Questions tagged [secure-boot]

For questions on “Secure Boot” and “Restricted Boot” the new bios feature that is in computers with the “Windows 8” logo.

Filter by
Sorted by
Tagged with
0
votes
0answers
49 views

Why BIOS first boot changes to UEFI:CD-ROM?

I have a Gigabyte GA-H110M-S2PH Mainboard, I set my hard disk as the first boot option and disable other boot items, but every time I insert a UEFI BootCD, first boot option changes to UEFI:CD-ROM in ...
0
votes
0answers
11 views

Time Authenticated EFI Variable

I'm setting up custom secure boot keys on an Asus Z87I-Deluxe motherboard. On other computers I've setup with secure boot, I've been able to either write the PK, KEK, and DB keys into the EFI ...
0
votes
2answers
45 views

Will disabled secure boot put at risk my pc?

I'm having Win10 and Linux on dual boot on my PC. I'm using Linux all the time but now I want to play something that runs only on Win10. The secure boot on my PC is disabled. On Windows I've got only ...
1
vote
0answers
39 views

How to disable HDD lock in BIOS?

I have an Acer Spin 3 laptop with Secure Boot. I was messing around in BIOS and now the laptop asks for a HDD password upon boot. It is annoying, how do I disable it again? The BIOS is Insyde H20 rev ...
0
votes
2answers
261 views

Windows 10 bios how to enable booting from USB device?

does someone know how to solve the following problem? I like to boot from a bootable USB device on Windows 10 When clicking on advanced restart options and selecting boot from USB, it says that the ...
0
votes
0answers
88 views

Unable to disable Secure Boot in ASUS EUFI bios

I've just bought a new windows 10 machine from Scan, and I need to disable secure boot to get various Ubuntu things working. However, the secure boot is enabled in the bios and greyed out so I can't ...
0
votes
0answers
143 views

UEFI doesn't show NVMe after reboot from Fedora 31

I bought a Thinkpad E595 today and after updating its BIOS, I installed Windows 10 on it and then Fedora 31. I'm getting this weird issue where after I reboot from Fedora, my NVMe doesn't show up in ...
0
votes
0answers
143 views

Moving a Windows 10 SSD to external enclosure for dual boot

My laptop came with Windows 10 pre-installed using UEFI and Secure Boot on an SSD, the Windows drive encrypted with Bitlocker. I pulled that SSD and installed Ubuntu on a new SSD. I bought an ...
1
vote
0answers
175 views

Kali Linux Boot Image Authentication

I recently discovered Kali Linux and decided to make a live USB so that I could boot it on any available (64-bit) machine. In the process, I also discovered the common "Selected boot image did not ...
2
votes
0answers
51 views

secureboot with parrotOS - not able to sign custom kernel

I've installed Parrot OS on my surface and built the custom kernel for the surface from jakeday repo. I'm currently trying to sign my custom kernel that I can turn on secureboot again. I've followed ...
0
votes
0answers
76 views

Laptop doesn't boot after authorizing a new key in secure boot

I have an ASUS ROG Strix laptop with double boot (Windows 10 and Ubuntu 19.10) on it. After updating Ubuntu, secure boot started complaining about unauthorized software, so I tried to manually ...
1
vote
3answers
1k views

LG Gram install Ubuntu with USB

I'm trying to install Ubuntu 18 LTS on an LG Gram 17 laptop. I created a bootable USB with the Ubuntu 18 image. I disabled already secure boot and also removed signatures (I think it is called setup ...
0
votes
0answers
15 views

why grub cannot boot into menu after turn on secure boot?

In dell laptop, I try to boot from my usb stick which has EFI partition with grub2. I can boot into grub menu if I turn off the secure boot. But I cannot boot into menu if I turn the secure boot mode ...
7
votes
1answer
900 views

“update-secureboot-policy --enroll-key” running on every new startup eating resources

update-secureboot-policy --enroll-key seems to run whenever I start my computer and never stops running unless I manually kill the process. It makes my computer hot and uses lots of system resources. ...
3
votes
1answer
293 views

Windows Defender Application Control prevents Windows to boot after second restart (signed policy)

Hy everyone! I want to lock down some Windows 10 Terminals so that they can only run approved Software but keep the possibility to update this software. My plan was to make use of the new Feature of ...
0
votes
0answers
77 views

Secure boot, MSI Gaming m5 motherboard and bitlocker

Hi I am on Windows 10 and I have my drive (m.2 970 evo x2 in a intel raid 0) bitlocker encrypted using a password (key) and not a TPM. I realized I don't have secure boot enabled and when I get it on ...
0
votes
1answer
156 views

How to install Kali Linux with Linux Foundation PreLoader?

I installed the latest Kali Linux on my notebook Lenovo X390 Yoga. I have dualboot with default installed Windows 10 x64. I need use Bitlocker for Windows 10 partition (I use it without TPM, only with ...
1
vote
1answer
75 views

Secure Boot not failing

I've got a Windows 10 OS and I need to test out if Secure Boot works or not and the easiest way to test that I thought would be to overwrite/remove the digital signatures from EFI binaries in the ...
0
votes
0answers
143 views

Disable kernel signature checks during boot on Ubuntu?

Ubuntu provided 5.0.0-27-generic today. I attempted to reboot but booting fails due to a failed signature check. I'd like to tell the kernel to skip the signature check during boot. I found Ubuntu's ...
0
votes
1answer
194 views

Ubuntu x Nvidia drivers and secure boot - Failed to enroll new keys

I'm trying to install Nvidia drivers on my Ubuntu install that I'm running on a drive other than my main Windows one and as far as I know, to install them on Ubuntu with secure boot enabled you need ...
0
votes
0answers
133 views

stuck at secureboot authorization screen

I tried updating the UEFI settings and the next reboot after save and exit displayed a bunch of errors (hence me assuming the write was corrupted). There was no cancel or revert options and just an "...
1
vote
0answers
112 views

HP Wifi not working in Ubuntu 19.04 in Secure Boot

Output of lspci: 00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v6/7th Gen Core Processor Host Bridge/DRAM Registers (rev 08) 00:02.0 VGA compatible controller: Intel Corporation UHD Graphics 620 ...
0
votes
0answers
35 views

Is there a way to disable Secure Boot startup message?

So yesterday I disabled Secure Boot in order to run an undervolt software. I'm running Elementary OS on an Asus Q325UA laptop and when I reboot/cold start the system I get this message before the grub ...
1
vote
1answer
274 views

How to check if Mac and Linux have secure boot enabled and disabled via command line?

I am writing a program in Net Core and it seems like getting this information via the Terminal is the only way. So how to check if Mac and Linux have secure boot enabled and disabled via command line?...
0
votes
0answers
110 views

OVMF - No FS0 after entering boot menu and select “continue”

I compiled OVMF with enabled Secure Boot and now I want to start the bootloader. To start it I have to join FS0 and select it. But before I can do this I need to integrate the PK, KEK and DB keys. So ...
0
votes
0answers
904 views

How to run virtual box with Secure boot disabled?

I have a Debian 9 system with UEFI enabled. When I try to load a virtualbox instance it gives me the following error: Kernel driver not installed (rc=-1908) The VirtualBox Linux kernel driver is ...
0
votes
0answers
438 views

Secure Boot in VMs with QEMU/KVM

I'm trying to run Secure-Boot in several VMs with QEMU/KVM. What happened so far: I created own keys with openssl and signed a grubx64.efi bootloader for testing purposes. It worked in so far that I ...
0
votes
0answers
468 views

Secure Boot - Custom signed bootloader

Through Secure Boot on Windows 10, I am trying to make it so that only a bootloader signed with my private key can boot on a machine. This means that even if someone else comes along with a Microsoft ...
0
votes
2answers
120 views

Windows - Converting OpenSSL generated certificates

I'm following a guide on how to enroll your own Secure Boot keys on Linux but my platform that I'm using is Windows and I'm currently stuck trying to convert the OpenSSL generated certificates into a ...
1
vote
1answer
2k views

How to boot POP! OS in UEFI mode without disabling secure boot on my computer?

I installed POP! OS on my laptop a few days ago but secure boot wont let me boot it. I cant disable secure boot or UEFI mode because after installing a bios update my BIOS setup menu wont open anymore....
1
vote
0answers
67 views

Is it safe to keep the default MOK.priv on after a fresh install of Ubuntu 18.04.2 with secure boot enabled?

I'm new to secure boot strategy. I found there is a default paris, MOK.der and MOK.priv, inside shim folder after a fresh installation of Ubuntu 18.04.2. If I understand correctly, they're there to ...
0
votes
0answers
206 views

Re-enable Secure Boot after Installing Graphics Card

After having trouble with no image after installing a graphics card, I disabled Secure Boot (Still UEFI, not Legacy). Everything is now working, and I would like to re-enable Secure Boot. Is there a ...
1
vote
0answers
20 views

Rollback protection for network booting

I am interested in secure network booting. UEFI Secure Boot, combined with a signing key I control, ensures that no unauthorized code can run. However, it doesn’t provide rollback protection: an ...
0
votes
0answers
123 views

