LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - General (https://www.linuxquestions.org/questions/linux-general-1/)
-   -   UEFI Frustration (https://www.linuxquestions.org/questions/linux-general-1/uefi-frustration-4175440892/)

commandguru 12-15-2012 05:32 PM

Quote:

Originally Posted by snmcdonald (Post 4850069)
Yes you are correct, unfortunately Acer has locked "secure boot" to enabled on my laptop (Acer V3-551).

It's too bad we can't tell what companies have secure boot locked to enabled without buying it. It is a conspiracy against linux and other alternative operating systems. I will keep in mind of staying away from Acer. BTW, if anyone has secure boot locked to enable, please provide make and model so we don't get screwed.

thanks

TobiSGD 12-15-2012 06:29 PM

Quote:

Originally Posted by commandguru (Post 4850079)
It's too bad we can't tell what companies have secure boot locked to enabled without buying it.

You can. Any x86 machine that has a Windows 8 Logo certification must have the option to disable Secure Boot and to manage your own keys.

snmcdonald 12-15-2012 09:18 PM

Quote:

Originally Posted by TobiSGD (Post 4850108)
You can. Any x86 machine that has a Windows 8 Logo certification must have the option to disable Secure Boot and to manage your own keys.

Does this apply to amd64 machines? My Acer definitely has the Windows 8 Logo certification.

It could be a coincidence on Acers part... My Acer tech support query has been elevated to level 2, but I must wait until Monday till level 2 techs are available. Level 1 wanted my BIOS upgraded before proceeding.

TobiSGD 12-15-2012 09:36 PM

Quote:

Originally Posted by snmcdonald (Post 4850159)
Does this apply to amd64 machines? My Acer definitely has the Windows 8 Logo certification.

Yes, it applies to x86 and x86-64 (aka amd64, EM64T or x64) machines. If you have the logo and there isn't an option to disable Secure Boot. If there is not such an option than this is a fraud from Acer and you should even be able to sue them.

Ztcoracat 12-15-2012 09:51 PM

I second that; sue; indubitably-
:hattip:

snmcdonald 12-15-2012 09:55 PM

Quote:

Originally Posted by TobiSGD (Post 4850170)
Yes, it applies to x86 and x86-64 (aka amd64, EM64T or x64) machines. If you have the logo and there isn't an option to disable Secure Boot. If there is not such an option than this is a fraud from Acer and you should even be able to sue them.

ACER BIOS INFORMATION
http://i1353.photobucket.com/albums/...5F1EF89C3C.jpg

LEGACY BOOT (FOR COMPARISON)
http://i1353.photobucket.com/albums/...5DD18CA276.jpg

UEFI SECURE BOOT ENABLED (LOCKED IN AND GRAYED OUT)
http://i1353.photobucket.com/albums/...5DC77B0457.jpg

UEFI SECURE BOOT ENABLED (LOCKED IN AND GRAYED OUT) CLOSE UP
http://i1353.photobucket.com/albums/...5DC48E0340.jpg

As you can see its grayed out. Unlike the other options, I am unable to toggle it.

That makes me mad to hear that I should be able to unlock secure boot. I don't want to sue them, I would just like to disable it.

Ztcoracat 12-15-2012 10:18 PM

Quote:

Originally Posted by snmcdonald (Post 4850177)
LEGACY BOOT (FOR COMPARISON)
http://i1353.photobucket.com/albums/...5DD18CA276.jpg

UEFI SECURE BOOT ENABLED (LOCKED IN AND GRAYED OUT)
http://i1353.photobucket.com/albums/...5DC77B0457.jpg

UEFI SECURE BOOT ENABLED (LOCKED IN AND GRAYED OUT) CLOSE UP
http://i1353.photobucket.com/albums/...5DC48E0340.jpg

As you can see its grayed out. Unlike the other options, I am unable to toggle it.

That makes me mad to hear that I should be able to unlock secure boot. I don't want to sue them, I would just like to disable it.

I did a Google Search "How to unlock secure boot when it is grayed out"

https://www.google.com/#hl=en&sugexp...w=1440&bih=736
Still looking to try to help-

snmcdonald 12-15-2012 10:22 PM

I'll post back next week when I get a hold of Acer Tech Level 2 support. :S

Quote:

Their complaints are that 1) Microsoft will require hardware vendors to enable Secure Boot on machines in order to obtain the Windows 8 compatibility logo and 2) Microsoft is leaving it up to the hardware vendors as to whether the user will be able to disable the feature, and whether/what other operating system certificates will be installed in the firmware.
http://www.windowsecurity.com/articl...s-mean-IT.html

If I learned anything from this. Make sure you play with the BIOS settings before you buy.

commandguru 12-16-2012 06:47 PM

Quote:

Originally Posted by snmcdonald (Post 4850181)
If I learned anything from this. Make sure you play with the BIOS settings before you buy.

Difficult to check if secure boot can be enabled or disabled when buying a desktop/laptop online.

Quote:

Microsoft is leaving it up to the hardware vendors as to whether the user will be able to disable the feature, and whether/what other operating system certificates will be installed in the firmware.
100% BS. Boy, there noses are getting longer and longer each day. I wonder what extra incentives MS gives the OEMs to lock down secure boot even if it has the logo. Hey MS, don't BS me, OK...

snmcdonald 12-17-2012 08:27 PM

Acer Tech Level 2 support informed me that a BIOS password must be set to disable secure boot.

Strange as I have never put a password on the BIOS before.

I have a bad tendency to forget passwords that I never user. I wrote the password on the back of the laptop.

Ztcoracat 12-17-2012 08:38 PM

Quote:

Originally Posted by snmcdonald (Post 4851343)
Acer Tech Level 2 support informed me that a BIOS password must be set to disable secure boot.

Strange as I have never put a password on BIOS before.

I have a bad tendency to forget passwords that I never user. I wrote the password on the back of the laptop.

It's good that you wrote that psswrd down-
Have you now the Secure Boot disabled?

snmcdonald 12-17-2012 08:46 PM

Quote:

Originally Posted by Ztcoracat (Post 4851349)
It's good that you wrote that psswrd down-
Have you now the Secure Boot disabled?

Yes I have secure boot disabled. An administrative BIOS password is necessary to disable secure boot.

TobiSGD 12-17-2012 08:54 PM

Thanks for posting back. While I can see the reason for setting up that password when disabling Secure Boot, this should without any question have at least been documented in the manual.

commandguru 12-18-2012 10:15 AM

great work snmcdonald this is good to know

snmcdonald 12-18-2012 04:19 PM

Quote:

Originally Posted by TobiSGD (Post 4851357)
Thanks for posting back. While I can see the reason for setting up that password when disabling Secure Boot, this should without any question have at least been documented in the manual.

Good luck with that. I mentioned that to the Level 2 Tech. Acer provides a kb article on disabling secure boot but does not mention this caveat. I recommended adding a foot note at the very least.

I talked to three different level 1 techs and the one that recommended me to level 2 did not write up an advance notice so I had to re-explain the whole scenario on Monday to another level 1 tech. I doubt they will record it, hopefully somebody with this Acer problem stumbles upon this thread.

Quote:

great work snmcdonald this is good to know
Thanks Command Guru

I do feel stupid though, the solution is so simple. I've never bothered with BIOS passwords though.


All times are GMT -5. The time now is 09:26 PM.