Thank you sir i really need a teacher like you, and i was searching the deep explanation of this topic because it always interrupt me while installing os on laptops
To check if secure boot is enabled the faster way is to type Windows+R and in the run command you type "msinfo32" and the secure boot activation status is on the general page. So you don't have to remember the powershell command :)
Thank you so much for this detailed explanation. i'm in IoT Space and secure boot is one of the major topics we discuss. i assume that it is pretty much the same concept, right?
Much of IoT is embedded Linux and Linux can support secure boot, just not sure how or if vendors will support something like secure boot or another method. Thanks for the question!
Reach out to your motherboard support site, I would try and email them for the information. This is typically developer's information so they generally do not make it easily accessible to the public.
Thank you very much for your video ! That was very well, slowly explained. Thanks a lot ! I have one Query. What will be the steps for Windows Installation on Hyper-v Generation 2 machine in Secure Boot Environment by using PXE server. How we sign ipxe.efi and other files... Can you help me on this.. Thanks
Hi Lowell, I totally missed this video but this is very interesting! In your examples we see the certificates will expire this year. Do you know what happens if for X reasons the certificate is not automatically updated? Will the computer simply refuse to start, or will you see a popup in Windows telling you to do something asap? Thanks.
This doc has a great deal of details on the certificates and updating, it is not really clear about your question but it does provide for OEM updating and Microsoft updating of certificates. Yes the boot process will stop if any secure boot component is not correct. You can turn off secure boot and troubleshoot the problem and then when resolved put your system back into secure mode. docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-secure-boot-key-creation-and-management-guidance
Nice and clear info so I'm hoping you can tell me what I can do to get an after market graphics card to boot on a Dell PC with Secure boot enabled? :) The PC will boot with the original Nvidia card and secure boot enabled but I bought an AMD based MSI card and it freezes the boot with secure boot enabled. Dell says it's MSI who need to get the drivers signed. MSI support don't understand the question and say it's a Dell motherboard problem. Is there anything I, as a consumer, can do to get secure boot to work in this case?
Make sure you have UEFI Version 2.3.1 or greater, turn on the feature and attempt to boot, if it fails you can turn off secure boot and try booting again. I have successfully enable secure boot on PCs and virtual machines without reinstalling. If you need to troubleshoot your boot process you have to turn it off, fix your problem and then turn it on again. It is extra steps for the IT pro but the security is worth it.
у меня Secure Boot серым цветом в биосе, я не могу на него даже перейти чтобы нажать энтр. у меня виндовс 10, ноут HP 250 G6, я обновил биос на последнюю, но ничего не помогут, как перейти в этот раздел?
Для включения безопасной загрузки необходимо отключить как поддержку предыдущих версий, так и быструю загрузку. support.hp.com/us-en/document/c03653226 Спасибо за просмотр!