Linux kernel authentication

For the problem that I am facing is actually that I am working on a project which is about checking the integrity of the kernel image "vmlinuz" that is in the hard disk! To do so, am trying to add a ...
1
vote
0answers
734 views

Using rEFInd to boot Windows 10 with Secure Boot and Bitlocker encryption enabled

I have a corporate laptop (HP Zbook 15) with two m2.sata drives: nvme0: the one that shipped with the computer, featuring Bitlocker encrypted Windows 10 nvme1: a secondary drive running linux I use ...
2
votes
2answers
254 views

EFI sig list converter or viewer

I recently used efitools' keytool.efi to save the EFI secure boot keys from my UEFI firmware. I now have a few .esl files that contain EFI signature lists, but they are binaries, and I would like to ...
1
vote
0answers
95 views

How can i change my BIOS password?

I have tried everything, backdoor passwords, flashing the bios and bios reset tools made by my manufacturer (which is HP). All fail to work. I'm trying to install Kali Linux but I have secure boot on ...
2
votes
0answers
21 views

USB Devices arn't working while Computer has Secure Boot enabled

I have a problem that seems to stem from activating Secure Boot. I have several customers with Dell desktops running Windows 10 Enterprise, that require Secure Boot to be enabled. When they ...
0
votes
1answer
111 views

UEFI secure boot prevents Windows 10 from starting after a resizing operation

I'm currently running "Windows 10" with "secure boot" ON and the OS is installed on a SSD drive. I resized the partitions of another drive and the operations went well according to the application I ...
-4
votes
3answers
2k views

Why is Secure Boot needed if there is already UEFI lock?

As far as I know, enabled Secure Boot feature in UEFI stores signed keys in NVRAM for OSs' kernel images to check it's corruptness on boot level. But nothing prevents me to boot the Setup Menu and ...
3
votes
0answers
3k views

How can I reset the Secure Boot keys on my Surface Pro 4?

I have a Surface Pro 4 and I guess my secure boot keys got messed up somehow. On Surface Pro 3 this fix is as easy as going into the UEFI and resetting to the default keys, but there's no such option ...
1
vote
0answers
2k views

Lenovo Ideapad 320-15IAP Secure Boot option not available in BIOS setup

I recently bought a Lenovo IdeaPad 320-15IAP (running Windows 10, with an Intel Pentium N4200 quad-core processor). Upon trying to install Ubuntu alongside my Windows partition, I kept getting a GRUB ...
0
votes
0answers
33 views

Isolate (secure) multiple boot images from harming my PC

Is it possible to protect my bare-metal from compromise, so that I can be fairly confident that (for example) restoring a VHDX system image every month keeps me clean? If so, how? I'm building a ...
0
votes
2answers
401 views

Secure boot from Nitrokey storage?

I was looking into buying a NitroKey. To my surprise I found the following statement in the brochure: Keep a Secure Operating System With you at all  Times Securely boot Windows or Linux ...
15
votes
1answer
71k views

How to disable Secure Boot on an Acer Aspire 3 laptop?

I have a new laptop: Acer Aspire 3, model A315-51-318M. I can enter BIOS by pressing F2 at laptop startup. On the Boot tab there is the Secure Boot enabled and I need to disable it. The problem is ...
1
vote
1answer
911 views

How do I boot Windows 10 without Secure Boot (but with UEFI enabled) if it was preinstalled with Secure Boot?

I'm trying to get Windows 10 to play nice in a dual-boot setup with Antergos as the other OS, but I don't want to have to toggle Secure Boot every time I want to switch OSes, and I'd much rather not ...
0
votes
0answers
30 views

Virus-safe first boot without CDROM

My previous PC has very strange symptoms and I've become very paranoid about malware. I've purchased all-new hardware to ensure I have a known-clean PC. I've spent a good bit of cash, and want peace ...
0
votes
1answer
598 views

Add Secure Boot Key to Live Distro

I wanted to ask if it was possible to load a key into my live persistence distro in order to get past Secure Boot without disabling? I imagine the answer is probably no, but I felt like asking anyhow.
1
vote
2answers
14k views

Remove ASUS ROG UEFI boot branding from laptop

I was asked to purchase a laptop with a 17" screen for a customer who owns a restaurant, so I bought an ASUS ROG G750JM. It's a very capable laptop and has nice features and build quality. However, ...
3
votes
0answers
2k views

Can Windows 10 on BitLocker dual-boot with Ubuntu on LUKS?

Good afternoon all, I would like to ask if having a dual boot system of Windows 10 and Ubuntu is possible with the features below activated. Secure boot UEFI TPM BitLocker Hyper-V with the security ...