{"id":1019,"date":"2013-02-12T13:18:52","date_gmt":"2013-02-12T18:18:52","guid":{"rendered":"http:\/\/blog.nccomputertech.com\/?p=1019"},"modified":"2013-02-12T13:18:52","modified_gmt":"2013-02-12T18:18:52","slug":"secure-boot-loader-now-available-to-allow-linux-to-work-on-windows-8-pcs","status":"publish","type":"post","link":"https:\/\/nccomputertech.com\/techtalk\/2013\/02\/12\/secure-boot-loader-now-available-to-allow-linux-to-work-on-windows-8-pcs\/","title":{"rendered":"Secure boot loader now available to allow Linux to work on Windows 8 PCs"},"content":{"rendered":"

Secure boot loader now available to allow Linux to work on Windows 8 PCs
\nFreeing the way for independent Linux distributions to be installed on Windows 8 computers, the Linux Foundation has released software that will allow Linux to work with computers running the UEFI (Unified Extensible Firmware Interface) firmware.
\nThe Linux Foundation Secure Boot System solves a fundamental problem for many Linux distributions, by providing a way for a Linux-based OS to run on new hardware controlled by UEFI firmware, also known as “secure-boot” technology.
\n“The Linux Foundation wishes not only to enable Linux to keep booting in the face of the new wave of secure boot systems, but also to enable those technically savvy users who wish to do so to actually take control of the secure boot process by installing their own platform key,” wrote Linux Foundation technical advisory board member James Bottomley, who led the development of the bootloader, in a statement.
\nAs a potential replacement to the long-used BIOS firmware, UEFI is an industry initiative to secure computers against malware by designing the computer’s firmware to require a trusted key before booting the operating system, or any hardware inside the computer, such as a graphics card.
\nUEFI would provide a foundation for a chain of trust that would connect all the way up to the software layer, which could thwart attempts to install illicit, and harmful, software on computers.
\nWindows 8
\nMicrosoft requires UEFI on all machines running Windows 8. While OEMs (original equipment manufacturers) have the option of providing a way to turn off UEFI so other OSes can run on the machine, many in the Linux community fear that OEMs will not provide a UEFI off-switch, thereby not allowing other OSes without a key to run on these machines.
\nA generic Linux distribution will not run on a Windows 8 computer without keys.
\n“In secure mode … the platform will only execute EFI binaries signed with a key that is whitelisted in the UEFI secure boot signature database,” Bottomley explained.
\nThe latest releases of many major Linux distributions now include a bootloader or a shim of some sort to work with UEFI, including Ubuntu 12.10 and Fedora 18. This UEFI requirement, however, has been seen as a roadblock for those who like to create their own distributions of Linux. The Linux Foundation bootloader provides a hash code, certified by Microsoft, and support infrastructure to boot a generic Linux kernel.
\n“We have in place a protocol where Microsoft is happy for us to hand off from the initial Microsoft signed EFI binary load to a separately verified EFI binary chain, which the individual distributions control,” Bottomley wrote.
\nOther efforts
\nThis is not the first approach someone in the Linux camp has devised for working with UEFI. Security developer Matthew Garrett released his own shim last year.
\nA shim is different from a bootloader even though both override the UEFI security system to load Linux. Garrett’s shim is hardcoded to work with a specific generic bootloader, called elilo, that boots the Linux kernel.
\nUEFI
\nThe Linux Foundation bootloader, which Bottomley said technically is more of “a preloader,” can work with any generic Linux bootloader. “We did this because our mission is to enable any bootloader in the Linux ecosystem to work with secure boot,” Bottomley said.
\nGarrett and Bottomley are discussing the possibility of merging Garrett’s shim with the Linux Foundation’s bootloader. Garrett helped Bottomley create the bootloader, as did other developers from the Linux Foundation, Red Hat, and Canonical.
\nUEFI has proved to be a challenge to implement even for Microsoft Windows. Garrett also reported that certain Samsung laptops running Windows 8 could permanently stop working due to a bug in how the Samsung firmware stores system crash data in the UEFI storage space.
