I Disabled Secure Boot, This is What Happened!

Поделиться
HTML-код
  • Опубликовано: 15 июл 2024
  • Discussion on the perils and consequences of disabling Secure Boot in Windows 10.
    Show Notes for this Episode
    tqaweekly.com/se9ep46
    Become a member of the channel by Joining Today!!!
    / @tqaweekly
    Converse with the community on Reddit
    / tqa_weekly
    Follow TQA Weekly on
    Facebook: / tqaweekly
    Twitter: / tqaweekly
    Follow Steve Smith (Zed Axis) on
    Facebook : / zedaxis1981
    Twitter : / zedaxis
    Instagram: / zedthecoder
    For show notes to all episodes, to subscribe in more ways including our weekly newsletter, or to our custom gear and apparel, go to tqaweekly.com/
    #tqaweekly #secureboot #experiment
  • НаукаНаука

Комментарии • 76

  • @Pervy
    @Pervy 5 лет назад +14

    Thanks for explaining Secure Boot for me. Going to take a comptia a+ cert exam soon so I needed to know.

    • @HK00088
      @HK00088 2 года назад

      How’s u do the on the exam? I’m taking it in 2 months

  • @realbloxguru
    @realbloxguru 2 года назад +3

    Thanks for explaining this. My laptop had secure boot disabled for some reason. Sometimes the screen just blacks out or won't even turn on. Went to the bios setup and turned it on. It worked fine. Thank you

  • @ebkjojo1527
    @ebkjojo1527 3 года назад +1

    Bro I appreciate you man with your videos

  • @ashtonlamarre8799
    @ashtonlamarre8799 2 года назад +2

    I try and enable Secure Boot and it tells me to turn off CSM to enable Secure Boot so I do it but then when I boot up my PC, my monitor doesn’t receive a signal and is just a black screen forever. To fix this problem I have to clear the CMOS and the BIOS settings turn back to default.

  • @B5152g
    @B5152g 2 года назад +8

    Secure boot is just more BS.. more like a first step to a locked bootloader like in a cell phone to keep you from running a new OS when they stop supporting your device.

  • @lightweight1889
    @lightweight1889 Год назад

    Thank you, kind sir!

  • @johnshaw8013
    @johnshaw8013 5 лет назад +37

    Secureboot should be illegal as its just a way to bind your computer to one specific operating system.
    Android/ChromeOS have a similar mechanism...

    • @tqaweekly
      @tqaweekly  5 лет назад +8

      Maybe not illegal, but better implemented and opt in. I have TPM headers on my board, but I am not required to get the module, or use that. It should be done like that.

    • @drgr33nUK
      @drgr33nUK 4 года назад +4

      Although secboot can be used as DRM, it's not what it was designed for. Don't blame the technology, blame the vendors for restricting usage.

    • @WernerBeroux
      @WernerBeroux 3 года назад +2

      Chromebooks have something way stronger, with an official way to disable it if you wish so (it's called Developer Mode). What it does is that it disallows booting on any USB unless the machine has been factory reset. This means that if someone has physical access to your machine for a short time (e.g. airports in some countries) then that person wouldn't be able to make a copy of your encrypted data without physically extracting the disk. It also means that with enough time one could factory reset your machine and set a login prompt that steals your password but right after login in you'd actually know that it's not your genuine machine anymore and you could take actions (e.g. say change your password at least and then factory reset).
      My only wish is that you could manually enable Developer Mode without wiping after authenticating yourself in non-user space (i.e. not possible in normal boot mode but only if you boot in special mode where you need to authenticate first again).

  • @johnryanalegre8118
    @johnryanalegre8118 Год назад

    Good day im having problem in my laptop sometimes it wont start to windows, what will happen is that it always going to thinkpad setup and there will be a day that i keep on restarting and keep on going to thinkpad set up

  • @samz3789
    @samz3789 Год назад

    My laptop HD started to show sign of wear. Cloned the drive to sata adaptor and installed it in laptop. The laptop will not boot or even let me get to bios screen, only flashing cursor on dark screen. Thr' trials I managed to update the new drive with latest windows. It will boot and able to start windows with original HD in laptop and new cloned drive in the USB sata adaptor. If I disable secure boot would this solve my problem and new hd will boot?
    Laptop is HP upgraded from win7. Plus help many thanks.

