It does on Fedora.

The new problem though is computers with TPM 2 and Windows 10/11
preinstalled are frequently (and increasingly) coming with BitLocker
enabled. And the key is predicated on the boot chain being TPM
verifiable. By booting shim+grub first, it changes the measurements, and
Windows can't be unlocked without the large backup encryption key. But
if you use that key following a chainloaded boot, the new measurement
should be added by Windows to the TPM making subsequent chainloading
possible - but of course if you boot the Windows bootloader directly
(via UEFI boot manager menu) the measurement will be off again and boot
fails.

So it's important to have the BitLocker key available before starting
any installation.

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1091464

Title:
  Unable to chainload Windows 8 and 10 with Secure Boot enabled

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1091464/+subscriptions


-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to