Secure Boot, TPM, Fast Startup, anyone?

This forum is dedicated to basic help and support :

Ask here your questions about basic installation and usage of Mageia. For example you may post here all your questions about getting Mageia isos and installing it, configuring your printer, using your word processor etc.

Try to ask your questions in the right sub-forum with as much details as you can gather. the more precise the question will be, the more likely you are to get a useful answer

Secure Boot, TPM, Fast Startup, anyone?

Postby kateto » Sep 19th, '23, 11:21

Hello,
I just got a Thinkpad T490 with Windows 10 where I want to install Mageia 9 in dual boot.
The guide on Windows 8 dual boot (https://wiki.mageia.org/en/Mageia_in_du ... 8_and_over) says you must disable Secure Boot and Fast Startup before installation (they came enabled by default), but doesn't specify whether they must stay that way. I assume so, but can somebody confirm? Would Mageia start after switching them back on?

The same goes for TPM (Trusted Platform Module), which is also factory-enabled. The guide doesn't refer to that. So I disable it too, and leave it like that? Does it have any use in Mageia? Can Mageia run with it enabled?
I'm interested in these topics because I'm planning to upgrade to Windows 11, which requires Secure Boot and TPM enabled to install (I can't find whether they must stay enabled thereafter, but anyway this is not a Windows forum), so I decide whether to upgrade before installing Mageia.

So to summarize, after successful install, can Mageia run with any of these enabled? Did anybody try?
kateto
 
Posts: 72
Joined: Jul 31st, '12, 13:00

Re: Secure Boot, TPM, Fast Startup, anyone?

Postby sturmvogel » Sep 19th, '23, 12:34

Mageia does not support Secureboot as the devs deny to get the bootloader signed.
sturmvogel
 
Posts: 744
Joined: Jul 30th, '12, 00:39

Re: Secure Boot, TPM, Fast Startup, anyone?

Postby doktor5000 » Sep 19th, '23, 18:28

Fast Boot / Fast Startup does not need to be disabled.
Usually the only effect if it's enabled would be https://wiki.mageia.org/en/Mageia_in_dual_boot_with_Windows8_and_over#Cannot_mount_NTFS_partition_even_though_secure_boot_and_fast_boot_are_disabled_in_Windows

If you would enable secure boot later on, you would need to take all steps yourself beforehand to make Mageia work with secure boot.
That is at least use a signed bootloader that works with secure boot like shim, and ensure the UEFI entries are present for that bootloader.
Otherwise Mageia could not be booted anymore.
Cauldron is not for the faint of heart!
Caution: Hot, bubbling magic inside. May explode or cook your kittens!
----
Disclaimer: Beware of allergic reactions in answer to unconstructive complaint-type posts
User avatar
doktor5000
 
Posts: 18074
Joined: Jun 4th, '11, 10:10
Location: Leipzig, Germany

Re: Secure Boot, TPM, Fast Startup, anyone?

Postby kateto » Sep 19th, '23, 21:54

Thanks for the clarifications. What about TPM? Is everybody running Mageia with it disabled?
kateto
 
Posts: 72
Joined: Jul 31st, '12, 13:00

Re: Secure Boot, TPM, Fast Startup, anyone?

Postby doktor5000 » Sep 19th, '23, 22:14

Well, you're asking the question the wrong way around. You need TPM 2.0 for the certification for windows 11, that is what most vendors want.
You also need TPM if you want to store the certificate/key store in the TPM

If you don't use it for windows you can disable it, but it also does not hurt.
Cauldron is not for the faint of heart!
Caution: Hot, bubbling magic inside. May explode or cook your kittens!
----
Disclaimer: Beware of allergic reactions in answer to unconstructive complaint-type posts
User avatar
doktor5000
 
Posts: 18074
Joined: Jun 4th, '11, 10:10
Location: Leipzig, Germany


Return to Basic support

Who is online

Users browsing this forum: No registered users and 1 guest