGuid);
   InsertTailList (&mLockedVariableList, &Entry->Link);
 
+Done:
   ReleaseLockOnlyAtBootTime (&mVariableModuleGlobal->VariableGlobal.VariableServicesLock);
 
   return EFI_SUCCESS;