On 11/09/2017 12:27 PM, blacklight wrote: > On Wednesday, 8 November 2017 20:52:14 UTC, Guerlan wrote: >> My computer complains about bad signature when I try to install qubes. Is >> there a way to install it without disabling secure boot? Does qubes support >> secure boot? Is there a way to install qubes keys on the BIOS? Why did it >> reject the keys? > > the question is more that if secureboot supports qubes, rather than the > otherway around. to be supported by secureboot, one would need to buy a very > expensive license from microsoft, something qubes is not able afford atm.
This is wrong. On many computer UEFIs, you can add additional root keys. Qubes could have a Qubes key available that people can add in their UEFI settings, and sign the kernels etc. with it. As far as I know that's not yet the case though, so you'd have to do the signing yourself. A bit sad for people without TPM, but I guess the development effort is better spent elsewhere. -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/7da30d3a-5c30-6881-00aa-36df770591c7%40gaspard.ninja. For more options, visit https://groups.google.com/d/optout.
