Questions tagged [secure-boot]
For questions on “Secure Boot” and “Restricted Boot” the new bios feature that is in computers with the “Windows 8” logo.
210
questions
0
votes
0
answers
33
views
Run older kernel on Ubuntu with secure boot
On Ubuntu 20.04, I am trying to run some piece of proprietary software junk that works only with kernel 5.8 instead of the current kernel 5.15.
So, I installed the kernel 5.8 using a mainline script ...
- 101
1
vote
1
answer
109
views
Making a MOK-signed GRUB with extra modules
I have a Wake-on-LAN situation where I'd like GRUB to make a network request to decide "should I boot Windows?", perhaps by load_env (http,192.168.1.123)/grubenv (so I can write that file ...
- 243
0
votes
1
answer
111
views
Windows 11 installed on a refurbished HP so that I can't suppress Secure boot mode to boot on USB
I recently bought a refurbished HP Z4 G4 with windows 11 already installed. In order to dual boot, I have to change the bios/UEFI Secure Boot to disable (and legacy to enable). I am able to change it ...
- 71
0
votes
2
answers
362
views
Bypassing TPM/SecureBoot checks when installing Win11 without Rufus
I need to install Windows 11 on an older PC that doesn't support TPM and SecureBoot.
According to this article, it's possible by creating DWORDs with the names BypassTPMCheck and BypassSecureBoot (...
- 3
0
votes
2
answers
971
views
Secure Boot Violation: Invalid Signature Detected, Check Secure Boot Policy in Setup Error - HackBGRT (how to use secure boot with it)
Update - Go to answer for steps.
First off, I am trying to enable secure Boot thus I don't consider disabling secure Boot a solution.
I have a Gigabyte B450M DS3H, with AMD Ryzen 5600 and have tried ...
- 9
0
votes
1
answer
210
views
Why can Debian 11 no longer load after Windows 10 changed motherboard state?
Note that this question is not a duplicate of the typical dual-boot questions, because I never have the Windows-HDD and Linux-SSD at once in the PC, so they cannot touch each other's (efi) partitions.
...
2
votes
1
answer
49
views
Build date of bios version - how to check orginality of version ? - used motherboard
I have a used motherboard. Can I make sure that the bios is authentic including the keys (secure bios) ? How can I check it?
For example, the build date of the bios is a few days older than the ...
- 109
1
vote
1
answer
208
views
Is disabling secureboot that bad?
I want to sometimes use Linux, sometimes windows.
I found out that, Puppy Linux is small, I can install it on a USB. But the problem is, if I click on my USB in the boot menu, I have to disable secure ...
- 11
0
votes
1
answer
121
views
ASUS X570-PLUS (WIFI) and Samsung 850 EVO SSD, forced to use CSM and Secure Boot not working
New build with an ASUS X570-PLUS and an older Samsung 850 EVO SSD. The drive is not detected by the motherboard unless I enable CSM. Safe Boot is enabled in BIOS but Windows is showing it as disabled. ...
- 21
0
votes
0
answers
107
views
Fedora 33: Secure Boot dbx configuration update apparently fails? Or does it?
After upgrading Fedora 31 to 33, I went to Settings-->Fedora-->Software Updates-->Updates, and see under "Device Firmware:
Secure Boot dbx configuration update 83-->217
I hit update. ...
- 313
0
votes
0
answers
175
views
PC not booting after enabling secureboot in Linux
I tried to Multiboot my Laptop with secureboot enabled, I installed fedora on one SSD and had Windows 11 on the other one. Then I generated a new key for the UEFI. I enabled secureboot in the UEFI ...
- 1
1
vote
1
answer
251
views
Boot stuck on Dell logo after changing GPU, Secure Boot enabled
I have recently bought and installed an AMD RX Radeon 6600, and now my computer gets stuck at the Dell logo and I cannot get to the BIOS or anything else. After investigating, I found that if I ...
2
votes
0
answers
141
views
How does PCIe card vendors sign option ROMs?
If secure boot is enabled UEFI system would permit to run only signed Option ROMs.
I presume PCIe card vendors want their devices to work even if Secure Boot is enabled. Therefore how does PCIe card ...
- 153
0
votes
4
answers
2k
views
Getting a “Secure Boot Violation” on an MSI Modern 14 after a Windows 11 update failed
Upgraded Windows 10 to Windows 11 on MSI Modern 14 earlier this year via Update assistant. I saw the latest Windows 11 22H2 update and put the MSI modern 14 to upgrade via Windows 11 Installation ...
- 11
0
votes
1
answer
111
views
Is it possible to "go back" to grub after booting linux
I am trying to enable secureboot so I can forget about it when switching between windows and linux through dualboot. However, grubs newer versions don't allow mods to be inserted after boot, so I need ...
- 1
0
votes
0
answers
39
views
Bootloop behavior for Win10 installation or Win10 install media
I have a Win10 system I've been using without any issues for ~2.5 years. The mobo is ASUS ROG Crosshair VIII Hero Wifi. The CPU is Ryzen 3950x.
