Questions tagged [secure-boot]

For questions on “Secure Boot” and “Restricted Boot” the new bios feature that is in computers with the “Windows 8” logo.

Filter by
Sorted by
Tagged with
1 vote
0 answers
17 views

Is it possible to allow only a certain secure USB boot media to boot an UEFI system?

I want to restrict all USB boot media from my system, except for a certain USB boot drive that I declare secure via a certain key. Is this possible using UEFI/Secure Boot/TPM? Maybe via TPM? TPM gets ...
user avatar
  • 4,698
0 votes
0 answers
11 views

Error after enabling secure boot

I am using msi motherboard Having windows 11 After i went to bios to enable secure boot for the valorant's requirement. The I saved and exit the bios setting, then the computer starting restarting and ...
user avatar
0 votes
2 answers
43 views

How to disable secure boot without entering UEFI?

My problem is secure boot. I am trying to boot into Linux using a USB but most distros won't work with secure boot, I already know secure boot can be disabled in the UEFI settings, and I know how to ...
user avatar
0 votes
0 answers
21 views

Custom secure boot with .WIM file

I am trying to take ownership of the secure boot process of a Windows platform. I have followed some online resources like: https://linuskarlsson.se/blog/secure-boot-when-dual-booting-arch-linux-and-...
user avatar
0 votes
1 answer
33 views

Trying to Disable Secure Boot

I am trying to disable Secure Boot in my Linux Mint OS, My laptop is Acer Aspire 5 the problem is I can use the arrow keys on all BIOS menu except Security and Boot when I navigate to Security or Boot ...
user avatar
2 votes
0 answers
238 views

Kernel lockdown disallows loading of an self-compiled and self-signed in-tree kernel module

I'm having difficulties loading a kernel module that I myself compiled and signed for Secure Boot. The module in question is ec_sys, located within drivers/acpi directory of the kernel tree. I'm using ...
user avatar
  • 121
0 votes
1 answer
33 views

Is there anyway to ignore the CMOS Check during Startup? [closed]

I have broken my CMOS battery seat while replacing the battery, and I want to my pc to Ignore Cmos check during startup. I have already turned on fast boot, but everytime I turn off the switch, fast ...
user avatar
1 vote
0 answers
29 views

USB Windows 11 for TPM/SB created on non-TPM/SB system

What option is needed to install Windows 11 to a live persistent USB on a non-TPM/Secure Boot system, if the USB will be used on a TPM/Secure Boot system. I assume it is the Standard with TPM & ...
user avatar
0 votes
0 answers
166 views

Unable to boot from USB and cannot change boot priority order

I am trying to install Ubuntu on a separate partition in windows 11 on my Lenovo Thinkbook 14 G2 ITL. I have made a bootable USB with rufus, however, I am unable to boot from the USB. I get the ...
user avatar
  • 1
0 votes
1 answer
72 views

machine owner key details and predeployment options

currently I am trying to get into the mechanisms behind secure boot, shim and machine owner keys. What I observed is the fact, that the key, that I've imported via mokutil is permanent even if: the ...
user avatar
0 votes
0 answers
23 views

Is it possible to customize an Ubuntu or Debian live system while keeping the secure boot (microsoft keys) compatibility?

I would like to create a customized live system of either ubuntu or debian while keeping it compatible with the microsoft secure-boot keys, allowing computers to boot this live-system without fiddling ...
user avatar
0 votes
1 answer
296 views

Unable to access bios after enabling secure boot (no screen output)

I disabled CSM and enabled secure boot on my Gigabyte Aorus b550 AC with a evga GTX 1080. Every time I boot up my machine, it boots straight into windows (dual-boot system with ReFind as bootloader) ...
user avatar
  • 404
0 votes
0 answers
211 views

Cause for EFI Signature Change on PopOS Linux

I have a system with popos 21.10 installed. I had added the vmlinuz.efi signature to the secure boot list. Today I tried to boot the system after a week idle and it gave me an error saying the ...
user avatar
0 votes
0 answers
40 views

I have an HP pavillion 1178 convertible and I was messing with secure boot and now my load HP factory default keys button is greyed out

What should I do? I was trying to install mint and it said to disable secure boot, it was greyed out so I cleared the keys and then the load hp factory defaults keys option got grayed out. _
user avatar
2 votes
1 answer
324 views

Secure Boot support on a custom-made PC with Windows 10 Pro

As part of my Windows 11 upgrade activities, MS says my PC does not support Secure Boot. Something also confirmed by msinfo32.exe: msinfo32 snapshot Strangely enough, when I entered BIOS it states ...
user avatar
1 vote
1 answer
156 views

Secure boot with unified kernel image on openSuSE?

I am trying to install OpenSuSE Tumbleweed on a system with encrypted root partition. At first i tried to set up GRUB, but it refused to recognize a LUKS-encrypted partition. Currently I am trying to ...
user avatar
  • 8,059
0 votes
1 answer
648 views

How do I sign kernel modules in Linux to successfully install NVIDIA drivers using dkms?

