Page 1 of 1

Secure Boot, TPM, Fast Startup, anyone?

PostPosted: Sep 19th, '23, 11:21
by kateto
Hello,
I just got a Thinkpad T490 with Windows 10 where I want to install Mageia 9 in dual boot.
The guide on Windows 8 dual boot (https://wiki.mageia.org/en/Mageia_in_du ... 8_and_over) says you must disable Secure Boot and Fast Startup before installation (they came enabled by default), but doesn't specify whether they must stay that way. I assume so, but can somebody confirm? Would Mageia start after switching them back on?

The same goes for TPM (Trusted Platform Module), which is also factory-enabled. The guide doesn't refer to that. So I disable it too, and leave it like that? Does it have any use in Mageia? Can Mageia run with it enabled?
I'm interested in these topics because I'm planning to upgrade to Windows 11, which requires Secure Boot and TPM enabled to install (I can't find whether they must stay enabled thereafter, but anyway this is not a Windows forum), so I decide whether to upgrade before installing Mageia.

So to summarize, after successful install, can Mageia run with any of these enabled? Did anybody try?

Re: Secure Boot, TPM, Fast Startup, anyone?

PostPosted: Sep 19th, '23, 12:34
by sturmvogel
Mageia does not support Secureboot as the devs deny to get the bootloader signed.

Re: Secure Boot, TPM, Fast Startup, anyone?

PostPosted: Sep 19th, '23, 18:28
by doktor5000
Fast Boot / Fast Startup does not need to be disabled.
Usually the only effect if it's enabled would be https://wiki.mageia.org/en/Mageia_in_dual_boot_with_Windows8_and_over#Cannot_mount_NTFS_partition_even_though_secure_boot_and_fast_boot_are_disabled_in_Windows

If you would enable secure boot later on, you would need to take all steps yourself beforehand to make Mageia work with secure boot.
That is at least use a signed bootloader that works with secure boot like shim, and ensure the UEFI entries are present for that bootloader.
Otherwise Mageia could not be booted anymore.

Re: Secure Boot, TPM, Fast Startup, anyone?

PostPosted: Sep 19th, '23, 21:54
by kateto
Thanks for the clarifications. What about TPM? Is everybody running Mageia with it disabled?

Re: Secure Boot, TPM, Fast Startup, anyone?

PostPosted: Sep 19th, '23, 22:14
by doktor5000
Well, you're asking the question the wrong way around. You need TPM 2.0 for the certification for windows 11, that is what most vendors want.
You also need TPM if you want to store the certificate/key store in the TPM

If you don't use it for windows you can disable it, but it also does not hurt.