Last week I had a weird occurrence where the system ...
- 591
0
votes
1
answer
1k
views
Can't enable secure boot in Windows 11
I am using Windows 11 and can't enable secure boot. I tried to enable it in BIOS, but it still doesn't work, and in system information, it's off.
- 1
3
votes
1
answer
37k
views
How do I turn secure boot off in UEFI BIOS on an ASUS TUF Gaming board?
I've tried following various tutorials. The closest one to displaying similar screens as I have was this: https://www.technorms.com/45538/disable-enable-secure-boot-asus-motherboard-uefi-bios-utility
...
- 685
1
vote
0
answers
664
views
bcdedit.exe command giving strange error
Until yesterday i could use the command bcdedit /set testsigning on, so that i could start kernel mode drivers that are not signed, and then bcdedit /set testsigning off before shutting down, and i ...
- 11
0
votes
1
answer
415
views
Aptio 2.22 @Asus PN52 - how to enable boot from usb stick and install Linux?
I am trying to install Linux Mint 20.3 from USB stick on my new Asus PN52. USB stick was made with UNetbootin on Linux Mint 19. USB drive and internal NVMe disk - operating system destination - are ...
- 101
0
votes
0
answers
1k
views
Debian 11 - grub: Secure boot forbids loading module from (hd1,gpt5)/grub/x86_ 64-efi/exfat.mod
When booting up, my screen flashes with a bunch of errors, reporting that some grub modules couldn't be loaded due to Secure Boot, e.g.:
Secure boot forbids loading module from (hd1,gpt5)/grub/x86_ 64-...
- 161
1
vote
0
answers
94
views
Is it possible to allow only a certain secure USB boot media to boot an UEFI system?
I want to restrict all USB boot media from my system, except for a certain USB boot drive that I declare secure via a certain key.
Is this possible using UEFI/Secure Boot/TPM? Maybe via TPM? TPM gets ...
- 4,838
0
votes
0
answers
56
views
Error after enabling secure boot
I am using msi motherboard
Having windows 11
After i went to bios to enable secure boot for the valorant's requirement. The I saved and exit the bios setting, then the computer starting restarting and ...
- 1
0
votes
2
answers
3k
views
How to disable secure boot without entering UEFI?
My problem is secure boot. I am trying to boot into Linux using a USB but most distros won't work with secure boot, I already know secure boot can be disabled in the UEFI settings, and I know how to ...
0
votes
0
answers
114
views
Custom secure boot with .WIM file
I am trying to take ownership of the secure boot process of a Windows platform. I have followed some online resources like:
https://linuskarlsson.se/blog/secure-boot-when-dual-booting-arch-linux-and-...
- 1
0
votes
1
answer
656
views
Trying to Disable Secure Boot
I am trying to disable Secure Boot in my Linux Mint OS. My laptop is an Acer Aspire 5.
The problem is I can use the arrow keys on all BIOS menus, except Security and Boot. When I navigate to the ...
5
votes
0
answers
2k
views
Kernel lockdown disallows loading of an self-compiled and self-signed in-tree kernel module
I'm having difficulties loading a kernel module that I myself compiled and signed for Secure Boot. The module in question is ec_sys, located within drivers/acpi directory of the kernel tree.
I'm using ...
- 161
0
votes
1
answer
146
views
Is there anyway to ignore the CMOS Check during Startup? [closed]
I have broken my CMOS battery seat while replacing the battery, and I want to my pc to Ignore Cmos check during startup.
I have already turned on fast boot, but everytime I turn off the switch, fast ...
1
vote
0
answers
71
views
USB Windows 11 for TPM/SB created on non-TPM/SB system
What option is needed to install Windows 11 to a live persistent USB on a non-TPM/Secure Boot system, if the USB will be used on a TPM/Secure Boot system. I assume it is the Standard with TPM & ...
- 11
0
votes
1
answer
245
views
machine owner key details and predeployment options
currently I am trying to get into the mechanisms behind secure boot, shim and machine owner keys.
What I observed is the fact, that the key, that I've imported via mokutil is permanent even if:
the ...
0
votes
0
answers
75
views
Is it possible to customize an Ubuntu or Debian live system while keeping the secure boot (microsoft keys) compatibility?
I would like to create a customized live system of either ubuntu or debian while keeping it compatible with the microsoft secure-boot keys, allowing computers to boot this live-system without fiddling ...
user1271529
0
votes
1
answer
3k
views
Unable to access bios after enabling secure boot (no screen output)
I disabled CSM and enabled secure boot on my Gigabyte Aorus b550 AC with a evga GTX 1080.
Every time I boot up my machine, it boots straight into windows (dual-boot system with ReFind as bootloader) ...
- 563
0
votes
0
answers
422
views
Cause for EFI Signature Change on PopOS Linux
I have a system with popos 21.10 installed. I had added the vmlinuz.efi signature to the secure boot list. Today I tried to boot the system after a week idle and it gave me an error saying the ...
