uefisecureboot
Latest
Linux Foundation vet explains setbacks in getting a Secure Boot key for Windows 8 PCs
Linux fans wondering why they still don't have a friendly UEFI Secure Boot option for Windows 8 PCs won't get a solution in hand this week, but they'll at least get an explanation. The Linux Foundation's primary backer for the alternative OS efforts, Parallels' server CTO James Bottomley, has revealed that Microsoft's requirements for signed, Secure Boot-ready code are tough if developers aren't entirely onboard its train of thought. The Redmond crew demands a paper contract signature (remember those?), agreements on work beyond the relevant software and a packaging process that complicates attempts to use open-source tools. Bottomley has already overcome most of these challenges, although he's still waiting for a Linux Foundation-specific key that should theoretically clear a major hurdle. Whether or not that leads to a remedy in days or weeks is up to Microsoft; in the meantime, we'll take comfort in knowing that a signature is so far a convenience for booting into Linux, rather than a necessity.
Linux Foundation proposes convoluted solution for UEFI Secure Boot
With Windows 8 Microsoft is pushing manufacturers away from a traditional BIOS to UEFI with Secure Boot. But that poses problems for alternative OSes like Linux, because UEFI requires any software have a signed certificate. The Linux Foundation has been looking for a solution and thinks that it may have one. The proposed work around is a little convoluted and surprisingly involves obtaining a Microsoft signature for a new barebones bootloader. This wouldn't actually boot Linux or any other OS actually. Instead, it would then start a second bootloader, the one associated with your OS of choice. It's a little messy, but it should mean that the signed bootloader will be a catch-all solution for any operating system. Of course, it could take a while for the Foundation to actually obtain a signature from Microsoft. So "Designed for Windows 8" systems might not be able to run Linux right away, but rest assured a solution is on the way.
