Recommended Posts

Thought Microsoft Security Essentials when released would cut down on Family infecting there PC's with junk, but I find that i'm still helping family remove Trojans and junk off there PC's pretty regularly, gotten to the point only help Mom these days, rest I recommend to local small PC shop, as too much time cleaning there PCs

Most of Family though removed MSE when they saw it failed certification tests...So I guess up to them now what they use.

Maybe it's time that you educate your family instead of blaming MS for your woes....not that this has ANYTHING to do with the topic..of course.

If you turn off secure boot in the EFI Bios then no you have zero issues dual booting into any other OS. Now, if the OEM locks down the EFI bios that is booty. I build my own rigs so I never have these issues. My latest rig the EFI Bios shipped with secure boot turned on and I scratched my head for a few minutes until I hunted down why I was getting a BCD loader non signed certificate error and then turned off secure boot.

I will have to probe some of my clients white boxes and see if they have the ability to turn off secure boot.

UEFI secure boot is fine as long:

- Its allow Hardware Owner (not the hardware vendor) to change the UEFI keys

- hardware owner are allowed to disable the secure boot.

if the UEFI was set to disallow hardware owner to change the key, yes its became a locked system with planned obsolescene in mind.

its interesting that before announcing to build Surface RT themself,

Microsoft insist that users must be disallowed to disable secure boot, when secure boot is used in ARM system.

but user should be allowed to disable it on x86-64 system.

"On non-ARM systems, it is required to implement the ability to disable Secure Boot ..."

...

"On an ARM system, it is forbidden to enable Custom Mode. ... Disabling Secure MUST NOT be possible on ARM systems," Microsoft states.

why the differences?

UEFI secure boot is fine as long:

- Its allow Hardware Owner (not the hardware vendor) to change the UEFI keys

- hardware owner are allowed to disable the secure boot.

if the UEFI was set to disallow hardware owner to change the key, yes its became a locked system with planned obsolescene in mind.

its interesting that before announcing to build Surface RT themself,

Microsoft insist that users must be disallowed to disable secure boot, when secure boot is used in ARM system.

but user should be allowed to disable it on x86-64 system.

why the differences?

Because on ARM, the OS is tailored to the hardware. It's pointless. Tablets are not tinker toys. Don't want Windows 8? Buy another tablet.

  • Like 2

Because on ARM, the OS is tailored to the hardware. It's pointless. Tablets are not tinker toys. Don't want Windows 8? Buy another tablet.

Sure they are. You just need to look at sites like XDA-Developers for proof of that.

  • Like 1

If it weren't for the fact that 90% of PC users are uneducated and unwilling to learn about what they bought/use (but also cannot live without it these days) we wouldn't need "Secure Boot".

I got fed up of helping people with viruses and trojans taking up hours of my time (mostly for free) that I just prefer they go to someone else or even pay for a professional to help them now.

There is also huge numbers of user who uses "FREE" version and refuse to download update.

I wonder how many manufactures allow you to turn off secure boot and how many don't? I have never seen a list of companies that say.

I bought an ASUS laptop back in December (A45A-MX2-H). It had the ability to disable or turn off UEFI Secure Boot. It has seen three or so UEFI/BIOS updates and since then, the option has been hidden or removed.

Because on ARM, the OS is tailored to the hardware. It's pointless. Tablets are not tinker toys. Don't want Windows 8? Buy another tablet.

by your logic, Surface RT (Tegra3 - ARM based) was not a toy,

but

Surface Pro (x86-64 based) is a toy ?

surely that the opposite of what Microsoft have to say in their marketing campaign ...

Okay, you won't be able to disable it on an ARM system. You can disable it on a x86-64 systems. UEFI secure boot can be viewed as both a good and bad thing. For the majority of people using WIN8 on tablets (end user customers) how many really want to use dual boot anyways?

Most of the people in my family and my friends, simply want to turn on their computers go online, play games or do things without the hassle of viruses and their PC's giving them a hard time. People just want easy to use, reliable computers to do what they want to do.

Most tablet PC owners, or those that own portable devices are not tinkering around with things to these levels. I'm pretty certain there will be open alternatives for those which do. If you don't want to deal with UEFI Win8 lockdowns on a ARM tablet. Don't buy one, Buy another tablet. The Market will be responding to this.

