41
Does the SecureBoot key expiration matter if SecureBoot is disabled? (lemmy.ml)
submitted 2 months ago by to c/linux@lemmy.ml
8 comments fedilink hide all child comments
 

I have completely forgotten about the SecureBoot key expiration that is coming on Wednesday. I don't have SecureBoot enabled on any of my devices, but I wonder if it could cause issues down the line if I don't ensure that the keys have been updated?

you are viewing a single comment's thread
view the rest of the comments
[–] 15 points 2 months ago (4 children)

Nah, but there should be a BIOS/UEFI firmware update available and those are always nice to keep up with.
If Secure Boot is the security guard at the entrance then updating the BIOS/UEFI gives him the latest rulebook and will make the process simpler if you decide you want Secure Boot in the future.
The update can also have other fixes that you want.

  • permalink
  • fedilink
  • source
  • hideshow 4 child comments
    •
  • [–] 8 points 2 months ago (3 children)

    I’m not sure all devices are getting a bios update for this. Didn’t Dell confirm this some time ago? If I’m understanding things correctly, Microsoft is forcing you to: 1) get the update by installing win11 legit with no bypasses 2) get the bios update from your hardware manufacturer 3) essentially turn off secure boot.

    I think there are plenty of fully functional PCs out there, capable of running win11, but not supported because of something like tpm2.0, whose bios won’t be updated by the manufacturer, and therefore have no path to receive this update. Which means the pc will probably eventually be forced to run without secure boot.

    Which I think means if you’re a windows only user - forced obsolescence-buy a new pc. If you’re a linux user - you’re fine.

    I think? I could be completely wrong here - but that’s my understanding of it all.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 1 point 2 months ago

    Microsoft confirmed your computer will boot just fine, it’s just that secure boot is effectively off.

    It’s no different from like 80% of Linux distros that don’t support secure boot at all. Except for those you have to actually manually disable secure boot to boot.

  • permalink
  • fedilink
  • source
  • parent