Linux and Secure Boot certificate expiration : linux

[–] floofloof@lemmy.ca 15 points 7 months ago (2 children)

What a terrible system. I have a couple of computers where the vendor provides good update support, but for most of them this is not the case and you're pretty much stuck with the firmware you get. To tie Secure Boot to such a flaky set of distribution channels seems like very poor planning.

[–] onlinepersona@programming.dev 17 points 7 months ago* (last edited 7 months ago) (1 children)

Or it's on purpose to force the purchase of new hardware.

Anti Commercial-AI license

[–] granolabar@kbin.melroy.org 9 points 7 months ago

It is always about the money.

[–] khleedril@cyberplace.social 1 points 7 months ago

@floofloof @cm0002 Poor planning my ass. This was the plan all along. They [expletive] know what they are doing.

[+] ook@discuss.tchncs.de 6 points 7 months ago* (last edited 1 month ago) (2 children)

[deleted]

[–] fuckwit_mcbumcrumble@lemmy.dbzer0.com 5 points 7 months ago (2 children)

Was your bios updated in the last few years? Not when you updated it, but when the manufacturer pushed a newer update.

If it's older than 2023 then you're screwed. If it's been updated since then then you're probably fine.

[–] floofloof@lemmy.ca 4 points 7 months ago* (last edited 7 months ago)

Screwed just means you'll have to turn off Secure Boot if you ever want to reinstall Linux. And on many PCs the Secure Boot has been so badly implemented it's pretty worthless anyway. Several of mine have a root key called something like "AMI TEST KEY - DO NOT TRUST" which basically invalidates the whole system and is unfixable by the user.

[–] CCMan1701A@startrek.website 2 points 7 months ago (1 children)

i have just revived a system from 2013 with linux, if i turn off secure boot does this matter?

[–] f4f4f4f4f4f4f4f4@sopuli.xyz 4 points 7 months ago

No.

[–] Infernal_pizza@lemmy.dbzer0.com 4 points 7 months ago

Would this not also be an issue for Windows users? Or is the Windows boot loader signed with a different key?