  • @originofanalytics6120
    @originofanalytics6120 2 года назад

    Thank you dear

  • @pantsi
    @pantsi 3 года назад +4

    In my hp laptop secure boot was disabled and i cant enable it. In some computers like mine HP there is not supervisor password but there is administrator password. Also if i make an administrator password the secure boot option is still grayed out although i am in UEFI mode. is there a solution for this?

  • @nichollsdaniels8964
    @nichollsdaniels8964 3 года назад +6

    I disabled secure boot and did all new installation, after I got done with the new installation, I went back to the bios and turned the secure boot back on, then my computer went off, now when I turn the computer on it just shows the surface screen and goes off again

    • @tqaweekly
      @tqaweekly  3 года назад +3

      You had to reset secure boot then install windows. In your scenario the solution is to disable secure boot, it should allow windows to boot.

    • @nichollsdaniels8964
      @nichollsdaniels8964 3 года назад

      @@tqaweekly it doesn't boot, when I hit the power button it flashes with a red padlock at top side of screen

    • @WernerBeroux
      @WernerBeroux 3 года назад

      @@nichollsdaniels8964 Could you post your machine model as there are a few known laptop where secure boot is actually bugged and you may brick your machine.

    • @pepengeskalante9070
      @pepengeskalante9070 2 года назад +1

      Secure boot must be enabled before an operating system is installed. If an operating system was installed while secure boot was disabled, it will not support secure boot and a new installation is required. Secure boot requires a recent version of UEFI.

  • @propacollector3499
    @propacollector3499 3 года назад

    windows 11 older pcs will not in stall any advice

  • @HK00088
    @HK00088 2 года назад

    Hey Steve question I use Qubes OS, but so have to disable secure boot will my system still be protected and be safe?

    • @xE92vD
      @xE92vD 2 года назад

      No.
      You disabled secure boot, which means your UEFI won't check the keys and signatures anymore.

  • @gamepy4427
    @gamepy4427 3 года назад +2

    I can't start it up :(((

  • @gregmayled
    @gregmayled 2 года назад

    Right, so here's my position. PC has been running fine, but upon having a power cut the other day, when turning my pc back on, the BIOS screen loaded instead of the operating system (windows), I turned the pc off and on again and windows loaded up first time, no issues. Several days later, I use my PC again, works as normal, but the following day, after loading the pc and using it for about an hour or so, it crashes and takes me to that same BIOS screen. But this time, turning my pc off and on again brings me back to my BIOS and not to my usual Window's login screen. My M.2 NVME is not showing up in the UEFI BIOS, which is where my operating system is installed onto, but my 2 SSD's and HDD do show up. I have taken out the NVME as a precaution and re-installed it but to no luck. Might clearing the Secure Boot Keys help with this, or do I need to look elsewhere? Any help would be hugely appreciate as I use my PC for my business daily. And if I were to clear the keys, can they be restored at some point? Thanks

    • @edwardmacnab354
      @edwardmacnab354 Год назад

      he said in the video to back up your secure boot keys--he didn't mention how to do it though

  • @Jerome-uk5ck
    @Jerome-uk5ck 3 года назад

    Will you brick your pc if the BIOS mode of your OS is Legacy and you turn on secure boot?

    • @mxlord198
      @mxlord198 2 года назад

      yess as secure boot mode supports uefi and legay mode doesnt have secure boot

  • @casygames9767
    @casygames9767 3 года назад +1

    Hey,I m in ASUS x55c and to Boot Secute Control I set it to enable,and now i can t enter in BIOS anymore and i forgot my computer password.
    Pls help

  • @Elijah-wo8bm
    @Elijah-wo8bm 3 года назад +3

    this 2021, I disabled secure boot then my laptop can not boot now. hahahh. it display black screen. so i reformat my laptop then it work again. the secure boot is enabled again with the new operating system upon accessing bios. Well the bios only display when I connected my laptop to a external monitor via hdmi, because it only display black screen upon accessing bios with the laptop monitor. im afraid to disabled secure boot again, I dont need to repeat my process of reformating my laptop again.

