Public bug reported:

During the past days, questions about Secure Boot initialization
repeated on IRC.

This is what this screen looks like on 16.04 (I don't have an 18.04 or
19.04 screen available, but the users' questions seem to suggest it
still looks similar):

https://i.stack.imgur.com/cCTiK.png

Two questions were asked primarily:
* Is this the same password I need to (enter BIOS / login to Ubuntu)?
* Do I need to remember this password?

While there is a "Learn more..." link there which probably leads to more
information about how the password is used (unfortunately I do not know
what this brings up), I believe this screen creates a serious issue for
those users who decide to initialize Secure Boot by setting a password.
Many will not keep the passphrase they enter there, will try to remember
it but forget it since (except for the next boot) they are not prompted
to enter it again until they forget.

In my opinion, this screen should at least say something like "this
password is saved into your firmware and you must store it in a secure
place where you will find it in years from now". You may want to go as
far as recommending to print or write it on a paper and store that
securely.

Years ago, few wanted to use Secure Boot, but things are changing and
not ensuring that users know what password they wrote to their Firmware
equates to breaking part of its functionality. (Having users set a
password without ensuring their good understanding of what it will be
used for also violates secure software UX engineering principles.)

** Affects: ubiquity (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1826026

Title:
  Secure Boot initialization UI needs improvements

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ubiquity/+bug/1826026/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to