Secure boot, please clarify!
Secure boot, please clarify!
The only reason resetting factory keys won’t allow the system to boot is if your secondary drive contains a Linux partition. Otherwise, it should boot normally. Secure Boot is one of the most perplexing settings on a motherboard’s BIOS, due to the complicated steps needed to enable or disable it. On some boards, disabling Secure Boot required deleting the factory keys, even though a setting named “Disable Secure Boot” existed. It makes sense to be cautious about this, since its implementation is often confusing and not very intuitive.
Absolutely, I have a backup Linux installation and can switch between systems!
Ensuring Secure Boot is enabled can cause issues with the Linux Mint partition. There are alternatives to resolve this by configuring Secure Boot support, so reviewing related guides might be helpful. Keep in mind that the solution involves reverting Secure Boot to its previous state.
So then it's set to "Standard" because that's the default for Windows only. You need a Windows bootloader and it should be changed to something like "Other" or whatever your board supports. Now it can work with Linux distros that use SecureBoot, such as Ubuntu. Make sure your bootloader also backs SecureBoot. Be careful with some boards like MSI—they might just accept any key without checking, which goes against SecureBoot's goals. I'm not sure if MSI has fixed this issue.
It’s interesting how this project turned out. Updating to Win11 with secure boot needed some adjustments—first fixing the Linux setup, then turning on secure boot and finishing the updates. It seems I might have overlooked a few steps beforehand. Now that I’m more familiar, I know enabling secure boot could affect Linux, especially since I use GRUB. What’s the best approach? I’ve never dealt with all of this before and it worked perfectly before.
Another choice exists, a fresh setup of Windows 11 via a Rufus installer, which removes the Secure Boot need. I’d likely opt for the convenience side instead.
Not your responsibility—it's the Linux distributions that move slowly. Ubuntu handles things easily. Other distros were playing with excuses, grumbling, and eventually understood how crucial it was, then they joined in. The simplest way is to run WSLg on Windows 11.
I am not sure to be honest for Linux side of things. I am sure they are guides online. Problem is finding modern ones. If WSL isn't option for you or Ubuntu, it seems that Linux Mint doesn't have an out of the box Secure Boot support, so it seems to be a week-end project. There is a 25-page documentation on how add support for Secure Boot on Linux Mint OS, which I found under Linux Mint website: https://community.linuxmint.com/tutorial/view/2496 PDF doc: https://drive.google.com/file/d/1PI0GAK0...2fPcL/view
You're really frustrated. This setup seems overly complicated for someone who isn't new to tech. The suggestion to try Rufus W11 might work, but I'm worried about losing everything if I have to reinstall everything again. I just want to keep my files and programs intact.
I'm not sure how to explain this. Many distributions handle things easily (Fedora, RedHat, Zorin, SUSE, Manjaro). Why do others seem to need advanced knowledge? This is definitely the Linux side of things. That's why, as a developer, I rely on WSL and call it a win. Merge both environments together—no more endless adjustments. It works just install or update the distro/software and you're good to go.