3 ms·
>Awful: often used to protect subsidies or other business model hijinks; can't install an alternate OS. And there's the rub. Microsoft forbids manufacturers of
by ryukafalz 9y ago
>Awful: often used to protect subsidies or other business model hijinks; can't install an alternate OS.
And there's the rub. Microsoft forbids manufacturers of ARM-based Windows devices from allowing customers to disable or customize secure boot.[0] I doubt they'll change that going forward.
>On an ARM system, it is forbidden to enable Custom Mode. Only Standard Mode may be enabled.
[0] https://docs.microsoft.com/en-us/windows-hardware/design/compatibility/systems#system_fundamentals_firmware_uefisecureboot https://docs.microsoft.com/en-us/windows-hardware/design/com...
- suihkulokki 9y agoShim is signed with microsoft key, does it still require custom mode for booting?
- Nullabillity 9y agoYes. Shim requires that your kernel is also signed, and also disables support for kernel modules.
- xvilka 9y agoAnd this shows why forcing that in shim was a bad idea. They should have made a version breaking the chain, and allowing to boot unsigned kernel.
- Nullabillity 9y agoNo, this shows why (forcing) Secure Boot was a bad idea. Allowing Shim to load unsigned kernels would be equivalent to having it bypass SB in the first place, which Microsoft would presumably never sign.