6 hours ago, Humpty said:

NO. If that ever happens trust me Windows will no longer exist

afaik you pretty much cant boot linux with secure boot enabled and if you do get it working updates stop working.

you can turn it off but then windows wont work.

once its enabled the only people who can make changes to system files and directories are microsoft or software they approve.

Not seeing the "no" there.

On 10/12/2021 at 1:51 AM, mSparks said:

it lets them turn your pc into an xbox.

There are ways. You can install Win11, without meeting the requirement of TPM, Secure Boot, and a supported CPU.

1 minute ago, Greazer said:

There are ways. You can install Win11, without meeting the requirement of TPM, Secure Boot, and a supported CPU.

sure, but if you are fine with running an unsupported OS, you might as well go with windows 7, which at least has gaming performance almost on par with linux (and ironically is probably more secure), rather than the 5 to 15% you lose with win10 and the 5 to 28% you'll lose on windows 11.

Just now, mSparks said:

sure, but if you are fine with running an unsupported OS, you might as well go with windows 7, which at least has gaming performance almost on par with linux (and ironically is probably more secure), rather than the 5 to 15% you lose with win10 and the 5 to 28% you'll lose on windows 11.

There is no difference in support in the end result.

24 minutes ago, mSparks said:

you can turn it off but then windows wont work.

once its enabled the only people who can make changes to system files and directories are microsoft or software they approve.

That's crazy.... even more reason for me to not upgrade anytime soon.

1 minute ago, Greazer said:

There is no difference in support in the end result.

same can be said for win7, I like win 7, its starts and stops quickly on the rare occasions I need windows for something

linus tech tips review of windows 11 was fairly to the point

 

2 hours ago, mSparks said:

afaik you pretty much cant boot linux with secure boot enabled and if you do get it working updates stop working.

you can turn it off but then windows wont work.

once its enabled the only people who can make changes to system files and directories are microsoft or software they approve.

Not seeing the "no" there.

Have you tried it with Linux ?  So if I assemble a system by myself that means I can't run Linux with Secure Boot ?

Well , my office laptops are dual booted using Secure Boot UEFI enabled , all updates work perfectly with Ubuntu 18.04. 

My home Ryzen is Secure UEFI / TPM 2.0 dual boot W10 / Ubuntu 20 works fine even after updates.

Or i am confused with this secure boot myself ! 

 

33 minutes ago, Humpty said:

Have you tried it with Linux ?

https://forums.developer.nvidia.com/t/trouble-installing-nvidia-drivers-because-of-the-disabled-secure-boot-ubuntu-18-04/110643

4 minutes ago, mSparks said:

https://forums.developer.nvidia.com/t/trouble-installing-nvidia-drivers-because-of-the-disabled-secure-boot-ubuntu-18-04/110643

Hmm , but the OS without the nvidia works that's what I am trying to say.

I do not have a system with a Nvidia except the laptop  TOshiba is Nvidia but it's legacy bios , the only ones that i am using secure boot is my Ryzen + GPU  RX 550 and the office laptops (these laptops do not have a discrete card) 

Do you have Nvidia ? can you try it ?

Edited October 13, 20214 yr by Humpty

10 minutes ago, Humpty said:

but the OS without the nvidia works that's what I am trying to say.

Its one example.

With secure boot on all the drivers have to be signed, meaning you can only use drivers developed/signed by microsoft, red hat and a few others (e.g. not nvidia), makes sense if you are selling xboxs or installing machines in an accounts department where you really can't trust the users who have physical access to the machine and not much else.

https://access.redhat.com/articles/5254641

Edited October 13, 20214 yr by mSparks

2 minutes ago, mSparks said:

Its one example.

With secure boot on all the drivers have to be signed, meaning you can only use drivers developed/signed by microsoft, red hat and a few others (e.g. not nvidia), makes sense if you are selling xboxs or installing machines in an accounts department where you really can't trust the users who have physical access to the machine and not much else.

https://access.redhat.com/articles/5254641

Fine , they would need to be signed MS what i believe is known WHQL (which screwed up anyway)  , but then why is Ubuntu working without any issues ?    

We have 3 NUC's at work , two are on 2016 server and one is on Ubuntu server and all three are Secure boot / UEFI , even Ubuntu works fine. 

 

 

11 minutes ago, Humpty said:

but then why is Ubuntu working without any issues ? 

they got theirs signed by microsoft

https://wiki.ubuntu.com/UEFI/SecureBoot

6 minutes ago, mSparks said:

they got theirs signed by microsoft

https://wiki.ubuntu.com/UEFI/SecureBoot

fair enough , but what I feel is only the branded systems / laptops are loaded with MS keys and not the assembled one's ? 

Edited October 13, 20214 yr by Humpty

3 minutes ago, Humpty said:

fair enough , but what I feel is only the branded systems / laptops are loaded with MS keys and not the assembled one's ? 

not sure, afaik the keys are in the motherboard bios chips, so it will depend on the motherboard manufacturer.

I'd guess the steam gear has valves keys and no one elses for example.

7 minutes ago, mSparks said:

not sure, afaik the keys are in the motherboard bios chips, so it will depend on the motherboard manufacturer.

I'd guess the steam gear has valves keys and no one else for example.

Yeah that would probably depend on the manufacturer and BIOS they use / design , and most OEM's have windows ready Desktops / Laptops  so they are probably MS signed 

. I would not want a computer with access rights and that too only that sit with MS.

I am actually tempted to try out some other flavor of linux with secure boot which probably is not using MS signed keys , any idea which ?

 

Edited October 13, 20214 yr by Humpty