Hot answers tagged

69

First of all, the simple answer to your question: If you have an ARM tablet running Windows RT (like the Surface RT or the Asus Vivo RT), then you will not be able to disable Secure Boot or install other OSes. Like many other ARM tablets, these devices will only run the OS they come with. If you have a non-ARM computer running Windows 8 (like the Surface ...


11

The BIOS is independent from your OS. You have a BIOS on your computer, whatever Operating System(s) you install on it. To answer your question more precisely, yes you have a BIOS. To set the boot device priority, you first have to access it, which is generally done by pressing a key just after powering up your computer (or rebooting). The key depends on ...


8

What is “Secure Boot” in Windows? I think (some or all of) the following are true UEFI replaces traditional BIOS as the PC firmware that starts the boot process. UEFI has a feature called "Secure Boot" You can disable EUFI secure-boot on some computers but not all. Windows 8 for ARM (Windows RT) will not install on hardware that does not support UEFI or ...


7

Firstly, you will need an EFI-booted linux system. If you still have your original install media (CD/DVD/USB stick), that should usually include an adequate rescue system. It might even have a one-click repair option :). Alternatively, the Ubuntu community provides an automatic boot-repair image. It claims to support Fedora. If you want to know what it ...


5

Machines that have the Windows 8 compatibility logo come with Secure Boot: with restrictions that by default stop the user deciding how they want to boot their computer, however on a PC (x86) you have the ability to use Custom Mode which allows you to boot into other OSes, if you are physically present and know the procedure for your particular hardware; Any ...


4

AFAIK RHEL 6 has basic support for UEFI (grub-efi, efibootmgr) with no support for Secure Boot. This means you have to turn off Secure Boot on Windows 8 logo machines if you want to install CentOS 6. I'm not aware of multiboot support for RHEL UEFI installation. Disclaimer: I did UEFI QA at Red Hat. This does not represent the official stance of Red Hat.


4

this is for anyone searching for the Launch CSM disabled (greyed out) issue (can't enable it) it's because Secure Boot is enabled in the BIOS. Disable it, then reboot and go back into BIOS and you should be able to enable Launch CSM.


3

By design, Secure Boot cannot be disabled from within an OS; you must enter your firmware's setup utility in order to disable it. With most computers, you can enter the firmware setup utility by hitting a function key, or sometimes Del, early in the boot process. Some computers don't enable the keyboard, though, or don't provide this option at all. If you've ...


3

If you are dual-booting with UEFI Windows, there's another possibility. which doesn't require a recovery disk. You can boot into Windows, open a command line with admin privileges, and run the following command: bcdedit /set {bootmgr} path \EFI\fedora\shim.efi This will replace the Windows boot entry in UEFI, with one that boots into GRUB. Assuming your ...


3

AFAIK secure boot will not allow to boot Linux, there are plans sign a bootloader which in turn would load existing bootloaders(e.g. GRUB), but it's not done yet. If you still want to enable it:


3

After my initial bootrec.exe attempt didn't detect any Windows installation, I dug further into Microsoft's documentation. I booted into RE again and went to the command line to load diskpart: > diskpart Selected the disk: DISKPART> list disk DISKPART> select disk 0 Selected the partition called "SYSTEM_DRV" (FAT32 filesystem) and assigned it ...


2

Secure Boot is a Firmware-level feature. It has nothing directly to do with Windows 8, but Microsoft is encouraging / forcing OEMs to support it on Windows 8 systems. If your BIOS supports Secure Boot, you can enable it whether you have Windows 8 or not. (although you probably won't want to enable it unless you have a signed OS). If your BIOS does not ...


2

I believe you can press Esc during bootup to display a boot menu. See if the Linux CD/USB shows up there. If not, try to turn off UEFI Boot and then set the boot order in the BIOS: As far as Secure Boot goes, here's a Secure Boot bootloader for Linux in case you're interested, and the Linux Foundation should have a valid signed pre-bootloader available ...


