• This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

Do I need to disable secure boot to wipe hdd and install?


strunberg

New Member
Posts
4
#1
I have a hdd that has win 8 on it already. The motherboard is UEFI and it has secure boot.
Do I need to disable secure boot, or could I run the installation, wipe everything off the hdd by partitioning during setup,and then install the OS without disabling secure boot?
 

My Computer

System One

  • OS
    seven
    Computer type
    PC/Desktop
    System Manufacturer/Model
    custom
    CPU
    i5 750

KYHI

Well-Known Member
Pro User
Posts
2,764
#2
no need to disable secure boot
 

My Computer

System One

  • OS
    Windows 3.1 > Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8700
    CPU
    I7
    Memory
    24 GB

genet

New Member
Guru
Posts
879
#4
no need to disable secure boot
Why is that? When downgrading win8 to win7 on another computer I had to do so.
If you have an OEM PC that came with Windows 8/8.1 64-bit preinstalled and you want to install Windows 7 64-bit, then you must disable Secure Boot, because Secure Boot is not compatible with Windows 7.

Microsoft designed Secure Boot to protect the computer from low-level exploits and rootkits and bootloaders. A security process shared between the operating system and Unified Extensible Firmware Interface (UEFI, replacing the BIOS), Secure Boot requires all the applications that are running during the booting process to be pre-signed with valid digital certificates. This way, the system knows all the files being loaded before Windows 8/10 loads and gets to the login screen have not been tampered with.

If a bootloader has infected your computer and it tries to load during the boot-up sequence, Secure Boot will be able to undo all the changes and thwart the attack. Having Secure Boot means it is that much harder for attackers to try to compromise the start up sequence.
 

My Computer

System One

  • OS
    Windows 10
    Computer type
    Laptop
    System Manufacturer/Model
    Lenovo G580
    CPU
    Intel Core i5-3230M
    Memory
    8 GB
    Graphics Card(s)
    Intel HD Graphics 4000
    Browser
    Microsoft Edge
    Antivirus
    Windows Defender, standard user account
    Other Info
    UEFI firmware (BIOS) embedded Windows 8 product key.

strunberg

New Member
Posts
4
#5
If I were to convert my win7 install thumb drive into a UEFI win 7 install thumb drive, would it then be compatible with secure boot?
 

My Computer

System One

  • OS
    seven
    Computer type
    PC/Desktop
    System Manufacturer/Model
    custom
    CPU
    i5 750

KYHI

Well-Known Member
Pro User
Posts
2,764
#6
The USB has to be formatted FAT32 to be able to boot your UEFI compatibly PC

the setup media will contain two boot managers
BOOTMGR = BIOS Boot Manager
BOOTMGR.EFI = UEFI Boot Manager

What are you wanting to do ??
You have at first referenced windows 8 and now you just referenced windows 7
You mentioned HDD and now USB

Windows 7 does not support SecureBoot - so you have to disable it in the Bios
Windows 8/8.1/10 support SecureBoot - so no need to disable to run setup...
 

My Computer

System One

  • OS
    Windows 3.1 > Windows 10
    Computer type
    PC/Desktop
    System Manufacturer/Model
    Dell XPS 8700
    CPU
    I7
    Memory
    24 GB

strunberg

New Member
Posts
4
#7
My real goal is to find a way to downgrade people's computers remotely over the internet. I'm wondering if there's a way to make the windows 7 installation media compatible with the newer UEFI motherboards, without requiring my clients going into the BIOS to disable secure boot.

https://support.lenovo.com/us/en/documents/sf13-t0008
To create UEFI bootable USB media that will launch an MDT deploy,
MDT would enable me to downgrade over the internet.
 

My Computer

System One

  • OS
    seven
    Computer type
    PC/Desktop
    System Manufacturer/Model
    custom
    CPU
    i5 750

Users Who Are Viewing This Thread (Users: 0, Guests: 1)