12-23-2020, 05:19 AM
Hello everybody,
first of all, thank you very much for this great tool!
I have a few questions about Secure Boot support - maybe someone can help me:
If I understand correctly, the "enrolled" key is saved in the EFI.
How can this be reversed?
I have reset the keys and all settings to default in the BIOS and even reflashed the BIOS - but the key remained.
With a Live Linux and mokutil --delete or --reset with subsequent confirmation in the "MOK Manager" worked - is that the right way?
An option for this in Ventoy might come in handy.
A Ventoy Stick with Secure Boot support also works perfectly on a device without (or with deactivated) Secure Boot.
Why then Secure Boot support is optional at all and not always automatically activated?
How do other Live CDs such as PartedMagic does this?
These boot with Secure Boot without having to import a key.
Thanks and happy holidays!
Martin
first of all, thank you very much for this great tool!
I have a few questions about Secure Boot support - maybe someone can help me:
If I understand correctly, the "enrolled" key is saved in the EFI.
How can this be reversed?
I have reset the keys and all settings to default in the BIOS and even reflashed the BIOS - but the key remained.
With a Live Linux and mokutil --delete or --reset with subsequent confirmation in the "MOK Manager" worked - is that the right way?
An option for this in Ventoy might come in handy.
A Ventoy Stick with Secure Boot support also works perfectly on a device without (or with deactivated) Secure Boot.
Why then Secure Boot support is optional at all and not always automatically activated?
How do other Live CDs such as PartedMagic does this?
These boot with Secure Boot without having to import a key.
Thanks and happy holidays!
Martin