Advanced

UEFI secure booting (part 2)

Posted by jezuch on · 2 comments
mjg59's journal; By Matthew Garrett
Mail this story
Print this story

Why is this a problem? Because there's no central certification authority for UEFI signing keys. Microsoft can require that hardware vendors include their keys. Their competition can't. A system that ships with Microsoft's signing keys and no others will be unable to perform secure boot of any operating system other than Microsoft's. No other vendor has the same position of power over the hardware vendors. Red Hat is unable to ensure that every OEM carries their signing key. Nor is Canonical. Nor is Nvidia, or AMD or any other PC component manufacturer. Microsoft's influence here is greater than even Intel's.

Full Story

  Nav
» Read more about: Story Type: Editorial; Groups: Linux, Microsoft

» Get new stories by e-mail: nightly or as they are published

« Return to the newswire homepage

  Related stories
» More like this

Comments (2)

Red Hat strategy

Surely this situation could adversely impact the currently highly profitable Red Hat Inc. Matthew is not revealing what they intend doing about this legally. Possibly wise too given how hard headed Ballmer is.

CAs? bwahahaha

Yeah, we've seen some great recent example of how well central certificate authorities perform. Tres secaur.

Post a comment

A free account is needed to post. Write your comment here first: your text is kept in this browser while you sign up or log in, and is waiting for you when you come back.

Your message:
|||||
10
Markdown: **bold**, *italic*, [text](https://link), - lists, > quotes, $x^2$ for math. Formatting help

Sign up and post (it is free)  or  Log in and post