Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [secure-boot]

For questions on “Secure Boot” and “Restricted Boot” the new bios feature that is in computers with the “Windows 8” logo.

0
votes
1answer
28 views

Run script after apt-get updates grub

I use Debian 9 on an EFI system with a custom grub image and configuration file in order to make Secure Boot work. However, whenever apt-get updates Grub my customizations get overriden. What is the ...
0
votes
0answers
37 views

Restore Windows 10 boot after disabling secure boot

I have a machine with Windows 10 installed by default. I disabled Secure Boot and installed linux mint without any problems but then windows won't boot and it's asking me for a key that I don't have. ...
0
votes
0answers
18 views

OTA updates with embedded linux and TPM [closed]

I am quite new to cryptography and security related stuff. We are working on a new project with Embedded Linux on the BeagleBone Black. We wish to implement a full root of trust during boot up using ...
0
votes
1answer
65 views

UEFI secure boot prevents Windows 10 from starting after a resizing operation

I'm currently running "Windows 10" with "secure boot" ON and the OS is installed on a SSD drive. I resized the partitions of another drive and the operations went well according to the application I ...
-4
votes
3answers
90 views

Why is Secure Boot needed if there is already UEFI lock?

As far as I know, enabled Secure Boot feature in UEFI stores signed keys in NVRAM for OSs' kernel images to check it's corruptness on boot level. But nothing prevents me to boot the Setup Menu and ...
3
votes
0answers
500 views

How can I reset the Secure Boot keys on my Surface Pro 4?

I have a Surface Pro 4 and I guess my secure boot keys got messed up somehow. On Surface Pro 3 this fix is as easy as going into the UEFI and resetting to the default keys, but there's no such option ...
1
vote
0answers
571 views

Lenovo Ideapad 320-15IAP Secure Boot option not available in BIOS setup

I recently bought a Lenovo IdeaPad 320-15IAP (running Windows 10, with an Intel Pentium N4200 quad-core processor). Upon trying to install Ubuntu alongside my Windows partition, I kept getting a GRUB ...
0
votes
0answers
24 views

Isolate (secure) multiple boot images from harming my PC

Is it possible to protect my bare-metal from compromise, so that I can be fairly confident that (for example) restoring a VHDX system image every month keeps me clean? If so, how? I'm building a ...
0
votes
1answer
80 views

Secure boot from Nitrokey storage?

I was looking into buying a NitroKey. To my surprise I found the following statement in the brochure: Keep a Secure Operating System With you at all  Times Securely boot Windows or Linux ...
1
vote
1answer
5k views

How to disable Secure Boot on an Acer Aspire 3 laptop?

I have a new laptop: Acer Aspire 3, model A315-51-318M. I can enter BIOS by pressing F2 at laptop startup. On the Boot tab there is the Secure Boot enabled and I need to disable it. The problem is ...
1
vote
1answer
173 views

How do I boot Windows 10 without Secure Boot (but with UEFI enabled) if it was preinstalled with Secure Boot?

I'm trying to get Windows 10 to play nice in a dual-boot setup with Antergos as the other OS, but I don't want to have to toggle Secure Boot every time I want to switch OSes, and I'd much rather not ...
0
votes
0answers
28 views

Virus-safe first boot without CDROM

My previous PC has very strange symptoms and I've become very paranoid about malware. I've purchased all-new hardware to ensure I have a known-clean PC. I've spent a good bit of cash, and want peace ...
0
votes
0answers
27 views

What prevents the operating system from modifying the key database in UEFI?

UEFI's secure boot design has a key database that gets stored in the same flash storage that UEFI itself resides in. In a lot of devices, the operating system can write to this chip to update the ...
0
votes
1answer
223 views

Add Secure Boot Key to Live Distro

I wanted to ask if it was possible to load a key into my live persistence distro in order to get past Secure Boot without disabling? I imagine the answer is probably no, but I felt like asking anyhow.
0
votes
0answers
289 views

Lenovo T430 Boot Issue

I have a major problem with my lenovo-t430. I have partitioned my disk, and installed a dual boot between linux and windows. It has been working fine for the past few weeks. I was in BIOS to change ...
1
vote
1answer
2k views

Remove ASUS ROG UEFI boot branding from laptop

I was asked to purchase a laptop with a 17" screen for a customer who owns a restaurant, so I bought an ASUS ROG G750JM. It's a very capable laptop and has nice features and build quality. However, ...
0
votes
0answers
23 views

Installing Linux Distro makes Windows 10 PIN login not work

I installed Manjaro Linux on my PC along side Windows 10. I had to disable secure boot to get the install to work, but now PIN login will not work on Windows. Is there a work around for this?
0
votes
0answers
25 views

On User Space sign verification for Secure Boot

I have an x86 UEFI enabled machine. this has a certified shim, grub etc. Using secure boot feature and a custom kernel, I created my public/private key pair signed the kernel and updated MOKDB to ...
2
votes
0answers
1k views

Can Windows 10 on BitLocker dual-boot with Ubuntu on LUKS?

