Questions tagged [secure-boot]

For questions on “Secure Boot” and “Restricted Boot” the new bios feature that is in computers with the “Windows 8” logo.

Filter by
Sorted by
Tagged with
0
votes
0answers
14 views

How to Export and Manipulate Secure Boot Variables?

Out of curiosity I recently looked at the secure boot keys on a dual boot Windows/Ubuntu box via mokutil as follows: sudo mokutil --pk sudo mokutil --kek sudo mokutil --db sudo mokutil --dbx In doing ...
0
votes
0answers
35 views

How more secure is using Shim/PreLoader than having Secure Boot disabled?

I have my doubts on how secure is using Shim/PreLoader to allow booting Linux with Secure Boot enabled. My doubt comes from the fact that it seems to me Shim's MokManager and PreLoader's HashTool can ...
0
votes
0answers
33 views

Linux usb live cd not starting due to secure boot error

Greeting to you all, I'm having the following issue. I've received a notebook (acer Aspire 3 A315-23) and I'm trying to install a linux distribution on the system (namely a devuan beowulf). I created ...
0
votes
1answer
26 views

Unable to load signed modules on a signed custom kernel

I'm using Fedora 33. In order to boot a custom kernel, I had to generate an X.509 certificate to sign the kernel. This part works just fine. I can also sign a custom kernel module with the same ...
-1
votes
1answer
110 views

How to create an unattended Windows installation medium/iso/usb supporting Secure Boot and resulting in a UEFI-Windows installation?

Creating a medium from which a system can boot while Secure Boot remains active, is possible with the default Windows iso from Media Creator, but what about edited images? Creating a unattended ...
0
votes
0answers
27 views

Two Drives Dual Boot with Secure Boot

I'm going to build a PC with two SSD’s. I want to have Windows on one SSD and Ubuntu on the other. Why? This pc is going to be for educational and private use. I'm planning to use Ubuntu for school ...
1
vote
1answer
60 views

BitLocker not accepting correct recovery keys

As a test before upgrading to Windows 10 20H2, I disabled Secure Boot and rebooted. I was shown a BitLocker Recovery screen and prompted for the recovery keys. I tried both keys I was given (there are ...
0
votes
1answer
68 views

Start BIOS settings on Samsung 700T //BUILD when secure boot violation is shown

I found the Samsung 700T slate that we got at the Microsoft Build conference. Unfortunately, upon switching it on, it shows the error message 'Secure Boot Violation'. I don't have the docking station ...
2
votes
2answers
335 views

Black BIOS screen after enabling Secure Boot?

I am not sure if I have understood the underlying concept clearly. I have MSI B450M Pro board and MSI GT710 GPU based graphics card. Windows 10 installed in UEFI Boot mode on an SSD. I thought to ...
1
vote
0answers
48 views

Can I use my own driver on Windows without having to ask MS for permission while keeping Secure Boot on?

As per the subject : I want to write my own kernel mode driver I want to be able to use it with Secure Boot on I don't want to ask for permission to use it (no WHQL testing or attestation signing) ...
1
vote
1answer
128 views

What does “factory default” mean regarding UEFI keys stored in a TPM, in a PC built from scratch?

I built a PC from scratch a while ago, and after learning the recommended requirements for UEFI Secure Boot and Microsoft's Bitlocker, I installed an Infineon TPM in my motherboard. My understanding ...
0
votes
0answers
34 views

Wiped hard disk completely removing all partitions - now computer won't start from Ubuntu live stick or Windows ISO

Today I wiped the hard disk of an Asus Windows computer from 2015. It has Secure Boot. I used an Ubuntu Live stick, opened the Disks app and removed all partitions, then used Shred to wipe the entire ...
1
vote
0answers
19 views

Unable to easily switch os after dual booting

I got a new laptop ((Asus vivobook 14)https://www.flipkart.com/asus-vivobook-14-ryzen-5-hexa-core-4500u-8-gb-512-gb-ssd-windows-10-home-m413ia-ek582t-thin-light-laptop/p/itm8d1c44556be49?pid=...
0
votes
1answer
25 views

Windows cannnot be installed after using Diskpart to convert to MBR

ok so long story short simply trying to reinstall Windows 10 on a disk in a dual boot setup (Linux is on a physically separate drive and launches without issue). First issue was when using Rufus USB ...
0
votes
0answers
112 views

What happens to the boot process if I clear secure boot keys?

Trying to disable Secure boot so that I am able to boot from and install Windows 10 from an external USB. It seems I may need to first clear my secure boot keys. What happens if I do so? Will I still ...
1
vote
2answers
145 views

When does Bitlocker unlock the drive?

