To read all comments associated with this story, please click here.
Why do you think that ? I think you misunderstand.
These Linux distributions have a small piece signed by the Microsoft key specifically so that users do not have to do any technical things to install the Linux disitribution.
A device with secure boot means:
- A system to prevent bootvirusses (mostly Windows)
- usually a pre-installed Microsoft key so it can boot/install Windows
- for manufacturers to get their device part of the Windows-logo program (which gets them a PR budget from Microsoft, that is why they do this!) they need to do 1 of 2 things:
1. on x86/amd64 enable secure boot with the Microsoft key, but make it possible to disable it or load your own keys from the BIOS/firmware
2. on ARM enable secure boot and have no way to install keys or to turn it off
Secure boot isn't very secure, it just exists to try and prevent modification of the boot process from a program running on the operating system.




Member since:
2010-03-11
The list isn't really relevant since, on my machine at least, Secure Boot must be disabled before the user can install a new operating system (ie boot from any media except the hard drive). To boot one of these distros that support Secure Boot I'd have to first disable Secure Boot, then install the distro and then re-enable Secure Boot. Having a distro support Secure Boot doesn't help at all since I can't boot from the distribution's installation media while Secure Boot is enabled.