- 103
0
votes
0
answers
114
views
I have an HP pavillion 1178 convertible and I was messing with secure boot and now my load HP factory default keys button is greyed out
What should I do?
I was trying to install mint and it said to disable secure boot, it was greyed out so I cleared the keys and then the load hp factory defaults keys option got grayed out.
_
2
votes
1
answer
962
views
Secure Boot support on a custom-made PC with Windows 10 Pro
As part of my Windows 11 upgrade activities, MS says my PC does not support Secure Boot. Something also confirmed by msinfo32.exe:
msinfo32 snapshot
Strangely enough, when I entered BIOS it states ...
- 33
1
vote
1
answer
691
views
Secure boot with unified kernel image on openSuSE?
I am trying to install OpenSuSE Tumbleweed on a system with encrypted root partition. At first i tried to set up GRUB, but it refused to recognize a LUKS-encrypted partition.
Currently I am trying to ...
- 8,145
0
votes
1
answer
2k
views
How do I sign kernel modules in Linux to successfully install NVIDIA drivers using dkms?
I use Kubuntu 18.04 and I'm trying to install NVIDIA driver using the run file provided by NVIDIA itself instead of using package managers.
I first Installed the following packages:
$ sudo nano /etc/...
- 115
1
vote
1
answer
2k
views
PC won't boot or display after activating Secure Boot
Specs:
CPU: AMD Ryzen 9 5900X,
Motherboard: Gigabyte Aorus X570 Elite Wifi,
RAM: 2x16GB DDR4 Trident G-Skill Neo,
GPU: Asus RTX 3080,
PSU: Gamemax 850W,
OS: Windows 11
So I've updated to Windows 11, ...
- 21
0
votes
2
answers
2k
views
[Solved]How can I enable secure boot on my laptop
I have an Asus ROG strix g513ih laptop but in BIOS menu I can't select secure boot. It's greyed out
- 11
3
votes
2
answers
2k
views
Secure boot - How to append custom certificate to db if BIOS has no such option?
I have HP 245G7 notebook. The BIOS is very basic and there does not seem to be any option from within to append my own custom certificate to db database of secure boot.
If there is an option in this ...
- 331
0
votes
1
answer
2k
views
Can disabling secure boot affect Windows?
Can disabling secure boot affect Windows OS? I want to disable it to install Linux. I use Windows 10 as my main OS now so all my data would be potentially lost if there is some problem with Windows ...
- 3
0
votes
0
answers
68
views
Will Windows 11 require secure boot is enabled, or just requires secure boot capable UEFI motherboard? [duplicate]
I am planning to fresh install Windows 11 to a ASUS Prime Z590 motherboard with 11th generation intel CPU
My question, will Windows 11 require secure boot is enabled, or just requires secure boot ...
- 311
2
votes
3
answers
4k
views
turning on secure boot gives only a black screen
I have installed Windows 10 with secure boot off and now I want to install Windows 11. So I turned secure boot back on but, only a black screen shows after computer boots.
What I see - I can see POST ...
- 130
0
votes
2
answers
551
views
How can I get secure boot working after manually creating EFI partition with diskpart?
motherboard: ASUS ROG STRIX X570-E GAMING Rev X.0x
I successfully enabled secure boot and installed Windows 11. Because of issues I decided to go back to Windows 10 and experiment on another machine. ...
- 537
0
votes
1
answer
1k
views
Secure Boot is Unsupported while Bios Mode is set to UEFI on Lenovo T520 Laptop on System Information
My Lenovo T520 laptop bios is set to UEFI and currently running Windows 10. Under System Information I can see UEFI for Bios Mode but Secure Boot is shown as unsupported. Does UEFI enable mean secure ...
- 127
0
votes
2
answers
2k
views
No signal on monitor after secure boot
I want to install windows 11
So i open the bios and enable tpm (intel ppm) and then disable csm and enable secure boot after use default key
After restart i got blank screen no signal
And no bios
I ...
- 1
2
votes
3
answers
4k
views
PC won't boot when having the GPU connected after enabling Secure Boot
I wanted to upgrade to Windows 11 on my machine which worked perfectly up until now, so I checked the requirements and saw that I needed to enable Secure Boot in order to do so.
Since I have a ...
- 111
0
votes
0
answers
909
views
Can't see HDD after enabling Secure Boot for Windows 11
Windows 11 is coming out, and according to the diagnostic tool I need to enable Secure Boot and TPM in order to upgrade. The TPM part was easy enough, however, the Secure Boot doesn't really work.
I ...
- 111
2
votes
2
answers
1k
views
Where is the data used in secure boot process stored?
I am spent a lot of time researching and reading about this topic but I am now very confused.
I have read that computer manufacturers include some Microsoft keys. For example, Microsoft Corporation ...
- 149
1
vote
1
answer
46
views
Do x64 machines differ in their secure boot implementations and ROM certificates?
I'm trying to understand secure boot and the key requirements in ROM firmware for x86 machines
I'm coming from this definition of secure boot:
The PCs are sold with certain certificates embedded in ...