I use Kubuntu 18.04 and I'm trying to install NVIDIA driver using the run file provided by NVIDIA itself instead of using package managers. I first Installed the following packages: $ sudo nano /etc/...
user avatar
  • 105
1 vote
1 answer
1k views

PC won't boot or display after activating Secure Boot

Specs: CPU: AMD Ryzen 9 5900X, Motherboard: Gigabyte Aorus X570 Elite Wifi, RAM: 2x16GB DDR4 Trident G-Skill Neo, GPU: Asus RTX 3080, PSU: Gamemax 850W, OS: Windows 11 So I've updated to Windows 11, ...
user avatar
0 votes
2 answers
898 views

[Solved]How can I enable secure boot on my laptop

I have an Asus ROG strix g513ih laptop but in BIOS menu I can't select secure boot. It's greyed out
user avatar
  • 11
2 votes
2 answers
551 views

Secure boot - How to append custom certificate to db if BIOS has no such option?

I have HP 245G7 notebook. The BIOS is very basic and there does not seem to be any option from within to append my own custom certificate to db database of secure boot. If there is an option in this ...
user avatar
  • 189
0 votes
1 answer
53 views

Can disabling secure boot affect Windows?

Can disabling secure boot affect Windows OS? I want to disable it to install Linux. I use Windows 10 as my main OS now so all my data would be potentially lost if there is some problem with Windows ...
user avatar
  • 3
0 votes
0 answers
44 views

Will Windows 11 require secure boot is enabled, or just requires secure boot capable UEFI motherboard? [duplicate]

I am planning to fresh install Windows 11 to a ASUS Prime Z590 motherboard with 11th generation intel CPU My question, will Windows 11 require secure boot is enabled, or just requires secure boot ...
user avatar
1 vote
2 answers
2k views

turning on secure boot gives only a black screen

I have installed Windows 10 with secure boot off and now I want to install Windows 11. So I turned secure boot back on but, only a black screen shows after computer boots. What I see - I can see POST ...
user avatar
0 votes
2 answers
254 views

How can I get secure boot working after manually creating EFI partition with diskpart?

motherboard: ASUS ROG STRIX X570-E GAMING Rev X.0x I successfully enabled secure boot and installed Windows 11. Because of issues I decided to go back to Windows 10 and experiment on another machine. ...
user avatar
0 votes
1 answer
935 views

Secure Boot is Unsupported while Bios Mode is set to UEFI on Lenovo T520 Laptop on System Information

My Lenovo T520 laptop bios is set to UEFI and currently running Windows 10. Under System Information I can see UEFI for Bios Mode but Secure Boot is shown as unsupported. Does UEFI enable mean secure ...
user avatar
  • 117
0 votes
2 answers
1k views

No signal on monitor after secure boot

I want to install windows 11 So i open the bios and enable tpm (intel ppm) and then disable csm and enable secure boot after use default key After restart i got blank screen no signal And no bios I ...
user avatar
  • 1
0 votes
1 answer
1k views

PC won't boot when having the GPU connected after enabling Secure Boot

I wanted to upgrade to Windows 11 on my machine which worked perfectly up until now, so I checked the requirements and saw that I needed to enable Secure Boot in order to do so. Since I have a ...
user avatar
  • 91
0 votes
0 answers
186 views

Can't see HDD after enabling Secure Boot for Windows 11

Windows 11 is coming out, and according to the diagnostic tool I need to enable Secure Boot and TPM in order to upgrade. The TPM part was easy enough, however, the Secure Boot doesn't really work. I ...
user avatar
1 vote
2 answers
239 views

Where is the data used in secure boot process stored?

I am spent a lot of time researching and reading about this topic but I am now very confused. I have read that computer manufacturers include some Microsoft keys. For example, Microsoft Corporation ...
user avatar
1 vote
1 answer
36 views

Do x64 machines differ in their secure boot implementations and ROM certificates?

I'm trying to understand secure boot and the key requirements in ROM firmware for x86 machines I'm coming from this definition of secure boot: The PCs are sold with certain certificates embedded in ...
user avatar
0 votes
0 answers
2k views

PC won't give output after enabling secure boot in bios

Specs: Cpu: Core i3 9th gen Mb: Gigabyte h310m S2 2.0 Ram: 1x 8gb DDR4 hyperx fury stick Gpu: Gtx 750 Ti ASUS OS: win 11 beta PSU: Salpido Atx-500w Switching Power Supply some context I wanted to ...
user avatar
0 votes
1 answer
44 views

Windows 8.1 to Windows 10 and back, playing with secure boot

On a Samsung NP900X3C, Windows 8.1 is installed. I would like to test Windows 10 on this machine and for that, I purchased a separate disk so that if it fails, I can just revert to the previous ...
user avatar
0 votes
1 answer
28 views

Install Debian Linux on a Fujitsu Esprimo D7010

After installing Debian Linux on a Fujitsu Esprimo D7010, there is no corresponding boot entry visible. The new Debian installation cannot be booted. It appears the problem is related to secure boot. ...
user avatar
1 vote
1 answer
209 views

Every time I eneble secure boot for windows 11 my pc doesnt boot and I have to reset bios settings by removing battary. Why is that?

