Reply to thread

Message: <blockquote data-quote="dragorth" data-source="post: 35037" data-attributes="member: 2769">Secure boot does not prevent booting other OSes. It prevents booting Unknown, unsigned, or infected OSes.It is up to the manufacturer to provide a switch to allow any OS to boot. I imagine that many large distributions, such as Red Hat, Ubuntu, Debian, and hopefully the BSD's will have a known key in the UEFI system. I would have to read the UEFI spec to know how updates to this list are handled, since Microsoft will presumably have different keys for each OS. Not to mention many will still use older OSes such as Windows XP, Vista and 7 that, as far as I know, do not have signed boot signatures. Debian and Ubuntu also already have a signed software system, making them very secure anyway, I imagine the infrastructure is in place to support these, considering that many businesses that would use these things are using these UEFI systems. Since Linux has been on the Itanium systems for some time, and all of those are some flavor of EFI, I don't believe there will be an issue with the secure boot. I would worry more on consumer focused suppliers that have few business partners, as they have the least incentive to provide these options. Considering that EFI seems easier to add things to, I wouldn't be surprised to be able to add these keys at the command line or just adding a file to the EFI Partition.Dragorth.</blockquote>