Slashdot Mirror


OEMs Allowed To Lock Secure Boot In Windows 10 Computers

jones_supa writes: Hardware that sports the "Designed for Windows 8" logo requires machines to support UEFI Secure Boot. When the feature is enabled, the core software components used to boot the machine are verified for correct cryptographic signatures, or the system refuses to boot. This is a desirable security feature, because it protects from malware sneaking into the boot process. However, it has an issue for alternative operating systems, because it's likely they won't have a signature that Secure Boot will authorize. No worries, because Microsoft also mandated that every system must have a UEFI configuration setting to turn the protection off, allowing booting other operating systems. This situation may now change. At its WinHEC hardware conference in Shenzhen, China, Microsoft said the setting to allow Secure Boot to be turned off will become optional when Windows 10 arrives. Hardware can be "Designed for Windows 10," and offer no way to opt out of the Secure Boot lock down. The choice to provide the setting (or not) will be up to the original equipment manufacturer.

2 of 362 comments (clear)

  1. The sky is falling... or maybe not. by westlake · · Score: 0, Flamebait

    I am buying hardware in wholesale lots for internal corporate use.
    Hardware the users will never own or be permitted to modify without approval from above.
    Tell me why I don't want secure boot and an OS signed by Microsoft or one of the mainstream Linux distributions.

    I am a retailer in the general consumer market where bare bones or dual boot has never sold worth spitt.
    Tell me why I don't want a known-good OEM system install with an OS signed and badged by Microsoft or one of the mainstream Linux distributions.

    The geek has piggy-backed on cheap OEM hardware built for the MSDOS and Windows ecosystem since 1981 --- and when Microsoft makes a decisive move, as it has with Win 10, the geek has to move with it.
    Future motherboards will support secure boot. The mainstream Linux distributions will support secure boot --- ultimately, with a licensed key and not a hack-around.

  2. What's the problem? by Anonymous Coward · · Score: 0, Flamebait

    You fuckloads are always talking about how great Linux is because it runs on your 900 watt Pentium 60 just fine. Keep doing that.