3 ms·
Because almost no vendor wants to give you the keys to your system voluntarily. If secure boot puts the users in charge, I'm all for it. But there are forces at
by gmueckl 9y ago
Because almost no vendor wants to give you the keys to your system voluntarily. If secure boot puts the users in charge, I'm all for it. But there are forces at work to subvert the system to achieve a better vendor lock-in. And providing them with better means to that end is unethical.
- freeone3000 9y agoI've never been on a system where I couldn't swap the keys in UEFI. Does mokutil not work on your system?
- gmueckl 9y agoYou know that this feature only works because Microsoft added it to the requirements of the Windows Logo program for x86 based computers almost at the last minute. Mainboard manufacturers would otherwise cut corners and add the MS signing key as the only unchangeable key to the system. At the same time, MS specified for ARM computers that want to run Windows that the key must be fixed and irreplaceable.
- tedunangst 9y agoGo into the BIOS and set your own keys.