Here are some links to articles discussing UEFI's secure Boot and some
implications for configuring a dual-boot Windows 8 & Linux system.
1. What is the UEFI Secure Boot loading process?
http://answers.microsoft.com/en-us/windows/forum/windows8_1-security/uefi-secure-boot-in-windows-81/65d74e19-9572-4a91-85aa-57fa783f0759
2. Do we have to change the machine configuration?
Yes, Windows must be forced to shutdown properly, and the system
must use UEFI:
http://d-i.debian.org/manual/en.amd64/ch03s06.html#boot-dev-select
3. How can we load a non-MS OS?
http://technet.microsoft.com/en-US/windows/dn168167.aspx
which says either of 2 methods:
3. a Use a 'trusted' bootloader, such as:
http://mjg59.dreamwidth.org/20303.html
or
3. b Disable 'Secure Boot', which has to be done from within Windows,
not from a cold boot into BIOS:
http://itsfoss.com/disable-uefi-secure-boot-in-windows-8/
4. Can Secure Boot be disabled on every machine?
I've found no evidence yet of any machine that cannot disable Secure
Boot, but Red Hat is (well, actually 'was', in 2011) worried that some
machines could have have that feature removed or disabled:
http://www.networkworld.com/article/2220722/microsoft-subnet/some-w8-pcs-won-t-turn-off-secure-boot--red-hat-warns.html
in which case the 'trusted' bootloader, [3.a] above, would be needed.
The ref in [2], above, also mentions that finding the 'disable' menu
in the UEFI BIOS is difficult, but the ref in [3. b], above, shows how
to disable Secure Boot from within Windows, not from within the BIOS.
5. What about booting from something else, another drive/medium?
That seems to be possible. Here's a recent post describing
interrupting the reboot sequence by pressing 'F12' and selecting a
drive from a BIOS 'Boot Menu':
https://lists.debian.org/debian-user/2014/08/msg01542.html
And thanks to everyone who has posted on various threads discussing
these problems, which gradually helped clear the fog, for me at least,
Ron
--
To UNSUBSCRIBE, email to debian-user-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/54004d17.6090...@tesco.net