Good afternoon all, I would like to ask if having a dual boot system of Windows 10 and Ubuntu is possible with the features below activated. Secure boot UEFI TPM BitLocker Hyper-V with the security ...
0
votes
0answers
111 views

Samsung series 3 no boot options

I had ubuntu running but wanted to switch to windows so tried to install it. But in the boot menu after installing its only showing ubuntu no windows setup option (i formated my drive using windows ...
0
votes
0answers
88 views

Lenovo ideapad w/ Phoenix SecureCore BIOS; bootable firmware flasher?

My Lenovo ideapad 500S running Windows 10, which I've owned a little over a year, encountered a serious problem, which began with an occasional BSOD, which, on first impressions with the OS, seemed ...
0
votes
2answers
251 views

How to get a pre-release linux kernel to work with SecureBoot (Fedora 26)

I'm running Fedora 26, but to get suspend and resume working, I need to use a Rawhide kernel (4.13.rc-1 or later) (See kernel issue). I've successfully installed the Rawhide kernel (4.13.rc-4) ...
1
vote
1answer
67 views

Getting *buntu 17.04 (or others) to respect my choices when installing to a external drive UEFI/secureboot system

I'm trying to install Lubuntu or Kubuntu 17.04 to an external drive. I'm using a IODD 2451 booting an ISO, and installing to an emulated phyical drive backed by a VHD. For all intents and purposes - I'...
0
votes
1answer
108 views

bypassing secure boot on lenovo thinkpad s1

I have a second hand Lenovo yoga s1. I'm currently dual booting windows 10 and ubuntu on to but I want to run Kali on it instead of Ubuntu. the only problem is that kali doesn't have secure boot and ...
0
votes
2answers
2k views

Unable to disable Secure Boot/UEFI

I'm attempting to re-purpose and old Toshiba Satellite laptop for use as a server. I have created an Ubuntu Server installation USB, and tested it successfully on my personal laptop. I have booted in ...
1
vote
0answers
731 views

Installing a Linux kernel in the UEFI BIOS of the Xiaomi Mi Air 13

My post is about the UEFI BIOS of the Xiaomi Mi Air 13. It is a very interesting laptop, light and tough. His BIOS seems an InsydeH20 One, and I can't clear Secure Boot keys. I'm in the process to ...
0
votes
1answer
83 views

can not boot when enable secure boot

windows 8 enterprise x64. Core i3-2100. GA-H61M-DS2. it works well when I enabled fast boot and secure boot. but when I select load default in uefi bios settings and reboot. the computer can not boot. ...
0
votes
1answer
481 views

My “Acer Aspire ES 15” laptop with Windows 10 pre-installed, does not let me turn off secure boot

I have installed Linux Mint 18 on my Acer Aspire ES 15 laptop which has Windows 10 pre-installed on it. But, I am not able to boot into the Linux OS as the machine is always booting into Windows 10 ...
1
vote
0answers
112 views

Windows 10 Education Failing to Boot

I have been in a bit of a loop for a while now, so hear me out please. I have an HP Probook 4540s that has been with me for about 5 years now. I have an original Windows 10 Education installed on it. ...
0
votes
1answer
3k views

Cant boot to EFI shell Asus Motherboard

I have an Asus Maximus VIII Impact MotherBoard I just purchased an Intel RS3UC080 RAID card, and notice the firmware was very out of date. I figured I would update it before using the card. To do ...
1
vote
2answers
2k views

How to save secure boot keys?

I'm running Windows 7, and my motherboard is Asus p8z77-v. I wan't to dual boot ubuntu, but the live usb doesn't load. I did some research and found I need to disable secure boot. In order to do ...
1
vote
3answers
2k views

After disabling Secure Boot in Lenovo Yoga 14 I cannot boot into Windows 10

To test a bootable USB flash drive, I disabled Secure Boot on my Lenovo Yoga 14. When I want to restore my BIOS setting back, I found every time I did it and restarted the PC, the setting with ...
0
votes
2answers
6k views

Does Enabling Bitlocker require SecureBoot?

I want to enable Bitlocker on my Windows 10 computer, but I don't want to enable Secure Boot, since it interferes with other partitions. If I enable Bitlocker without a TPM (enter password at boot), ...
0
votes
0answers
500 views

Will enabling proprietary drivers on 17.04 install affect secureboot and bitlocker partitions?

