2 ms·
Yea AFAIK Ubuntu and others use a shim signed by Microsoft that boots grub.
by kcb 4y ago
Yea AFAIK Ubuntu and others use a shim signed by Microsoft that boots grub.
- judge2020 4y ago> On Ubuntu, all pre-built binaries intended to be loaded as part of the boot process, with the exception of the initrd image, are signed by Canonical's UEFI certificate, which itself is implicitly trusted by being embedded in the shim loader, itself signed by Microsoft. https://wiki.ubuntu.com/UEFI/SecureBoot#How_UEFI_Secure_Boot_works_on_Ubuntu https://wiki.ubuntu.com/UEFI/SecureBoot#How_UEFI_Secure_Boot...
- AshamedCaptain 4y agoNote that the keys uses by Microsoft for signing Windows are different from the ones they use to sign anything else, and some motherboards and laptops only come with the former. Early x86 Surface Pros, for example (even though you could disable secure boot entirely, and be forced to go through Scary Boot Prompts).