    • @stay2Disciplined
      @stay2Disciplined 3 года назад

      I dont understand Secure boot If I disable it will I get hacked

    • @_danu
      @_danu 3 года назад

      @@stay2Disciplined no you will not get hacked

    • @stay2Disciplined
      @stay2Disciplined 3 года назад

      @@_danu or will a virus enter my computer

    • @ZueX.
      @ZueX. 2 года назад

      @@stay2Disciplined NOTHING

  • @abdullahalhasan3039
    @abdullahalhasan3039 3 года назад +3

    will I lose my current operating system if I disable secure boot??

  • @techknowledge1266
    @techknowledge1266 4 года назад +2

    I am using hp workstation pc when I disable secure boot and save changes after restarting pc when I go back to bios settings it is enabled again. I don't know what is the problem. plz tell if you know something about it,

    • @Anshuman_M
      @Anshuman_M 4 года назад +1

      Throw away your pc

    • @ojasyadohare5845
      @ojasyadohare5845 3 года назад

      did you saved them

    • @techknowledge1266
      @techknowledge1266 3 года назад

      @@ojasyadohare5845 yes... Disabled and saved... But enabled automatically after restart.

    • @suguha5908
      @suguha5908 3 года назад

      @@techknowledge1266 update ur bios

  • @fveagle6800
    @fveagle6800 3 года назад +1

    i enabled secure boot and my pc is not booting at all what should i do

    • @johncarlo1870
      @johncarlo1870 Год назад

      You have a mbr not gpt that's why you're screen is blank after enable secure boot and I don't recommend looking in bios settings and enabled other features

  • @guser8632
    @guser8632 2 года назад +1

    What happen if i enable back secure boot after clean install of windows

    • @pepengeskalante9070
      @pepengeskalante9070 2 года назад +1

      Secure boot must be enabled before an operating system is installed. If an operating system was installed while secure boot was disabled, it will not support secure boot and a new installation is required. Secure boot requires a recent version of UEFI.

  • @immasenne
    @immasenne 2 года назад +3

    Btw, Can i disable secure boot if i use windows 11?

    • @bleus4357
      @bleus4357 2 года назад

      yes, hold the shift key as you press the restart button and a list of settings pop up after restarting(ish). It’s in the advanced settings

    • @tqaweekly
      @tqaweekly  2 года назад

      Windows 11, up to this date, requires Secure Boot to be installed, and apparently there are some ways to bypass this. How well the bypass works will be determined by Microsoft and the kinds of security updates they apply to Windows 11.

    • @xE92vD
      @xE92vD 2 года назад

      @@tqaweekly Microsoft is up to something, huh. Not allowing non tech users to download any other operation system which is not signed by Microsoft.
      I mean, you can always add your own keys and signatures and get around it but for a non tech user it would be complicated as f.

    • @PatrickDAllen1
      @PatrickDAllen1 10 месяцев назад

      ​@tqaweekly you can add registry entries that turn off the Windows 11 TPM check and Secure Boot check and it works like a charm to install Win 11 on older hardware with no GPT compatibility.
      I am running Win 11 now (albeit with a ton of custom tweaks to remove bloat) on a ten year old MSI laptop with a spinny HDD that can't support GPT at all. It breathed new life into the damn thing surprisingly. And Windows update is still pulling all the necessary security updates. 👌

  • @mr.trollface4291
    @mr.trollface4291 2 года назад +1

    Bro would i able to reset my pc on secure boot disabled?

    • @xE92vD
      @xE92vD 2 года назад

      Yes.

  • @droy333
    @droy333 3 года назад

    You sound like Curtis Armstrong sometimes.