So basically I want to update to windows 11 and I have to eneble 2 security settings TPM and secure boot I succesfully enebled Tpm but each time I try to do the same with secure boot my screen, ...
user avatar
  • 11
1 vote
1 answer
293 views

When using Secure Boot can other drives still be MBR?

I recently read: If Secure Boot is enabled in BIOS, then your System will need your hard drive to be GPT … But what about the other drives? Can they still be MBR?
user avatar
0 votes
0 answers
46 views

Run systemd script with Secure Boot on

I have a Microsoft Surface Book with custom kernel (surface-kernel) as it provides all I need to smoothly use it with Linux. The one thing that is still not on it is the dgpu integration. Therefore I ...
user avatar
  • 1
1 vote
0 answers
218 views

Windows 11 no sound in secure boot

I have Windows 11, but I have no sound in secure boot. WHen it's enabled, I went to Device Manager, and all the sound drivers said: "Windows cannot verify the digital signature for this device.&...
user avatar
1 vote
1 answer
3k views

How to install a windows guest in qemu/kvm with secure boot enabled

My host machine is archlinux and I am using virt-manager as a frontend of qemu. I just have no idea about how to enabling secure boot for windows qemu guests. I have tried using the OVMF_CODE.secboot....
user avatar
  • 21
1 vote
1 answer
832 views

Cannot boot to Windows with Secure Boot enabled

I have an Aorus x470 Gaming Ultra motherboard with a Ryzen 7 2700 CPU and an Evo 970 NVME with Windows 10. Windows was installed as UEFI without problem about 2 years ago. To get my PC ready for ...
user avatar
0 votes
0 answers
300 views

Cannot access the BIOS while CSM is disabled

I've disabled CSM in the BIOS of the DS3H B450 motherboard, because it is required for secure boot (which in turn is required to update to Windows 11) but doing so has locked me out of the rest of the ...
user avatar
0 votes
0 answers
476 views

Can't find secure boot option on Aorus 15G XC

I am trying to boot from a USB flash drive but I can't find secure boot in my BIOS to disable it. This is the error I get when I try to boot from the flash drive. Main: Advanced: Chipset: Security: ...
user avatar
1 vote
5 answers
26k views

Computer doesn't POST after enabling Secure Boot

I wanted to enable Secure Boot to check if my PC Is compatible with Windows 11, and in order to do that, the UEFI firmware asked me to choose a Protocol/Publisher/Platform key (I don't remember ...
user avatar
0 votes
1 answer
1k views

Windows fails to boot after deploying a signed WDAC policy

I am trying to deploy a signed WDAC policy on a windows machine. On the first boot after deployment everything is fine but on the next boot I am sent to the UEFI firmware configuration screen I have ...
user avatar
0 votes
1 answer
553 views

Will TPM and Secure boot complicate hardware upgrades and changes? [closed]

Along with the new requirements of Windows 11 to have TPM and Secure Boot https://www.microsoft.com/en-us/windows/windows-11-specifications, as well as the complications highlighted from this article ...
user avatar
0 votes
1 answer
481 views

Does dkms in Ubuntu 18.04 and later sign modules/drivers automatically?

According to DisplayLink website: Since Ubuntu 18.04 signing modules is handled automatically by dkms package, remember to reboot to finalize However when secure boot was enabled in order for the ...
user avatar
  • 383
2 votes
0 answers
1k views

How to disable Windows Defender Application Control once and for all?

(Please read before marking this as a duplicate, thanks.) Description I am developing my own Win32 x86_64 application which interferes heavily with the system, is able to communicate with drivers ...
user avatar
0 votes
0 answers
160 views

How more secure is using Shim/PreLoader than having Secure Boot disabled?

I have my doubts on how secure is using Shim/PreLoader to allow booting Linux with Secure Boot enabled. My doubt comes from the fact that it seems to me Shim's MokManager and PreLoader's HashTool can ...
user avatar
0 votes
0 answers
127 views

Linux usb live cd not starting due to secure boot error

Greeting to you all, I'm having the following issue. I've received a notebook (acer Aspire 3 A315-23) and I'm trying to install a linux distribution on the system (namely a devuan beowulf). I created ...
user avatar
0 votes
1 answer
44 views

Unable to load signed modules on a signed custom kernel

I'm using Fedora 33. In order to boot a custom kernel, I had to generate an X.509 certificate to sign the kernel. This part works just fine. I can also sign a custom kernel module with the same ...
user avatar
1 vote
2 answers
868 views

How to create an unattended Windows installation medium/iso/usb supporting Secure Boot and resulting in a UEFI-Windows installation?

Creating a medium from which a system can boot while Secure Boot remains active, is possible with the default Windows iso from Media Creator, but what about edited images? Creating a unattended ...
user avatar
  • 508