cancel
Showing results for 
Search instead for 
Did you mean: 
insane_potato
New member
1 0 0 0
Message 1 of 2
90
Flag Post
HP Recommended

Solved!

Questions Regarding SecureBoot

Pavilion 15-cs1001ne
Microsoft Windows 10 (64-bit)

Hello, I would like to know a few things regarding the SecureBoot functionality of my laptop.

 

1) If I disable SecureBoot to try booting another Linux OS whose kernel is not signed with Microsoft's keys, will I be able to re-enable SecureBoot after I'm done with it ?

       a) Will all my data remain intact ?

       b) Will it cause any issues with BitLocker encryption even after re-enabling ?

 

2) If I keep SecureBoot disabled, as long as I have a popular AntiVirus like KasperSky, will the malware rootkits still gain access to "start-on-boot" privileges?

 

3) Is it safe to keep SecureBoot disabled, so as to dual boot a Linux distro of choice on the non system hard drive with grub bootloader set as default?

 

Thanks in advance !

 

1 REPLY 1
Level 15
Level 15
9,233 9,128 745 3,347
Message 2 of 2
53
Flag Post
HP Recommended

Solved!

Questions Regarding SecureBoot


@insane_potato wrote:

Hello, I would like to know a few things regarding the SecureBoot functionality of my laptop.

 

1) If I disable SecureBoot to try booting another Linux OS whose kernel is not signed with Microsoft's keys, will I be able to re-enable SecureBoot after I'm done with it ? >> Yes, you should be able to

       a) Will all my data remain intact ? >> Yes, as long as you do not delete it manually and intentionally

       b) Will it cause any issues with BitLocker encryption even after re-enabling ?  >> BitLocker might prompt you for your recovery key

 

2) If I keep SecureBoot disabled, as long as I have a popular AntiVirus like KasperSky, will the malware rootkits still gain access to "start-on-boot" privileges?  >> Such malware that might gain access o your start up sectors is highly unlikely nowadays. Kaspersky should be able to protect you - but nothing can guarantee you 100% security. Security is process, not one thing.

 

3) Is it safe to keep SecureBoot disabled, so as to dual boot a Linux distro of choice on the non system hard drive with grub bootloader set as default? >> Yes, it is safe. I use Ubuntu, LM and Debian with Secure Boot off and have no issues.

 

Some more info :

>> https://easylinuxtipsproject.blogspot.com/p/security.html#ID6
>> https://www.quora.com/Is-it-better-to-use-Secure-boot-than-legacy-boot-in-Windows-10

 

 


*my reply is above in red

Your feedback and update is highly appreciated
*** Click on the button below to accept this advice as a solution if it helped you
*** Don't hesitate to hit the THUMB-UP+ button below to say thanks or give like 
index.png
HP Expert - volunteer - not employed by HP Inc. *** I express personal opinion only. *** IT Commodity and Cyber Security professional *** Location/timezone: Europe
† The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation