4 ms·
Shim is signed with microsoft key, does it still require custom mode for booting?
by suihkulokki 9y ago
Shim is signed with microsoft key, does it still require custom mode for booting?
- Nullabillity 9y agoYes. Shim requires that your kernel is also signed, and also disables support for kernel modules.
- xvilka 9y agoAnd this shows why forcing that in shim was a bad idea. They should have made a version breaking the chain, and allowing to boot unsigned kernel.
- Nullabillity 9y agoNo, this shows why (forcing) Secure Boot was a bad idea. Allowing Shim to load unsigned kernels would be equivalent to having it bypass SB in the first place, which Microsoft would presumably never sign.