I want to set up a Windows 10 Pro + Debian dual-boot configuration on my TPM-enabled laptop. The thing is that I want both Windows and Linux partitions to be fully encrypted by Bitlocker. I found a ...
0
votes
0answers
82 views

Signature verification fails for secure boot kernel

I'm trying to setup secure boot with using custom keys exclusively following the guide from rodsbooks. I created and enrolled keys for db, KEK and PK and signed grub and the kernel image accordingly (...
0
votes
0answers
100 views

How can BitLocker be configured to not require additional authentication if Secure Boot is disabled

I have a laptop with Windows 10 1703 installed, that I am trying to determine how BitLocker has been configured on. In the BIOS the laptop has Discrete TPM selected but also has the option of Intel ...
1
vote
1answer
613 views

How to Secure Boot EFI images signed with an installed custom key?

I've been trying to configure UEFI Secure Boot to use my own keys for a dual boot (Windows 10 + Linux) system. This system is a Dell XPS 8700 (circa 2015) with an American Megatrends firmware/BIOS, ...
0
votes
0answers
881 views

My options in BIOS are greyed out in MSI laptop

I've pretty entry level laptop -- MSI GF63-9RCX with i5-9300H and GTX 1050Ti I've set the admin and user password both in BIOS settings several months ago and I don't change the settings much. Today ...
0
votes
1answer
31 views

If I get a laptop with Windows 10, is there anything I should know about installing Linux besides disabling Secure Boot under Windows?

If I get a laptop with Windows 10 and Secure Boot, and I disable Secure Boot, is there anything I should know about installing Linux besides the process used with BIOS? I am expecting a laptop with ...
1
vote
1answer
507 views

Undo 'sbsign' on executable, remove an attached image signature

I've signed an EFI image using the sbsign utility from the sbsigntools package, for example: # sbsign --key db.key --cert db.pem \ --output /boot/efi/EFI/Grub/grubx64.efi /boot/efi/EFI/Grub/...
0
votes
0answers
1k views

How to disable secure boot on HP laptop?

I have an HP laptop (HP Compaq 8200). I want to disable secure boot. However, I cannot find the "Secure Boot Configuration" in setup. I referenced the following youtube video. https://www.youtube.com/...
0
votes
0answers
157 views

Why UEFI bootable disks take the first boot priority in UEFI BIOS?

I see several times that in Mainboards with UEFI BIOS every bootable media with UEFI option automatically takes the first boot priority, I want to know what's the reason for this behavior and how to ...
2
votes
0answers
151 views

Time Authenticated EFI Variable

I'm setting up custom secure boot keys on an Asus Z87I-Deluxe motherboard. On other computers I've setup with secure boot, I've been able to either write the PK, KEK, and DB keys into the EFI ...
0
votes
2answers
50 views

Will disabled secure boot put at risk my pc?

I'm having Win10 and Linux on dual boot on my PC. I'm using Linux all the time but now I want to play something that runs only on Win10. The secure boot on my PC is disabled. On Windows I've got only ...
1
vote
0answers
166 views

How to disable HDD lock in BIOS?

I have an Acer Spin 3 laptop with Secure Boot. I was messing around in BIOS and now the laptop asks for a HDD password upon boot. It is annoying, how do I disable it again? The BIOS is Insyde H20 rev ...
0
votes
2answers
2k views

Windows 10 bios how to enable booting from USB device?

does someone know how to solve the following problem? I like to boot from a bootable USB device on Windows 10 When clicking on advanced restart options and selecting boot from USB, it says that the ...
0
votes
0answers
214 views

Unable to disable Secure Boot in ASUS EUFI bios

I've just bought a new windows 10 machine from Scan, and I need to disable secure boot to get various Ubuntu things working. However, the secure boot is enabled in the bios and greyed out so I can't ...
0
votes
0answers
938 views

Moving a Windows 10 SSD to external enclosure for dual boot

My laptop came with Windows 10 pre-installed using UEFI and Secure Boot on an SSD, the Windows drive encrypted with Bitlocker. I pulled that SSD and installed Ubuntu on a new SSD. I bought an ...
1
vote
0answers
326 views

Kali Linux Boot Image Authentication

I recently discovered Kali Linux and decided to make a live USB so that I could boot it on any available (64-bit) machine. In the process, I also discovered the common "Selected boot image did not ...
2
votes
0answers
155 views

secureboot with parrotOS - not able to sign custom kernel

I've installed Parrot OS on my surface and built the custom kernel for the surface from jakeday repo. I'm currently trying to sign my custom kernel that I can turn on secureboot again. I've followed ...
0
votes
0answers
78 views

Laptop doesn't boot after authorizing a new key in secure boot

I have an ASUS ROG Strix laptop with double boot (Windows 10 and Ubuntu 19.10) on it. After updating Ubuntu, secure boot started complaining about unauthorized software, so I tried to manually ...
1
vote
3answers
3k views

