stock f20 bootloader not signed

[Madhurjya Roy]

Hello Patrick, 

Actually, I have a dual laptop which has Windows 8 and Kali, and a Macbook with OS X and Fedora, I can confirm that  Kali didn't work with Secure Boot enabled!

I wasn't aware that fedora actually supports Secure Boot until I checked fedora docs about UEFI[1]. However, it is still not as simple as paying Microsoft to include their keys and also I do not think that the system is flawless, as I still hear many fedora users with their complaints on Secure Boot.

You might be interested in checking this out, if you haven't already :

[1] http://docs.fedoraproject.org/en-US/Fedora/18/html-single/UEFI_Secure_Boot_Guide/index.html#chap-UEFI_Secure_Boot_Guide-Implementation_of_UEFI_Secure_Boot

Cheers,
Madhurjya Roy
FAS : madhurjyaroy
IRC Nick (irc.freenode.net) : madhurjyaroy

-----Original Message-----
From: "patrick korsnick" <korsnick at gmail.com>
Sent: ‎8/‎12/‎2014 10:51 PM
To: "Community support for Fedora users" <users at lists.fedoraproject.org>
Subject: Re: stock f20 bootloader not signed

Hi Madhurjya,


As I understand it Fedora paid Microsoft to register their key so Secure Boot does indeed work with Fedora. See AdamW's talk below for more info- the secure boot subject matter is near the end of the talk:


https://www.youtube.com/watch?v=TmoeEM_eCQo



cheers,
pat



On Tue, Aug 12, 2014 at 9:05 AM, Madhurjya Roy <roymadhurjya at gmail.com> wrote:

Hello Patrick,

It's not a bug! Actually, most of the laptops that come preinstalled with Windows 8/8.1 come with secure boot. It's just a feature that is used to verify the signature on Windows Bootloader!

Secure Boot is not meant to verify signature of Linux bootloader (GRUB) and I'm not sure if it comes with any!

So, it's a Windows 8/8.1 only feature and you will have to disable it if you want to run fedora or some other OS! Please, don't go by its name. Disabling Secure boot will only allow other bootloaders to work and won't compromise on any form of security!

Net Verdict - It's a 100% secure and a recommended must to disable Secure Boot in order to boot any NON Windows 8/8.1 OS.

Cheers,
Madhurjya Roy
FAS : madhurjyaroy
IRC Nick (irc.freenode.net) : madhurjyaroy


From: patrick korsnick
Sent: ‎8/‎12/‎2014 12:08 AM
To: Community support for Fedora users
Subject: stock f20 bootloader not signed


Hi all,
I just did a fresh f20 install in UEFI mode (no CSM) with secure boot enabled and while it booted the USB stick fine after the initial reboot I get an error about the bootloader not being signed and have to disable secure boot in order to boot the machine. I did a search on Bugzilla for the error message and didn't find anything. Has anyone encountered this error before?


The machine is a HP Zbook 17 with the latest firmware (BIOS) update installed.


Cheers



--
users mailing list
users at lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/users/attachments/20140812/6f05c782/attachment.html>