Thank you sir i really need a teacher like you, and i was searching the deep explanation of this topic because it always interrupt me while installing os on laptops
To check if secure boot is enabled the faster way is to type Windows+R and in the run command you type "msinfo32" and the secure boot activation status is on the general page. So you don't have to remember the powershell command :)
Thank you so much for this detailed explanation. i'm in IoT Space and secure boot is one of the major topics we discuss. i assume that it is pretty much the same concept, right?
Much of IoT is embedded Linux and Linux can support secure boot, just not sure how or if vendors will support something like secure boot or another method. Thanks for the question!
Reach out to your motherboard support site, I would try and email them for the information. This is typically developer's information so they generally do not make it easily accessible to the public.
Thank you very much for your video ! That was very well, slowly explained. Thanks a lot ! I have one Query. What will be the steps for Windows Installation on Hyper-v Generation 2 machine in Secure Boot Environment by using PXE server. How we sign ipxe.efi and other files... Can you help me on this.. Thanks
Hi Lowell, I totally missed this video but this is very interesting! In your examples we see the certificates will expire this year. Do you know what happens if for X reasons the certificate is not automatically updated? Will the computer simply refuse to start, or will you see a popup in Windows telling you to do something asap? Thanks.
This doc has a great deal of details on the certificates and updating, it is not really clear about your question but it does provide for OEM updating and Microsoft updating of certificates. Yes the boot process will stop if any secure boot component is not correct. You can turn off secure boot and troubleshoot the problem and then when resolved put your system back into secure mode. docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-secure-boot-key-creation-and-management-guidance
Nice and clear info so I'm hoping you can tell me what I can do to get an after market graphics card to boot on a Dell PC with Secure boot enabled? :) The PC will boot with the original Nvidia card and secure boot enabled but I bought an AMD based MSI card and it freezes the boot with secure boot enabled. Dell says it's MSI who need to get the drivers signed. MSI support don't understand the question and say it's a Dell motherboard problem. Is there anything I, as a consumer, can do to get secure boot to work in this case?
Make sure you have UEFI Version 2.3.1 or greater, turn on the feature and attempt to boot, if it fails you can turn off secure boot and try booting again. I have successfully enable secure boot on PCs and virtual machines without reinstalling. If you need to troubleshoot your boot process you have to turn it off, fix your problem and then turn it on again. It is extra steps for the IT pro but the security is worth it.
у меня Secure Boot серым цветом в биосе, я не могу на него даже перейти чтобы нажать энтр. у меня виндовс 10, ноут HP 250 G6, я обновил биос на последнюю, но ничего не помогут, как перейти в этот раздел?
Для включения безопасной загрузки необходимо отключить как поддержку предыдущих версий, так и быструю загрузку. support.hp.com/us-en/document/c03653226 Спасибо за просмотр!
The way you teach it´s just priceless!!!
Thank you for watching!
Thank you sir i really need a teacher like you, and i was searching the deep explanation of this topic because it always interrupt me while installing os on laptops
Thank you for watching
Thank you very much for your video ! That was very well, slowly explained. Thanks a lot !
Thanks for watching!
Very well done. This explanation made this tech very exciting. Rebooting and checking my bios right now.
Glad it helped!
Good information as always Mr. Vanderpool. Thanks for all you do.
Thanks always for taking the time to watch!
Great video, much detailed info.
😃
Thank you for watching!
yea man these are great services you teach about :)@@TechsavvyProductions
To check if secure boot is enabled the faster way is to type Windows+R and in the run command you type "msinfo32" and the secure boot activation status is on the general page. So you don't have to remember the powershell command :)
Thanks for the tip!
always Top !!thanks Sir Vanderpool
Thank you for watching!
I'm lucky I found this channel ❤
We are grateful you enjoy and support the channel.
Excellent material, superbly delivered!
Glad you enjoyed it!
Really helpful and very well explained, thank you so much?
Thank you for watching!
So clear and interesting !. Loved it. Thanks for the hard work !! Subscribing !!
Thank you for watching!
Thank you so much for this detailed explanation. i'm in IoT Space and secure boot is one of the major topics we discuss. i assume that it is pretty much the same concept, right?
Much of IoT is embedded Linux and Linux can support secure boot, just not sure how or if vendors will support something like secure boot or another method. Thanks for the question!
How did you get to the allowed signature databases ? at 5m28 ? I can't find them on Internet...
Reach out to your motherboard support site, I would try and email them for the information. This is typically developer's information so they generally do not make it easily accessible to the public.
Thank you very much for your video ! That was very well, slowly explained. Thanks a lot !
I have one Query. What will be the steps for Windows Installation on Hyper-v Generation 2 machine in Secure Boot Environment by using PXE server.
How we sign ipxe.efi and other files...
Can you help me on this..
Thanks
Thanks for the comment and great question, I am not sure about the PXE files but will look into it. Thanks for watching.
Hi Lowell, I totally missed this video but this is very interesting! In your examples we see the certificates will expire this year. Do you know what happens if for X reasons the certificate is not automatically updated? Will the computer simply refuse to start, or will you see a popup in Windows telling you to do something asap? Thanks.
This doc has a great deal of details on the certificates and updating, it is not really clear about your question but it does provide for OEM updating and Microsoft updating of certificates. Yes the boot process will stop if any secure boot component is not correct. You can turn off secure boot and troubleshoot the problem and then when resolved put your system back into secure mode. docs.microsoft.com/en-us/windows-hardware/manufacture/desktop/windows-secure-boot-key-creation-and-management-guidance
Nice and clear info so I'm hoping you can tell me what I can do to get an after market graphics card to boot on a Dell PC with Secure boot enabled? :) The PC will boot with the original Nvidia card and secure boot enabled but I bought an AMD based MSI card and it freezes the boot with secure boot enabled. Dell says it's MSI who need to get the drivers signed. MSI support don't understand the question and say it's a Dell motherboard problem. Is there anything I, as a consumer, can do to get secure boot to work in this case?
Dell forums show this is a common problem with Non-Dell graphic cards. In your case you may have to live without secure boot.
Great!
Thank you for watching
I have a question:Should I active în bios the secure boot (beceause I have already installed windows 11 when I buy it)??
Having TPM and secure boot really improves malicious code from entering the OS during the critical boot process. Yes, turn it on.
@@TechsavvyProductions thanks Savy
if you enable the secure boot in uefi settings will you be able to boot into windows or would you need a clean installation ?
Make sure you have UEFI Version 2.3.1 or greater, turn on the feature and attempt to boot, if it fails you can turn off secure boot and try booting again. I have successfully enable secure boot on PCs and virtual machines without reinstalling. If you need to troubleshoot your boot process you have to turn it off, fix your problem and then turn it on again. It is extra steps for the IT pro but the security is worth it.
good video
Glad you enjoyed
How do we update the digital certifications in windows 10.
docs.fortinet.com/document/fortiauthenticator/5.5.0/cookbook/494798/manually-importing-the-client-certificate-windows-10
it says boot menu what do I do?
Be sure to download the video notes, they are very helpful not only to review the video but when you are not sure of your next step.
у меня Secure Boot серым цветом в биосе, я не могу на него даже перейти чтобы нажать энтр. у меня виндовс 10, ноут HP 250 G6, я обновил биос на последнюю, но ничего не помогут, как перейти в этот раздел?
Для включения безопасной загрузки необходимо отключить как поддержку предыдущих версий, так и быструю загрузку. support.hp.com/us-en/document/c03653226
Спасибо за просмотр!
@@TechsavvyProductions эта функция у меня серым цветом помечена не могу ее выбрать
❤
Thank you for watching