(public).sospep.subjects ~ view article ~ security-UEFI-secure-boot

<h1 style="text-align: center;">UEFI - secure boot</h1>
<h2>[WHAT]</h2>
<ol>
<li>] Unified Extensible Firmware Interface (UEFI ) - &nbsp;secure boot -&nbsp;is a feature in the UEFI. It helps prevent the booting(loading) of malicous software.&nbsp;</li>
<li>] The&nbsp;UEFI itself is the replacement for the motherboard firmware or BIOS. ( a basic program that runs when your PC first starts and before it hands over control of the PC&nbsp;to the operating system).&nbsp;</li>
<li>] MS has implemented this feature in such a fashion that it makes it more difficult to boot other operating systems (aka linux) while the feature is enabled.</li>
<li>] Users can still boot any other operating systems on their windows-8 certified hardware, but they would&nbsp;need to disable this feature.</li>
<li>] 15.1 UEFI firmware - concerns are being raised in the linux community about msft handling of the keys.&nbsp;the linux community has been unable to come to a satisfactory resolution to this issue.</li>
<li>] Several of the major linux distros(RedHat, Ubuntu, ) have implmented their own solutions to workaround the issue.&nbsp;&nbsp;&nbsp;</li>
</ol>
<h2>[WHY]</h2>
<ol>
<li><strong>] why do i need/want/use this [UEFI - secure boot]</strong></li>
<ol>
<li>] helps prevent your computer from loading malicous software(&nbsp;"malware" )&nbsp;at boot time</li>
</ol></ol>
<h2>[WHY NOT]</h2>
<ol>
<li>] you may have issues if you want to install a linux distribution on windows 8 certified hardware and the secure boot feature is enabled. AS I UNDERSTAND IT ...</li>
<ol>
<li>IF YOU DISABLE THE SECURE BOOT FEATURE IN THE BIOS(UEFI)</li>
<ol>
<li>you should be able to boot or install any disribution of linux that you desire</li>
</ol>
<li>IF THE SECURE BOOT FEATURE IS ENABLED&nbsp;</li>
<ol>
<li>the only distribution of linux known to boot on windows certified hardware is Ubuntu 12.10 64bit</li>
</ol></ol></ol>
<h2>[WHERE]</h2>
<ol>
<li>] this feature is built in to the specifcation for any windows 8 device.</li>
</ol>
<h2>[WHEN]</h2>
<ol>
<li><strong>] to use SECURE BOOT</strong></li>
<ol>
<li>if your not planning to install another operating system other then windows 8 or &gt; or ubuntu&nbsp;12.10 (64bit)</li>
</ol></ol>
<h2>[EXAMPLE]</h2>
<ol>
<li><em style="font-family: arial, sans-serif; font-size: 13px; line-height: 18px;">"An exchange of cryptographic keys takes place at boot-time so that a system can verify that the operating system attempting to boot is a genuine one, and not malware. There are further key exchanges along the way. Since Microsoft controls the key-signing authority, everyone who wishes to boot an operating system on hardware certified for Windows 8 has to buy a Microsoft key."</em></li>
</ol>
<h2>[HOW-TO]</h2>
<ol>
<li><strong>Disable the secure boot feature in the UEFI(BIOS)</strong></li>
<ol>
<li>this will be dependant upon hardware mfg and will vary betwen upon the manufactere.</li>
</ol></ol>
<h2>[REFERENCE]</h2>
<ol>
<li>]&nbsp;http://www.itwire.com/opinion-and-analysis/open-sauce/57920-secure-boot-microsoft-shows-up-linux</li>
<li><strong>] UEFI BUGS from linux users</strong></li>
<ol>
<li>] https://plus.google.com/110953740010395822648/posts/3BdAfi77JyH</li>
<li>] https://plus.google.com/110953740010395822648/posts/c8fa2bwSz2A</li>
<li>] https://plus.google.com/110953740010395822648/posts/gibTP491tiD</li>
</ol>
<li><strong>] UEFI - secure boot ISSUE</strong></li>
<ol>
<li>] <a href="http://techrights.org/2012/11/21/hardware-keys-for-lf/">http://techrights.org/2012/11/21/hardware-keys-for-lf/</a>&nbsp;&nbsp;</li>
</ol></ol>
<p>&nbsp;</p>

~ view article ~ Chapter] ch-003-features FROM [ Book] os-win-8 IN [ libraries] technology-software-os