you are viewing a single comment's thread
view the rest of the comments
[–] 36 points 1 year ago (4 children)

Yes, as long as you get the option to disable it. And use custom keys.

It's uh, more secure.

  • source
  • parent
  • hideshow 4 child comments
  • [–] 25 points 1 year ago (3 children)

    I enrolled custom keys and bricked my motherboard πŸ™ƒ

  • source
  • parent
  • hideshow 3 child comments
  • [–] 12 points 1 year ago (1 child)

    Same. Should've listened to securebootctl telling me the key was malformed.

  • source
  • parent
  • hideshow 1 child comment
  • [–] 7 points 1 year ago

    My keys were fine, I'd used them on a previous system. My best guess is boot failed because GPU firmware wasn't signed with my keys, only Microsoft's keys. And of course, I can't just CMOS clear, and I don't have an iGPU. It's crazy that an OS can brick my motherboard; I'd be a lot more forgiving if a BIOS option bricked it, but exposing a "brick me" option in efivars for any ring 0 software to press??

  • source
  • parent