[qubes-users] Re: Is there a way to use secure boot with qubes?

2017-11-13 Thread cooloutac
On Thursday, November 9, 2017 at 6:27:01 AM UTC-5, blacklight wrote:
> On Wednesday, 8 November 2017 20:52:14 UTC, Guerlan  wrote:
> > My computer complains about bad signature when I try to install qubes. Is 
> > there a way to install it without disabling secure boot? Does qubes support 
> > secure boot? Is there a way to install qubes keys on the BIOS? Why did it 
> > reject the keys?
> 
> the question is more that if secureboot supports qubes, rather than the 
> otherway around.  to be supported by secureboot, one would need to buy a very 
> expensive license from microsoft, something qubes is not able afford atm.

It only cost 100 dollars.  But you don't even have to use microsoft key,  you 
can create your own.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d80ff784-243c-4974-8d33-9229b06a33b4%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


Re: [qubes-users] Re: Is there a way to use secure boot with qubes?

2017-11-11 Thread Leo Gaspard
On 11/09/2017 12:27 PM, blacklight wrote:
> On Wednesday, 8 November 2017 20:52:14 UTC, Guerlan  wrote:
>> My computer complains about bad signature when I try to install qubes. Is 
>> there a way to install it without disabling secure boot? Does qubes support 
>> secure boot? Is there a way to install qubes keys on the BIOS? Why did it 
>> reject the keys?
> 
> the question is more that if secureboot supports qubes, rather than the 
> otherway around.  to be supported by secureboot, one would need to buy a very 
> expensive license from microsoft, something qubes is not able afford atm.

This is wrong.

On many computer UEFIs, you can add additional root keys. Qubes could
have a Qubes key available that people can add in their UEFI settings,
and sign the kernels etc. with it.

As far as I know that's not yet the case though, so you'd have to do the
signing yourself. A bit sad for people without TPM, but I guess the
development effort is better spent elsewhere.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/7da30d3a-5c30-6881-00aa-36df770591c7%40gaspard.ninja.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Is there a way to use secure boot with qubes?

2017-11-10 Thread Yuraeitha
On Thursday, November 9, 2017 at 11:14:13 PM UTC, Guerlan wrote:
> On Thursday, November 9, 2017 at 9:27:01 AM UTC-2, blacklight wrote:
> > On Wednesday, 8 November 2017 20:52:14 UTC, Guerlan  wrote:
> > > My computer complains about bad signature when I try to install qubes. Is 
> > > there a way to install it without disabling secure boot? Does qubes 
> > > support secure boot? Is there a way to install qubes keys on the BIOS? 
> > > Why did it reject the keys?
> > 
> > the question is more that if secureboot supports qubes, rather than the 
> > otherway around.  to be supported by secureboot, one would need to buy a 
> > very expensive license from microsoft, something qubes is not able afford 
> > atm.
> 
> thanks, now I understand. I thought qubes had a signature but it was failing 
> in my computer. I'm gonna try to install without secure boot then :)

Some motherboards require you to not only disable secure boot, but also to 
clear (delete) the keys, before it allows you to install through UEFI/EFI. I 
don't know how many motherboards does this, it's just personal experience. 

But be sure you don't got anything installed relying on the secure boot keys, 
or it's byebye to that install. Like Windows or a Linux distributions that 
supports secure boot for example. This includes any backups you got laying 
around you may want to use later.

If I recall correctly, the brand I had this issue with was an ASUS board model.
Either way, just in case you encounter this issue.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/a0e8d9b1-75ac-48c1-b350-eff60f234a84%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Is there a way to use secure boot with qubes?

2017-11-10 Thread blacklight
On Thursday, 9 November 2017 23:14:13 UTC, Guerlan  wrote:
> On Thursday, November 9, 2017 at 9:27:01 AM UTC-2, blacklight wrote:
> > On Wednesday, 8 November 2017 20:52:14 UTC, Guerlan  wrote:
> > > My computer complains about bad signature when I try to install qubes. Is 
> > > there a way to install it without disabling secure boot? Does qubes 
> > > support secure boot? Is there a way to install qubes keys on the BIOS? 
> > > Why did it reject the keys?
> > 
> > the question is more that if secureboot supports qubes, rather than the 
> > otherway around.  to be supported by secureboot, one would need to buy a 
> > very expensive license from microsoft, something qubes is not able afford 
> > atm.
> 
> thanks, now I understand. I thought qubes had a signature but it was failing 
> in my computer. I'm gonna try to install without secure boot then :)

btw you can use qubes's AEM as a poor mans secure boot solution.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/be2c15a3-b5f8-4385-9dee-8d9e7edfc0d7%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Is there a way to use secure boot with qubes?

2017-11-09 Thread Guerlan
On Thursday, November 9, 2017 at 9:27:01 AM UTC-2, blacklight wrote:
> On Wednesday, 8 November 2017 20:52:14 UTC, Guerlan  wrote:
> > My computer complains about bad signature when I try to install qubes. Is 
> > there a way to install it without disabling secure boot? Does qubes support 
> > secure boot? Is there a way to install qubes keys on the BIOS? Why did it 
> > reject the keys?
> 
> the question is more that if secureboot supports qubes, rather than the 
> otherway around.  to be supported by secureboot, one would need to buy a very 
> expensive license from microsoft, something qubes is not able afford atm.

thanks, now I understand. I thought qubes had a signature but it was failing in 
my computer. I'm gonna try to install without secure boot then :)

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/890e05a1-407a-42d1-a0ab-572d12298c18%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Is there a way to use secure boot with qubes?

2017-11-09 Thread blacklight
On Wednesday, 8 November 2017 20:52:14 UTC, Guerlan  wrote:
> My computer complains about bad signature when I try to install qubes. Is 
> there a way to install it without disabling secure boot? Does qubes support 
> secure boot? Is there a way to install qubes keys on the BIOS? Why did it 
> reject the keys?

the question is more that if secureboot supports qubes, rather than the 
otherway around.  to be supported by secureboot, one would need to buy a very 
expensive license from microsoft, something qubes is not able afford atm.

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/d992bb8c-5e8b-4bdd-8bb6-726b8cf54c3c%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.


[qubes-users] Re: Is there a way to use secure boot with qubes?

2017-11-08 Thread Guerlan
On Wednesday, November 8, 2017 at 6:52:14 PM UTC-2, Guerlan wrote:
> My computer complains about bad signature when I try to install qubes. Is 
> there a way to install it without disabling secure boot? Does qubes support 
> secure boot? Is there a way to install qubes keys on the BIOS? Why did it 
> reject the keys?

its a razer blade stealth 2016 or 2017 model

-- 
You received this message because you are subscribed to the Google Groups 
"qubes-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to qubes-users+unsubscr...@googlegroups.com.
To post to this group, send email to qubes-users@googlegroups.com.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/qubes-users/dcc9a87a-eee0-4663-b598-d15aa48150fe%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.