LG Gram install Ubuntu with USB

I'm trying to install Ubuntu 18 LTS on an LG Gram 17 laptop. I created a bootable USB with the Ubuntu 18 image. I disabled already secure boot and also removed signatures (I think it is called setup ...
16
votes
1answer
3k views

“update-secureboot-policy --enroll-key” running on every new startup eating resources

update-secureboot-policy --enroll-key seems to run whenever I start my computer and never stops running unless I manually kill the process. It makes my computer hot and uses lots of system resources. ...
3
votes
1answer
493 views

Windows Defender Application Control prevents Windows to boot after second restart (signed policy)

Hy everyone! I want to lock down some Windows 10 Terminals so that they can only run approved Software but keep the possibility to update this software. My plan was to make use of the new Feature of ...
0
votes
1answer
274 views

How to install Kali Linux with Linux Foundation PreLoader?

I installed the latest Kali Linux on my notebook Lenovo X390 Yoga. I have dualboot with default installed Windows 10 x64. I need use Bitlocker for Windows 10 partition (I use it without TPM, only with ...
1
vote
1answer
84 views

Secure Boot not failing

I've got a Windows 10 OS and I need to test out if Secure Boot works or not and the easiest way to test that I thought would be to overwrite/remove the digital signatures from EFI binaries in the ...
0
votes
1answer
274 views

Ubuntu x Nvidia drivers and secure boot - Failed to enroll new keys

I'm trying to install Nvidia drivers on my Ubuntu install that I'm running on a drive other than my main Windows one and as far as I know, to install them on Ubuntu with secure boot enabled you need ...
1
vote
0answers
151 views

HP Wifi not working in Ubuntu 19.04 in Secure Boot

Output of lspci: 00:00.0 Host bridge: Intel Corporation Xeon E3-1200 v6/7th Gen Core Processor Host Bridge/DRAM Registers (rev 08) 00:02.0 VGA compatible controller: Intel Corporation UHD Graphics 620 ...
0
votes
0answers
39 views

Is there a way to disable Secure Boot startup message?

So yesterday I disabled Secure Boot in order to run an undervolt software. I'm running Elementary OS on an Asus Q325UA laptop and when I reboot/cold start the system I get this message before the grub ...
2
votes
2answers
959 views

How to check if Mac and Linux have secure boot enabled and disabled via command line?

I am writing a program in Net Core and it seems like getting this information via the Terminal is the only way. So how to check if Mac and Linux have secure boot enabled and disabled via command line?...
0
votes
0answers
1k views

How to run virtual box with Secure boot disabled?

I have a Debian 9 system with UEFI enabled. When I try to load a virtualbox instance it gives me the following error: Kernel driver not installed (rc=-1908) The VirtualBox Linux kernel driver is ...
0
votes
1answer
853 views

Secure Boot - Custom signed bootloader

Through Secure Boot on Windows 10, I am trying to make it so that only a bootloader signed with my private key can boot on a machine. This means that even if someone else comes along with a Microsoft ...
0
votes
2answers
227 views

Windows - Converting OpenSSL generated certificates

I'm following a guide on how to enroll your own Secure Boot keys on Linux but my platform that I'm using is Windows and I'm currently stuck trying to convert the OpenSSL generated certificates into a ...
2
votes
1answer
5k views

How to boot POP! OS in UEFI mode without disabling secure boot on my computer?

I installed POP! OS on my laptop a few days ago but secure boot wont let me boot it. I cant disable secure boot or UEFI mode because after installing a bios update my BIOS setup menu wont open anymore....
1
vote
0answers
99 views

Is it safe to keep the default MOK.priv on after a fresh install of Ubuntu 18.04.2 with secure boot enabled?

I'm new to secure boot strategy. I found there is a default paris, MOK.der and MOK.priv, inside shim folder after a fresh installation of Ubuntu 18.04.2. If I understand correctly, they're there to ...
0
votes
0answers
313 views

Re-enable Secure Boot after Installing Graphics Card

After having trouble with no image after installing a graphics card, I disabled Secure Boot (Still UEFI, not Legacy). Everything is now working, and I would like to re-enable Secure Boot. Is there a ...
1
vote
0answers
20 views

Rollback protection for network booting

I am interested in secure network booting. UEFI Secure Boot, combined with a signing key I control, ensures that no unauthorized code can run. However, it doesn’t provide rollback protection: an ...
0
votes
0answers
171 views

Linux kernel authentication

For the problem that I am facing is actually that I am working on a project which is about checking the integrity of the kernel image "vmlinuz" that is in the hard disk! To do so, am trying to add a ...