An alternative to dual booting, is running Linux in a Virtual system (VMware and etc), does UEFI prevent this from happening on an ARM system? It would seem that if Linux applications were so important to somebody they would explore alternatives besides dual boot.

Hackers/Virus programmers exploit how open a system really is. If lock downs like this mean, I get less phone calls for help from family and friends. GREAT! They ain't so tech savvy to begin with. They buy a new PC, love it for awhile, and then within a couple of months are calling it piece of junk that they'd love to throw out the damn window. If WIN8 ARM tablets prove to be more stable and reliable because of a lock down like this. This should be a great thing. Less headaches for Tablet makers, Microsoft and those of us with family and friends constantly bugging us to help fix their computer issues.

I don't have people bugging me to come over and fix their xBox, their Sony Play Stations, or their iPADs or iPhones (insert list of devices more stable compared to an X86/64 PC running Windows whatever).

I wonder how many manufactures allow you to turn off secure boot and how many don't? I have never seen a list of companies that say.

It is required for Windows 8 certification. If the PC has a Windows 8 sticker, users should be able to disable it.

This topic is now closed to further replies.
  • Posts

    • Leave Secure Boot off, the Optiplex 7010 isn't getting a firmware update to support the changes...
    • Microsoft confirms Windows 11 26H2 to finally get one of the most requested features by Sayan Sen This past week Microsoft officially confirmed Windows 11 version 26H2 with the latest build, 26300.8697, for testing in the experimental Insider channel. The company also published more details about it mainly directed towards IT admins and system admins. Essentially version 26H2 will be delivered via an enablement package (eKB) over Windows 11 25H2. If you are wondering about some of the upcoming features in the next Windows version, one of them is certainly very interesting as Microsoft has confirmed it is finally bringing one of the most overwhelmingly requested features ever. March Rogers, the Partner Director of Design at Microsoft, recently highlighted some of the Search improvements that the company is testing, and during the interaction with users on X where he posted it, Rogers also confirmed that the company is working on disabling web search results inside Search. This is something which many users find quite annoying as Windows would often serve them links to Bing which it feels could be more helpful rather than bringing up the actual object or app the user may be searching for on their PC. Finally though the company is prioritizing local file search over the web. However the feature could not be disabled for many users as not all new features are immediately rolled out to everyone. Image via phantomofearth (X) Windows enthusiast phantomofearth who likes to dig deep into new builds uncovered the IDs you will need to enable these features. Using the following feature IDs the new Search-related features landing in Windows 11 26H2 can be used. Follow the steps below to enable the new Search experience on Windows 11 build 26300.8697: Download ViveTool from GitHub and unpack the files in a convenient and easy-to-find folder. Press Win + X and select Terminal (Admin). Switch Windows Terminal to the Command Prompt profile with the Ctrl + Shift + 2 shortcut or by clicking the arrow-down button at the top of the window. Navigate to the folder containing the ViveTool files with the CD command. For example, if you have placed ViveTool in C:\Vive, type CD C:\Vive. Type vivetool /enable /id: and press Enter. Restart your computer. If you change your mind and want to restore, repeat the steps above and replace /enable with /disable in the commands on steps 5 and 6. Delightedly and perhaps also expectedly, once you disable web search and other such bloat, the Windows 11 Search is said to get snappier as remarked by another Windows enthusiast Xeno.
    • Makes me think of Family Guy - "Carl Sagan's Cosmos... edited for Rednecks" 🤣 https://www.youtube.com/watch?v=Ljt5iESYA7k&t=2s
  • Recent Achievements

    • Dedicated
      Almohandis earned a badge
      Dedicated
    • Dedicated
      JuvenileDelinquent earned a badge
      Dedicated
    • First Post
      DrWankel earned a badge
      First Post
    • Reacting Well
      DrWankel earned a badge
      Reacting Well
    • Week One Done
      Supreme Spray LV earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      505
    2. 2
      +Edouard
      178
    3. 3
      PsYcHoKiLLa
      84
    4. 4
      Steven P.
      76
    5. 5
      Michael Scrip
      76
  • Tell a friend

    Love Neowin? Tell a friend!