Hacker News Reader

Comment by Toshio | Hacker News Reader

> "So Microsoft demands(!) that all x86 PCs and laptops which are sold in its certification program have to have Secure Boot easily disable-able in the BIOS/uEFI by the end user..."

You say "easily disable-able" but that's not the case. The process of disabling SecureBoot is anything but easy, and it's undocumented.

View on HN

On my motherboard I go:

Security (tab) -> Secure Boot -> Disabled -> Save

And it is documented. It is right there in the manual. This is an ASRock motherboard produced in the last few years.

It literally is as complicated as turning on and off the internal sound or networking, or switching on USB legacy mode.

PS - This web-site shows a different ASRock motherboard with the same-ish setup: http://www.eightforums.com/tutorials/17058-secure-boot-enabl...

My experience has been: Enter uEFI > Navigate to Security > Select SecureBoot > Disable

What has your terrible experience been and on what model of computer?

Why on earth you you say that? Its just a bios setting. OK, may be average non techie person might be scared of bios settings, but if they are, there is literally no way they would or should be trying to replace Windows with Linux.

"The process of disabling SecureBoot is anything but easy, and it's undocumented"

Making things up does not somehow make your argument more convincing, it reflects poorly on you for anyone who actually uses a laptop/desktop with uEFI. If an end-user knows how to get into a BIOS, they can find the plain-text labeled option to disable.

I have a ASUS machine, I want to install Fedora from USB (but it does not work with UEFI)

Can you tell me how to disable it? I tried everything, and it did not worked...

Yes, the BIOS does have a option to disable secure boot there, but even using that option, secure boot still stays active and refuse to boot anything unsigned.

Reply on news.ycombinator.com