EU: Complaint about UEFI Secure Boot obstruction mechanism

Moderators: b1o, jkerr82508

User avatar
viking60
Über-Berserk
Posts: 9351
Joined: 14 Mar 2010, 16:34

EU: Complaint about UEFI Secure Boot obstruction mechanism

Postby viking60 » 29 Mar 2013, 10:15

ImageLinux Devs have complained to the European Comission about the Windows 8 UEFI Secure Boot "obstruction mechanism".

The SUSE devs claim that Microsofts intentions are the "best" but being a Microsoft partner those statements are of insignificant value.

"There's no secret agenda, no evil plan here from Microsoft," Gerald Pfeifer, director of product management for Linux distro maker SUSE told TechNewsWorld.

The offending technology, called UEFI Secure Boot, acts as an "obstruction mechanism" to installing other operating systems on a computer because it requires a digital certificate from Microsoft to boot a system in a non-Windows OS, Reuters reported Tuesday

Any program that wants to operate in a market where Microsoft has a dominant position must have Microsoft's permission to do so because of UEFI, the Linux users group Hispalinux said

And that is actually the case since the OEM's are highly "motivated" to produce computers on Microsoft terms.
So when you are in a computer store and want to check if that computer has the obstuction mechanism turned on you could go here and find this command:

Code: Select all

 od -An -t u1 /sys/firmware/efi/vars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c/data

If it returns "1" then it is on, and that would be a good time to walk away from that computer without buying it +1
This computer will not boot Linux,Windows 7 or Windows XP: Only Windows 8.
Some firmware is broken so even if secure boot is on it will return "0" so it is hard to be sure....
You could potentially get problems like this (even if they have adjusted for that problem in the kernel).

Theoretically it will be possible to boot older Windows versions and Linux if you stand on your head and scratch your nose with your toes, but it will be hard.
Because some firmware does not accept double signing so there will be only room for one key - and that will always be the Microsoft key. So even if the Linux distro has bought a key from Microsoft it simply will not work.
If you do a triple somersault you will be able to replace it; but again...that is kind of hard.

And you might be able to turn off secure boot on your hardware - but the main issue for the EC must be the following:
Why should anyone have to turn off the MS secure booting to install another OS?
Manjaro 64bit on the main box -Intel(R) Core(TM) i7 CPU 920 @ 2.67GHz and nVidia Corporation GT200b [GeForce GTX 275] (rev a1. + Centos on the server - Arch on the laptop.
"There are no stupid questions - Only stupid answers!"

Return to “Win News”