2

I had the same problem, but found I could install Win 7 Pro if I changed the BOOT mode to "Legacy; Secure boot: OFF". Note: At the end of my install I had no network drivers loaded, so had to download these from Dell copy them across to the laptop and then perform an installation. Once installed I had network/Internet access and could complete all other ...


2

Is there a way to disable UEFI Secure Boot without entering in BIOS settings? Secure Boot is an option enabled by default on UEFI OEM systems. Its actually required, to be turned on by default with the option to disable it, to be get a Windows 8 supported sticker from Microsoft. So even if you remove the CMOS battery the default option would be to ...


2

I asked this Microsoft and the answer was, that they show this watermark to make sure that OEMs don't release new systems without having SecureBoot turned on.


2

Only under rare circumstances will disabling secure boot cause issues, and those circumstances are those where malware tries to change your boot order. If the easiest solution to your problem is disabling secure boot, then that's the best option. Careful browsing habits and antivirus software in Windows combined with using Fedora as a primary or secondary OS ...


2

I won't go into any controversies that surround UEFI, Secure boot or TPM in general (out of scope), so I'll try and answer as directly as possible. UEFI is (for all intents and purposes) a BIOS 'replacement' that sits at the BIOS level (between hardware and OS). UEFI Secure boot has to be supported by the firmware (BIOS); UEFI Secure boot is essentially a ...


2

If you are using the Windows USB/DVD download tool, you have to manually add EFI support. Search for it on Google or give Rufus a try.


2

At this stage, this is still a debated matter, and there is much risk of landing into the dreaded primarily based on opinion territory. Most likely, the safest approach is to quote directly the Linux foundation: "Secure boot" is a technology described by recent revisions of the UEFI specification; it offers the prospect of a hardware-verified, malware-...


2

There is no difference – neither extension is actually defined to mean anything specific, and most of the time they mean the same thing. X.509 certificates have just one "main" storage format, which is DER. It can be however Base64-encoded (aka PEM-encoded) or not (raw DER). A .crt file can really be either. So first take a look at the files' contents. If ...


2

Secure Boot should not prevent booting from a USB drive per se, although it should prevent booting an unsigned boot loader from any disk. I don't happen to know offhand if Kali provides a signed or unsigned boot loader, so this might or might not be your problem. You should be able to disable Secure Boot from the firmware setup utility. If you can't do so, ...


2

Yes you can re-enable this feature safely if your operating system is compatible with this security mode. For Windows, you need at least Windows 8.


1

I have also this problem. And i have fixed the problem You can find your answer on this link: Windows 8 to 8.1 Pro Upgrade SecureBoot Error


1

I've never used YUMI; however, based on skimming its main Web page, it looks like it sets up SYSLINUX to boot various image files from the USB flash drive. This type of configuration would have to be re-done using an EFI version of SYSLINUX or some other EFI boot loader (such as GRUB 2). You could experiment with this yourself, but I don't know of any tool ...


1

If your like me and using a Samsung laptop with the Phoenix BIOS. esc or F10 worked where F2/F4 did not.


1

I had the same problem. I removed the video card, connected the monitor to the motherboard, removed the keys, disabled secure boot and it works. The problem is every component in your system must support secure boot (i.e videocard must have EFI boot ROM to support secure boot).


1

Solution: Use a jumper connector socket to "short" the "CLR_CMOS" pins on the motherboard (this should be done according to the instructions provided by the manufacturer - typically a screwdriver can be used, and may require first draining flea power). Power the system down first, connect the jumper for 5 seconds or so, then disconnect again before powering ...


1

Yes, you now can. The current version of bumblebee includes a new config file called bumblebee-nvidia-sign.conf where you can set your signing keys. Search for "Signing Kernel Modules for Secure Boot" to learn how to create your keys, how to import them into the UEFI Secure Boot keys database, and how to sign drivers with them. For bbswitch you need to ...



Only top voted, non community-wiki answers of a minimum length are eligible