\nvia Secure boot loader now available to allow Linux to work on Windows 8 PCs | PCWorld<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

Secure boot loader now available to allow Linux to work on Windows 8 PCs Freeing the way for independent Linux […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2},"jetpack_post_was_ever_published":false},"categories":[3,4,5,9,11],"tags":[620,1218],"class_list":["post-1019","post","type-post","status-publish","format-standard","hentry","category-hardware","category-linux","category-microsoft","category-software","category-windows","tag-linux-2","tag-windows-8"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/papNkV-gr","jetpack-related-posts":[{"id":3156,"url":"https:\/\/nccomputertech.com\/techtalk\/2013\/08\/09\/hand-of-thief-banking-trojan-doesnt-do-windows-but-it-does-linux\/","url_meta":{"origin":1019,"position":0},"title":"\u201cHand of Thief\u201d banking trojan doesn\u2019t do Windows\u2014but it does Linux","author":"NCCT","date":"August 9, 2013","format":false,"excerpt":"Signaling criminals' growing interest in attacking non-Windows computers, researchers have discovered banking fraud malware that targets people using the open-source Linux operating system. Hand of Thief, which was recently discovered by researchers from security firm RSA, sells for about $2,000 in underground Internet forums and boasts its own support and\u2026","rel":"","context":"In "Linux"","block_context":{"text":"Linux","link":"https:\/\/nccomputertech.com\/techtalk\/category\/linux\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2013\/08\/hand-of-thief-640x294.jpg?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2013\/08\/hand-of-thief-640x294.jpg?resize=350%2C200 1x, https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2013\/08\/hand-of-thief-640x294.jpg?resize=525%2C300 1.5x"},"classes":[]},{"id":3227,"url":"https:\/\/nccomputertech.com\/techtalk\/2013\/08\/20\/debian-hits-20-years-old\/","url_meta":{"origin":1019,"position":1},"title":"Debian hits 20 years old!","author":"NCCT","date":"August 20, 2013","format":false,"excerpt":"That\u2019s exactly what has happened with Debian, the OS that is maintained by a strong collective of online volunteers. Debian GNU\/Linux, is classed as a solid Linux and because of that has been used as the basis for other Linux distributions. Hell, our community\u2019s very own Shift Linux was based\u2026","rel":"","context":"In "Linux"","block_context":{"text":"Linux","link":"https:\/\/nccomputertech.com\/techtalk\/category\/linux\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":8469,"url":"https:\/\/nccomputertech.com\/techtalk\/2015\/07\/15\/rare-breed-linux-mint-17-2-offers-desktop-familiarity-and-responds-to-user-wants\/","url_meta":{"origin":1019,"position":2},"title":"Rare breed: Linux Mint 17.2 offers desktop familiarity and responds to user wants","author":"NCCT","date":"July 15, 2015","format":false,"excerpt":"These days, the desktop OSes grabbing headlines have, for the most part, left the traditional desktop behind in favor of what's often referred to as a \"shell.\" Typically, such an arrangement offers a search-based interface. In the Linux world, the GNOME project and Ubuntu's Unity desktop interfaces both take this\u2026","rel":"","context":"In "Linux"","block_context":{"text":"Linux","link":"https:\/\/nccomputertech.com\/techtalk\/category\/linux\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2015\/07\/mint172-cinn-start-menu-640x400.png?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2015\/07\/mint172-cinn-start-menu-640x400.png?resize=350%2C200 1x, https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2015\/07\/mint172-cinn-start-menu-640x400.png?resize=525%2C300 1.5x"},"classes":[]},{"id":6557,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/10\/10\/meet-linux-kernel-3-17s-best-new-features-xbox-one-controller-support-laptop-free-fall-protection-and-more\/","url_meta":{"origin":1019,"position":3},"title":"Meet Linux kernel 3.17’s best new features: Xbox One controller support, laptop ‘free fall’ protection, and more","author":"NCCT","date":"October 10, 2014","format":false,"excerpt":"Linux kernel 3.17\u2014part of the series codenamed \u201cShuffling Zombie Juror\u201d (yes, really!)\u2014is now out. This means great new features are coming to a Linux distribution near you, though the 3.17 kernel's changes mostly consist of new and improved hardware support. New versions of the Linux kernel will eventually make their\u2026","rel":"","context":"In "Linux"","block_context":{"text":"Linux","link":"https:\/\/nccomputertech.com\/techtalk\/category\/linux\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":8871,"url":"https:\/\/nccomputertech.com\/techtalk\/2016\/03\/23\/google-kills-the-chrome-app-launcher-on-windows-mac-and-linux-pcworld\/","url_meta":{"origin":1019,"position":4},"title":"Google kills the Chrome app launcher on Windows, Mac, and Linux | PCWorld","author":"NCCT","date":"March 23, 2016","format":false,"excerpt":"By Ian Paul\u00a0 | PCWorld Google\u2019s attempted invasion of the Windows desktop is now officially over. The Chrome-maker recently announced that the Chrome app launcher will be removed from Windows, Mac, and Linux in July, though it\u2019ll stick around in Chrome OS. Google says it\u2019s dumping the app launcher in\u2026","rel":"","context":"In "Software"","block_context":{"text":"Software","link":"https:\/\/nccomputertech.com\/techtalk\/category\/software\/"},"img":{"alt_text":"","src":"","width":0,"height":0},"classes":[]},{"id":5579,"url":"https:\/\/nccomputertech.com\/techtalk\/2014\/05\/13\/linux-gets-fix-for-code-execution-flaw-that-was-undetected-since-2009-ars-technica\/","url_meta":{"origin":1019,"position":5},"title":"Linux gets fix for code-execution flaw that was undetected since 2009","author":"NCCT","date":"May 13, 2014","format":false,"excerpt":"Maintainers of the Linux kernel have patched one of the more serious security bugs to be disclosed in the open source operating system in recent months. The five-year-old code-execution hole leaves computers used in shared Web hosting services particularly vulnerable, so users and administrators should make sure systems are running\u2026","rel":"","context":"In "Linux"","block_context":{"text":"Linux","link":"https:\/\/nccomputertech.com\/techtalk\/category\/linux\/"},"img":{"alt_text":"","src":"https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2014\/05\/rockhopper_penguin_sick-640x807.png?resize=350%2C200","width":350,"height":200,"srcset":"https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2014\/05\/rockhopper_penguin_sick-640x807.png?resize=350%2C200 1x, https:\/\/i0.wp.com\/nccomputertech.com\/techtalk\/wp-content\/uploads\/2014\/05\/rockhopper_penguin_sick-640x807.png?resize=525%2C300 1.5x"},"classes":[]}],"_links":{"self":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts\/1019","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/comments?post=1019"}],"version-history":[{"count":0,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/posts\/1019\/revisions"}],"wp:attachment":[{"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/media?parent=1019"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/categories?post=1019"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nccomputertech.com\/techtalk\/wp-json\/wp\/v2\/tags?post=1019"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}