Home | Blog | Software | Reviews and Features | Forum | Help | Donate | About us
topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • December 10, 2016, 10:36:58 AM
  • Proudly celebrating 10 years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: Circumventing UEFI/SecureBoot on a new PC  (Read 2600 times)

40hz

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 11,768
    • View Profile
    • Donate to Member
Circumventing UEFI/SecureBoot on a new PC
« on: December 06, 2012, 10:46:25 AM »
It's here. It's drear. Get over it.  :-\

UEFI enabled PCs are now shipping.

Fine if you're a Win 8 fan. But if you want to boot anything else off them you're SOL unless you take additional steps.

Fortunately OSNews is on it with a short note and two links for how to work around UEFI if you want to use Lunux or another OS. (It's a little trickier than it looks.) Article here.

Yankee Rose! :Thmbsup:

Edvard

  • Coding Snacks Author
  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 2,888
    • View Profile
    • Donate to Member
Re: Circumventing UEFI/SecureBoot on a new PC
« Reply #1 on: December 06, 2012, 01:56:23 PM »
Very nice. My kudos to Mr. Smith for going through the trouble for us.  What's even more evil about the whole situation is that it was not sold as a UEFI-enabled machine (although with Win8 installed, should be a given...), thereby taking the user unsuspected.

Former Red Hat dev Matthew Garret has come up with an alternate way that's even more involved, but does allow key signing for unknown operating systems:
http://www.zdnet.com...00008246/?s_cid=e539
Mind you, the actual signed part is not open source and includes Microsoft's signature, and so, from what I gather, it is actually following Microsoft's Secure Boot implementation specs; that is, it's not so much circumvention as it is creative compliance.

Mr. Garrett's original report here: http://mjg59.dreamwidth.org/20303.html

So until MS gets over stalling for time until it can get Win8 into some semblance of market saturation (or at least that's my take on the situation), we soldier on...

40hz

  • Supporting Member
  • Joined in 2007
  • **
  • Posts: 11,768
    • View Profile
    • Donate to Member
Re: Circumventing UEFI/SecureBoot on a new PC
« Reply #2 on: December 06, 2012, 02:07:49 PM »
So until MS gets over stalling for time until it can get Win8 into some semblance of market saturation (or at least that's my take on the situation), we soldier on...

That does seem to be the informed consensus as to what the real problem is.

And Microsoft doesn't seem to be going out of its way to dispel that conclusion either. Unless you consider their near silence on the topic plus continued stonewalling a reply. Very "Steve Jobs" that bit, don't you think?

Microsoft seems to be getting more and more like Apple with each passing day. :-\
« Last Edit: December 06, 2012, 09:35:58 PM by 40hz »

edbro

  • Charter Member
  • Joined in 2006
  • ***
  • default avatar
  • Posts: 426
    • View Profile
    • Donate to Member
Re: Circumventing UEFI/SecureBoot on a new PC
« Reply #3 on: December 06, 2012, 03:10:08 PM »
I had to figure this out yesterday when I tried to boot Acronis True Image from a bootable USB drive. True Image boots into Linux. I finally got it to boot but the screen is all garbled (separate problem).

Carol Haynes

  • Waffles for England (patent pending)
  • Global Moderator
  • Joined in 2005
  • *****
  • Posts: 7,986
    • View Profile
    • Dales Computer Services
    • Donate to Member
Re: Circumventing UEFI/SecureBoot on a new PC
« Reply #4 on: December 06, 2012, 05:32:27 PM »
The only secure boot machines I have seen so far have had the option to turn it off and return to legacy BIOS mode.

4wd

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 4,477
    • View Profile
    • Donate to Member
Re: Circumventing UEFI/SecureBoot on a new PC
« Reply #5 on: December 06, 2012, 08:17:26 PM »
I had to figure this out yesterday when I tried to boot Acronis True Image from a bootable USB drive. True Image boots into Linux. I finally got it to boot but the screen is all garbled (separate problem).

Following on from this - anyone know if the WinPE images offered by recovery software companies will still work, (eg. Paragon, Macrium) ?

I suspect possibly not and this is why Microsoft revoked the WinPE distribution licenses.

Yet another reason to carry around a LiveCD, (Linux/WinPE on Flash or optical), when looking at buying a computer, "I'll buy it if I can boot it."

Carol Haynes

  • Waffles for England (patent pending)
  • Global Moderator
  • Joined in 2005
  • *****
  • Posts: 7,986
    • View Profile
    • Dales Computer Services
    • Donate to Member
Re: Circumventing UEFI/SecureBoot on a new PC
« Reply #6 on: December 07, 2012, 03:21:13 AM »
If secure boot is on you cannot boot from an optical drive. Secure boot limits you to only booting from the Secure boot drive.

barney

  • Charter Member
  • Joined in 2006
  • ***
  • Posts: 1,282
    • View Profile
    • Donate to Member
Re: Circumventing UEFI/SecureBoot on a new PC
« Reply #7 on: December 07, 2012, 12:59:28 PM »
If secure boot is on you cannot boot from an optical drive. Secure boot limits you to only booting from the Secure boot drive.

That sounds a maintenance nightmare ... drive dies, system bricked.

Carol Haynes

  • Waffles for England (patent pending)
  • Global Moderator
  • Joined in 2005
  • *****
  • Posts: 7,986
    • View Profile
    • Dales Computer Services
    • Donate to Member
Re: Circumventing UEFI/SecureBoot on a new PC
« Reply #8 on: December 07, 2012, 02:35:25 PM »
Yep - that's what MS seem to want!

Having said that the systems I have seen so far it is easy to revert to legacy BIOS mode and do what you like, but in theory a machine could be locked by the manufacturer without the option to disable.

4wd

  • Supporting Member
  • Joined in 2006
  • **
  • Posts: 4,477
    • View Profile
    • Donate to Member
Re: Circumventing UEFI/SecureBoot on a new PC
« Reply #9 on: December 07, 2012, 06:37:45 PM »
That sounds a maintenance nightmare ... drive dies, system bricked.

Client: "Is my data secure with Windows 8?"
Sales: "Certainly!  Rest assured that if your drive starts failing there'll be no way to boot your computer to recover it."
Client: "I'll take it!"

Edvard

  • Coding Snacks Author
  • Charter Honorary Member
  • Joined in 2005
  • ***
  • Posts: 2,888
    • View Profile
    • Donate to Member
Re: Circumventing UEFI/SecureBoot on a new PC
« Reply #10 on: December 07, 2012, 09:01:37 PM »
 ;D ;D ;D