2 ms·
you can boot debian/redhat/... out of the box without disabling it, as the shim used as part of the boot process has been signed by MS if you want to sign your
by blibble 5y ago
you can boot debian/redhat/... out of the box without disabling it, as the shim used as part of the boot process has been signed by MS
if you want to sign your own kernels: the shim will also let you do that relatively easily ("machine owner keys")
if you want to own your entire boot process you can replace the platform key and sub-keys with your own, and then trust whoever you want (even adding MS' keys if you wish, so Windows can boot in secure mode)
- kelnos 5y agoI'm pretty sure we don't want to be in a world where we can only use one of a few Microsoft-approved Linux distros without it being a pain the the ass to deal with.
- blibble 5y agowe've been in that world for about 10 years now if you don't like it... turn off secure boot, or enroll your own keys (the mok approach takes about 30 seconds)