Linux Foundation struggles with Microsoft's Secure Boot signing service

Discussion in 'all things UNIX' started by lotuseclat79, Nov 21, 2012.

Thread Status:
Not open for further replies.
  1. lotuseclat79

    lotuseclat79 Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    5,095
  2. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825
    Is UEFI Secure Boot suppose to be on all Windows 8 computers being sold to the consumer desktop/laptop market?
     
  3. lotuseclat79

    lotuseclat79 Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    5,095
    Hi DasFox,

    Yes, that seems to be the deal M$ extorted with all the chip Mfgrs - which makes it difficult if not impossible to dual-boot a Linux on those chips without M$ co-operation.

    -- Tom
     
  4. Ocky

    Ocky Registered Member

    Joined:
    May 6, 2006
    Posts:
    2,677
    Location:
    George, S.Africa
  5. mack_guy911

    mack_guy911 Registered Member

    Joined:
    Mar 21, 2007
    Posts:
    2,677
    why secure boot is needed because even after biomatric security you can peep into windows using live cd and dvd :D

    i wonder how long it last long soon we going to see open source UEFI crack under GPL license :D
     
  6. lotuseclat79

    lotuseclat79 Registered Member

    Joined:
    Jun 16, 2005
    Posts:
    5,095
  7. DasFox

    DasFox Registered Member

    Joined:
    May 5, 2006
    Posts:
    1,825

    What a joke this is...

    ~ Snipped as per TOS ~ M$! :thumbd:
     
    Last edited by a moderator: Nov 30, 2012
  8. Sir paranoids

    Sir paranoids Registered Member

    Joined:
    Oct 20, 2012
    Posts:
    101
    agreed secure boot is garbage,just like trusted computing.
    speaking of that my cpu doesn't support it.
    its just DRM embellished as something useful when really its just crap.

    UEFI as well is a bad joke the way its setup as are some of the bios menus iv seen on computers.
    what a wast of 64megs,win 3.11 and the like can install with less space then that and do 10000000000x more then their useless UEFI.
     
  9. Kyle1420

    Kyle1420 Registered Member

    Joined:
    May 27, 2008
    Posts:
    479
    Really microsoft.........? :thumbd: :thumbd: :thumbd:
     
  10. Wild Hunter

    Wild Hunter Former Poster

    Joined:
    Oct 13, 2012
    Posts:
    1,375
    Starting its own certification authority is what Microsoft did with VeriSign, and it solves the problem. The Linux Foundation could do the same, but...

    "The developer added that the Linux Foundation had also considered starting its own certification authority but had abandoned this plan because it would have required a huge effort and incurred high costs."

    ...they want facilitations...
     
  11. BrandiCandi

    BrandiCandi Guest

    This is so incredibly annoying to me. It makes me seriously consider just getting new macs from here on out because they will happily let me dual boot.
     
  12. Wild Hunter

    Wild Hunter Former Poster

    Joined:
    Oct 13, 2012
    Posts:
    1,375
    I have news for you: Apple is part of the UEFI Forum. At some point, they will probably also support the Secure Boot (as it's an integral part of latest UEFI spec).

    http://www.uefi.org/about/

    However, unlike Microsoft, I think Apple won't try to help others providing a cheap signing service for concurrents. lol
     
    Last edited: Dec 2, 2012
  13. J_L

    J_L Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    8,516
    Are computer parts and barebone systems secure boot enabled?
     
  14. Wild Hunter

    Wild Hunter Former Poster

    Joined:
    Oct 13, 2012
    Posts:
    1,375
    - UEFI 2.3.1 (the version of the spec with Secure Boot) is installed on motherboards.

    - OEMs are free to choose how to enable/disable the support for Secure Boot and can further customize the parameters (they can, for example, totally restrict the deactivation of Secure Boot in their products if they want).
     
  15. Mrkvonic

    Mrkvonic Linux Systems Expert

    Joined:
    May 9, 2005
    Posts:
    8,695
    Guys, you can DISABLE secure boot on your desktops.
    It is not an issue.
    Mrk
     
  16. BrandiCandi

    BrandiCandi Guest

    Well that makes me extremely happy!!!
     
  17. Wild Hunter

    Wild Hunter Former Poster

    Joined:
    Oct 13, 2012
    Posts:
    1,375
    Some motherboards may not have that option in the future.
     
  18. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,148
    It is for users who don't want to disable a security feature just to install an OS. Or who aren't familiar enough with computers to disable it easily, who will be turned away from installing Linux because it's just one more step in the process that makes Linux seem like it's not ready for normal users.
     
  19. linuxforall

    linuxforall Registered Member

    Joined:
    Feb 6, 2010
    Posts:
    2,136
    Unless and until Linux foundations puts its whip up and comes out with a Linux certified motherboard and laptop programs, I see only grief in the future. Of course commercial and supercomp realm would not be affected by this.
     
  20. NGRhodes

    NGRhodes Registered Member

    Joined:
    Jun 23, 2003
    Posts:
    2,331
    Location:
    West Yorkshire, UK
    Reference ?

    "Microsoft's certification requirements eventually revealed that that UEFI firmware on x86 systems must allow users to re-configure or turn off secure boot" (emphasis mine).

    http://en.wikipedia.org/wiki/Windows_8
     
  21. Wild Hunter

    Wild Hunter Former Poster

    Joined:
    Oct 13, 2012
    Posts:
    1,375
    What about motherboards for ARM systems.
     
  22. NGRhodes

    NGRhodes Registered Member

    Joined:
    Jun 23, 2003
    Posts:
    2,331
    Location:
    West Yorkshire, UK
    OEMs won't though. Secure boot does not work with Win 7s and other operating systems (at the moment). Windows 8 requires that it can be user disabled. What use case is there for an OEM disabling it ?
     
  23. Wild Hunter

    Wild Hunter Former Poster

    Joined:
    Oct 13, 2012
    Posts:
    1,375
    Microsoft Surface with Windows RT for example. Other devices with Windows RT seem to have the same restriction.
     
  24. NGRhodes

    NGRhodes Registered Member

    Joined:
    Jun 23, 2003
    Posts:
    2,331
    Location:
    West Yorkshire, UK
    Windows 8 RT is a locked down platform that does not even support installing any other OS, so not relevant to this thread.
    I don't know of any other ARM motherboards supporting Secure Boot at the moment.
     
  25. Wild Hunter

    Wild Hunter Former Poster

    Joined:
    Oct 13, 2012
    Posts:
    1,375
    What about future motherboards for ARM systems.
     
Loading...
Thread Status:
Not open for further replies.