edit-article

Article Description: [what] a new feature designed to prevent the loading of malicous software at boot time.

Chapter ID/Name:

Status: Write Writing Written

Add Photo:

Owner ID:

Content: use HTML Edit Content <h1 style="text-align: center;">UEFI - secure boot</h1> <h2>[WHAT]</h2> <ol> <li>] Unified Extensible Firmware Interface (UEFI ) - &nbsp;secure boot -&nbsp;is a feature in the UEFI. It helps prevent the booting(loading) of malicous software.&nbsp;</li> <li>] The&nbsp;UEFI itself is the replacement for the motherboard firmware or BIOS. ( a basic program that runs when your PC first starts and before it hands over control of the PC&nbsp;to the operating system).&nbsp;</li> <li>] MS has implemented this feature in such a fashion that it makes it more difficult to boot other operating systems (aka linux) while the feature is enabled.</li> <li>] Users can still boot any other operating systems on their windows-8 certified hardware, but they would&nbsp;need to disable this feature.</li> <li>] 15.1 UEFI firmware - concerns are being raised in the linux community about msft handling of the keys.&nbsp;the linux community has been unable to come to a satisfactory resolution to this issue.</li> <li>] Several of the major linux distros(RedHat, Ubuntu, ) have implmented their own solutions to workaround the issue.&nbsp;&nbsp;&nbsp;</li> </ol> <h2>[WHY]</h2> <ol> <li><strong>] why do i need/want/use this [UEFI - secure boot]</strong></li> <ol> <li>] helps prevent your computer from loading malicous software(&nbsp;"malware" )&nbsp;at boot time</li> </ol></ol> <h2>[WHY NOT]</h2> <ol> <li>] you may have issues if you want to install a linux distribution on windows 8 certified hardware and the secure boot feature is enabled. AS I UNDERSTAND IT ...</li> <ol> <li>IF YOU DISABLE THE SECURE BOOT FEATURE IN THE BIOS(UEFI)</li> <ol> <li>you should be able to boot or install any disribution of linux that you desire</li> </ol> <li>IF THE SECURE BOOT FEATURE IS ENABLED&nbsp;</li> <ol> <li>the only distribution of linux known to boot on windows certified hardware is Ubuntu 12.10 64bit</li> </ol></ol></ol> <h2>[WHERE]</h2> <ol> <li>] this feature is built in to the specifcation for any windows 8 device.</li> </ol> <h2>[WHEN]</h2> <ol> <li><strong>] to use SECURE BOOT</strong></li> <ol> <li>if your not planning to install another operating system other then windows 8 or &gt; or ubuntu&nbsp;12.10 (64bit)</li> </ol></ol> <h2>[EXAMPLE]</h2> <ol> <li><em style="font-family: arial, sans-serif; font-size: 13px; line-height: 18px;">"An exchange of cryptographic keys takes place at boot-time so that a system can verify that the operating system attempting to boot is a genuine one, and not malware. There are further key exchanges along the way. Since Microsoft controls the key-signing authority, everyone who wishes to boot an operating system on hardware certified for Windows 8 has to buy a Microsoft key."</em></li> </ol> <h2>[HOW-TO]</h2> <ol> <li><strong>Disable the secure boot feature in the UEFI(BIOS)</strong></li> <ol> <li>this will be dependant upon hardware mfg and will vary betwen upon the manufactere.</li> </ol></ol> <h2>[REFERENCE]</h2> <ol> <li>]&nbsp;http://www.itwire.com/opinion-and-analysis/open-sauce/57920-secure-boot-microsoft-shows-up-linux</li> <li><strong>] UEFI BUGS from linux users</strong></li> <ol> <li>] https://plus.google.com/110953740010395822648/posts/3BdAfi77JyH</li> <li>] https://plus.google.com/110953740010395822648/posts/c8fa2bwSz2A</li> <li>] https://plus.google.com/110953740010395822648/posts/gibTP491tiD</li> </ol> <li><strong>] UEFI - secure boot ISSUE</strong></li> <ol> <li>] <a href="http://techrights.org/2012/11/21/hardware-keys-for-lf/">http://techrights.org/2012/11/21/hardware-keys-for-lf/</a>&nbsp;&nbsp;</li> </ol></ol> <p>&nbsp;</p>