It's very important to note that this is a Microsoft requirement for manufacturers who want a Windows 8 sticker to put on their hardware.
Microsoft's Windows 8 certification requirements - These requirements specify that users must be able to disable Secure Boot on x86 or x86-64 hardware, but that users must not be able to disable Secure Boot on ARM hardware. This is what the word "programmatic" in your quote means. After all, if OS-level programs could disable Secure Boot, then any virus that came along would be able to disable the feature, rendering it useless. Or can you still wipe it of somehow, I' don't have that issue, but just like to know.īasic Secure Boot design, as detailed in the UEFI 2.x specification documents - The basic Secure Boot design requires that OS-level programs not be able to disable Secure Boot. If the firmware is reset to factory defaults, then any customized Secure Boot variables are also factory reset.ĭoes this mean you can never get rid of it, cause it always defaults to secure boot? Bad course if you ask me:( Disabling Secure Boot must not be possible on ARM systems. Programmatic disabling of Secure Boot either during Boot Services or after exiting EFI Boot Services MUST NOT be possible. (Microsoft's Windows 8 sticker requirements specify that users must be able to do this on x86-64 systems but on ARM computers, Microsoft's sticker requirements say that users must not be able to disable Secure Boot.) Windows 8 should continue to boot when you turn Secure Boot on or off however, some versions of GRUB have problems chainloading to other EFI boot loaders (including the Windows boot loader) when Secure Boot is enabled. Note also that it's possible to switch Secure Boot on and off, at least on x86-64 systems. (It is possible to replace your firmware's Secure Boot keys, which would prevent the installation of Windows unless you re-signed the Windows boot loader yourself.)
#Easybcd windows 8 install
If you buy a Windows 8 package at the store, it will install on an older BIOS-only computer (assuming it's not too old), on an EFI computer that lacks Secure Boot support, on an EFI computer with Secure Boot support but with that feature disabled, or on an EFI computer with Secure Boot and Microsoft's keys enabled. This does not mean that Windows 8 itself requires either EFI or Secure Boot the requirement is a marketing requirement for new computers. Because Secure Boot is an EFI feature, this means that these computers also use EFI. Because most manufacturers consider the lack of such a sticker to be the kiss of death for their products, this means that nearly all computers that ship with Windows 8 ship with Secure Boot enabled. Microsoft requires manufacturers to ship their computers with Secure Boot enabled in order to get a Windows 8-compatible sticker. In fact, of five computers I've got that use EFI, only one supports Secure Boot. Secure Boot is one optional feature of EFI. Note that Secure Boot is NOT synonymous with EFI. I always thought that it didn't run without secure boot.
0 kommentar(er)
