3 ms·
Perhaps you could mention that, alternatively, one can rely on TPM with Heads and a hardware key for verified boot. In this case, no proprietary software is inv
by fsflover 4mo ago
Perhaps you could mention that, alternatively, one can rely on TPM with Heads and a hardware key for verified boot. In this case, no proprietary software is involved.
- Bender 4mo agoThat sounds like a good idea. Can you recommend a really good document I could link to that could walk people through switching from the M$ Cert secure boot to the non proprietary methods? Ideally one you have gone through on a few machines.
- fsflover 4mo agoThere are very few machines that are capable of running Heads, https://osresearch.net/Prerequisites https://osresearch.net/Prerequisites. I checked that it works on two Librem laptops with a Librem Key, https://puri.sm/posts/the-librem-key-makes-tamper-detection-easy/ https://puri.sm/posts/the-librem-key-makes-tamper-detection-...
- Bender 4mo agoThat looks interesting but it does not appear to be widely used or support a lot of hardware. I could be reading too much into it. I would not want to suggest people move from a proprietary but widely adopted thing to something obscure. I will read through it some more. If all Dell and HP servers supported it that could be a start.