Linked by Howard Fosdick on Thu 6th Dec 2012 05:26 UTC
OSNews, Generic OSes With computers now shipping with UEFI Secure Boot enabled, users of any OS other than Windows 8 will want to know how to circumvent it. Jesse Smith of DistroWatch tells how he did it here. The Linux Foundation describes its approach here. If you want to boot an OS other than Windows 8, you'll want to figure this out before you buy that new computer.
Thread beginning with comment 544381
To read all comments associated with this story, please click here.
Disable it?
by Z_God on Thu 6th Dec 2012 11:57 UTC
Z_God
Member since:
2006-06-11

Isn't it possible to just flash a regular BIOS onto these mainboards or switch to it? I can't really imagine a secureboot-only mainboard.

Reply Score: 1

RE: Disable it?
by moondevil on Thu 6th Dec 2012 13:01 in reply to "Disable it?"
moondevil Member since:
2005-07-08

There are already a few without legacy mode available.

The scenario that people were saying it wouldn't happen.

Reply Parent Score: 2

RE[2]: Disable it?
by Z_God on Sat 8th Dec 2012 16:49 in reply to "RE: Disable it?"
Z_God Member since:
2006-06-11

Ah yeah, I indeed wouldn't expect that. I guess I would try to buy mainboards with a normal BIOS available for as long as possible. The real reason being that UEFI BIOSes are probably going to be buggy as hell the coming years.

Reply Parent Score: 1

RE: Disable it?
by Alfman on Thu 6th Dec 2012 14:50 in reply to "Disable it?"
Alfman Member since:
2011-01-28

Z_God,

As I recall, the secure boot specs specifically block flash updates which are unsigned by a secure boot key. So unless you find an exploit or can disable secure boot, you cannot flash away secure boot.

I am so thankful that, amid all the criticism, MS found it in their heart to force windows 8 machines to add a user accessible override for secure boot on x86. There was probably an internal fight at MS between lawyers worried about antitrust lawsuits and business suits wanting all computers to be locked down. It sucks that ARM computer users are still being shafted and that owner control still isn't in the UEFI spec, but at least x86 users have a way to take control back.

Reply Parent Score: 6

RE: Disable it?
by ssokolow on Thu 6th Dec 2012 18:12 in reply to "Disable it?"
ssokolow Member since:
2010-01-21

Isn't it possible to just flash a regular BIOS onto these mainboards or switch to it? I can't really imagine a secureboot-only mainboard.


Motherboard firmware is like Android but worse as far as driver support goes. Even if you disable secure boot and then re-flash it, you need a replacement firmware image that knows how to talk to all the different chips.

CoreBoot is your best bet... but the list of supported mobo models has a long way to go.

http://www.coreboot.org/

Reply Parent Score: 5

RE[2]: Disable it?
by Z_God on Sat 8th Dec 2012 16:38 in reply to "RE: Disable it?"
Z_God Member since:
2006-06-11

Yep, but I'd imagine the original vendor would make such a BIOS available for its mainboards.

Reply Parent Score: 1