Skip to content

Commit 6f1e653

Browse files
crawfxrdjackpot51
authored andcommitted
docs: Update note about Secure Boot support
Secure Boot support is enabled. Make it clear in the doc that it was enabled so Windows could be installed, and not as a means for securing the system. Signed-off-by: Tim Crawford <tcrawford@system76.com>
1 parent 2e4e34b commit 6f1e653

File tree

1 file changed

+7
-4
lines changed

1 file changed

+7
-4
lines changed

docs/uefi.md

Lines changed: 7 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -14,12 +14,15 @@ Network functionality is disabled. Native PXE booting is not supported.
1414

1515
### Secure Boot
1616

17-
Secure Boot support is currently disabled.
17+
Secure Boot support is enabled since system76/firmware-open@105e74b14613
18+
(2023-04-03).
1819

19-
The implementation from 9elements is in development. If building a custom
20-
image, the edk2 config `SECURE_BOOT_ENABLE` can be set to enable support.
20+
A minimal firmware UI is available to delete all keys and enroll the default
21+
keys. It is intended that most management is done from the OS.
2122

22-
There is currently no firmware UI to view or configure Secure Boot.
23+
Note that the Secure Boot support present is only intended for allowing
24+
Microsoft Windows installation checks to pass. It should not be relied on for
25+
system security due to limitations of the implementation.
2326

2427
## Shell
2528

0 commit comments

Comments
 (0)