4 ms·
> per the Microsoft guidelines that require that x86 machines allow their secure boot to be disabled. Yeah but then you can't boot into Windows? Who is actuall
by dataflow 5y ago
> per the Microsoft guidelines that require that x86 machines allow their secure boot to be disabled.
Yeah but then you can't boot into Windows? Who is actually going to go into the firmware settings to switch settings on and off for every single boot to the other OS?
- blibble 5y agoyou can boot debian/redhat/... out of the box without disabling it, as the shim used as part of the boot process has been signed by MS if you want to sign your own kernels: the shim will also let you do that relatively easily ("machine owner keys") if you want to own your entire boot process you can replace the platform key and sub-keys with your own, and then trust whoever you want (even adding MS' keys if you wish, so Windows can boot in secure mode)
- kelnos 5y agoI'm pretty sure we don't want to be in a world where we can only use one of a few Microsoft-approved Linux distros without it being a pain the the ass to deal with.
- blibble 5y agowe've been in that world for about 10 years now if you don't like it... turn off secure boot, or enroll your own keys (the mok approach takes about 30 seconds)