I originally posted this on AskUbuntu but it was suggested to me in the comments that this might be a better place. I have a Windows 10 Bitlocker partition that if I understand correctly requires ...
2
votes
0answers
368 views

VirtualBox 5.1 installation issues Ubuntu 16.04

I am using new to Vagrant. And stuck with VirtualBox installation with Ubuntu 16.04. Executing vagrant up command, gives the following error The vboxdrv kernel module is not loaded. Either there is ...
0
votes
1answer
2k views

How to enable Secure Boot in a guest VM using VMWare Workstation?

For testing purposes I need to install Windows 10 with the "Secure boot" feature enabled. I do not have any hardware that supports it. Thus I was hoping to emulate it in a virtual machine. Is there a ...
1
vote
1answer
1k views

Cannot boot Xubuntu after disabling secure boot in UEFI bios. Cannot install nVidia drivers

Motherboard: Asus Z170i Pro Gaming (UEFI BIOS ver. 3016) Graphics card: nVidia GTX 1060 OS: Xubuntu 16.04.1 LTS 64bit I installed the OS using the basic boot option (legacy MBR), the installation ...
2
votes
1answer
798 views

Why isn't grub loading in UEFI?

I'm stuck trying to get Linux to boot on my PCs. I've been trying a lot with OpenSUSE and Ubuntu on my different laptops but none of them work. Regardless how many times I run update-grub, it never ...
0
votes
1answer
334 views

List keys in DB, DBX, KEK and PK databases

I'm using EFI with Ubuntu and it's works ok. But I want to list what keys are in DB, DBX, KEK and PK databases? What command I have to use?
0
votes
1answer
89 views

Where to get Windows UEFI Secure Boot public keys (DB etc.) from

I have an old laptop which was manufactured before Windows 8. It didn't have MS keys inside. I successfully generated keys for Linux and enabled secure boot in BIOS but, as expected, I cannot boot ...
0
votes
1answer
465 views

Does rEFInd support USB-OTG as boot device?

I'm having a hard time at installing Ubuntu on my Acer Iconia W10 Tablet. I modified boot priority to: USB Stick/HDD USB CD/DVD reader The so-called "Windows Boot Manager" (as unclear as this) Even ...
11
votes
1answer
996 views

How do I allow cross-signed kernel drivers in Windows 10 version 1607 with secure boot enabled?

Windows 10 Version 1607 (aka Anniversary Update) is now enforcing the tightened kernel driver certification which was already announced 2015 as a requirement for Windows 10. The new rule is that all ...
3
votes
0answers
129 views

Secure Golden Boot Key - am I vulnerable?

I'm an Arch Linux user. I'd like to protect myself from the live-usb hack by using SecureBoot: Create my own Platform Key and sign the kernel with my own key. Delete the Microsoft PKs Enable ...
1
vote
1answer
941 views

vhdx image for Windows 10 (with UEFI partition) is not booting if secure boot is enabled

I have a vhdx image of a windows installation with UEFI partition. When i try to boot it on a hyper-v, it goes to system recovery mode all the time. When i try to disable secure boot option from hyper-...
0
votes
2answers
248 views

How to disable secure boot if I don't have Windows installed?

I can't install Windows on my laptop until I can go to BIOS and select appropriate SATA/AHCI (if I don't do this, an error fires during Win file expansion on my Dell XPS 9333). I have managed to ...
1
vote
1answer
873 views

Installing Ubuntu with secure boot on and no way to disable it?

I don't have any OS installed. I wanted to install Win10 but it failed with error code 0x80070570 during install. Now, I want to go back to Ubuntu but I am not able to (Only Unetbootin screen shows ...
0
votes
1answer
126 views

requesting app secure boot virtualbox

I am wondering if there are any secure programs I could use like virtual machine that can run on boot so I dont have to have a whole os running in the back ground but I am interested in trying ...
0
votes
1answer
1k views

Mac and EFI secure boot

I've recently had a linux live USB completely fail to boot on a mac running El Capitan, which makes me suspect secure boot is rearing its ugly head in the Apple world, as well as the PC world. So my ...
1
vote
1answer
389 views

Can I re-enable secure boot on a computer after I disabled It

I turned off secure Boot And Then I Booted Into Windows. Can I re-enable it safely?
0
votes
1answer
695 views

PreLoader.efi: What's wrong with my Secure Boot settings?

I installed Arch Linux with Secure Boot enabled using PreLoader. I enrolled the hash for loader.efi, containing rEFInd, and vmlinuz-linux using HashTools. The problem is that I get a message saying: ...