  • @efraimg8543
    @efraimg8543 4 года назад +4

    How can you backup the PK key?

    • @tqaweekly
      @tqaweekly  4 года назад +1

      Typically, option is available in the UEFI of most main boards, however, this isn’t always an option if the computer is by companies like HP. Review manual for details or provide the make and model of your computer’s main board below.

    • @efraimg8543
      @efraimg8543 4 года назад

      @@tqaweekly Thank you. I have UEFI but no Secure Boot. Why in HP doesn't allow it and how does it affect end-users? You have said that since the driver was not connected correctly, the bios forgot the information. I am not sure why.
      If you use TPM 1.2 (not Secure Boot) and the boot order changes, you will end up at the BitLocker recovery windows. but here you are talking about Secure Boot...

    • @tqaweekly
      @tqaweekly  4 года назад +2

      TPM is not secure boot. Secure boot is meant to protect operating systems from tampering. TPM protects data.

    • @efraimg8543
      @efraimg8543 4 года назад +1

      @@tqaweekly I know, but Secure Boot requires UEFI.

    • @demyk214
      @demyk214 3 года назад +1

      @@tqaweekly wrong. Trusted Platform Module ( TPM ) is for booting up windows in CSM mode and does not protect data, TPM helps you installing malware on your pc so you can lose your data with no problem 😁 You’re welcome

  • @dumerai2541
    @dumerai2541 3 года назад +1

    Dose secured boot need for kali linux

    • @xE92vD
      @xE92vD 2 года назад

      Kali Linux is not signed by Microsoft.
      You either disable secure boot or add your own keys and signatures and keep on using secure boot.

  • @johnryanalegre8118
    @johnryanalegre8118 Год назад

    Please help me on this one

  • @orlandofurioso7329
    @orlandofurioso7329 2 года назад

    Here because Steam OS wont boot, which is weird because i used dual boot Ubuntu for months

    • @xE92vD
      @xE92vD 2 года назад

      Ubuntu is signed in the secure boot by Microsoft while steamOS is not that's why.

  • @openlink9958
    @openlink9958 4 года назад +3

    Thanks!, 2:15 I have been trying to install linux in my old hp dv6 laptop It boots up really slow even with a SSD do you think this could be the problem?
    It takes the same amount of time a hdd would take...
    Edit: the option wasnt in my bios...
    Edit2: Im an idiot the heart dissapears when you edit a comment...

    • @tqaweekly
      @tqaweekly  4 года назад +1

      😂 heart reappears if I say so 😂

  • @drago6568
    @drago6568 2 года назад

    I disabled it now I can't run valorant

  • @n8n8n8n
    @n8n8n8n Год назад

    Well yeah, but with that feature turned off you can't install Windows 11

    • @PatrickDAllen1
      @PatrickDAllen1 10 месяцев назад

      Wrong. You can disable theTPM and the Secure Boot checks made by Windows 11 by adding registry keys in your registry through the REGEDIT program. I just installed Windows 11 on an old MSI laptop from over ten years ago (bought in 2013) that doesn't even have an SSD(uses an old spinny HDD) and it runs gorgeously.
      (Granted, I added many tweaks to cut Windows bloat, but the point stands. The registry entries bypassed the checks and I installed it just fine.)

  • @tariqmushtaq627
    @tariqmushtaq627 Год назад +1

    Secure boot turned off no problem for individuals, but we talk about security of an organization with vulnerabilities of such kind can harm them.
    You are talking about shit actually.
    Secondly, this is not the entire cybersecurity scenario it is 5-10 percent of the vulnerable window but for an penetration it is huge opportunity.
    In addition; you opened that window and waited , no intrusion happened because you are not a potential target.
    So guys who are listening to him and at the same time thinking secure boit is not important and planning a security role in future, be careful!!!😊

    • @edwardmacnab354
      @edwardmacnab354 Год назад +1

      i think he's directing this to individuals--corporations have their own problems like management thinking it knows more than IT