3 ms·
> Plus, keeping Microsoft’s CA installed greatest reduces any security which I’d get from SecureBoot. Can't you just remove all CAs from the UEFI and import on
by preisschild 1y ago
> Plus, keeping Microsoft’s CA installed greatest reduces any security which I’d get from SecureBoot.
Can't you just remove all CAs from the UEFI and import only your own anyways with most mainboard vendors?
- xyse53 1y agoYeah that's how my systems are set up. I also appreciate that each firmware let's me restore the original keys just in case without me having to manually back them up -- but they're not active for secure boot.