#cryptohagen<p>Microsoft has a signing key that many <a href="https://social.data.coop/tags/Linux" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>Linux</span></a> distributions use to support <a href="https://social.data.coop/tags/SecureBoot" class="mention hashtag" rel="nofollow noopener" target="_blank">#<span>SecureBoot</span></a>, and that key expire on September 11, 2025</p><p>A replacement key has existed since 2023, but apparently - many systems don’t support it yet</p><p>Fixing this problem requires firmware updates from original equipment manufacturers (OEM) but there is a risk that not all OEMs will issue updates - especially those for older, or less popular devices<br><a href="https://www.techradar.com/pro/security/linux-users-are-about-to-face-another-major-microsoft-secure-boot-issue" rel="nofollow noopener" translate="no" target="_blank"><span class="invisible">https://www.</span><span class="ellipsis">techradar.com/pro/security/lin</span><span class="invisible">ux-users-are-about-to-face-another-major-microsoft-secure-boot-issue</span></a></p>
Administered by:
#SecureBoot
2 posts2 participants0 posts today
Some Linux users might be interested, reading about this (Subscriber link, that bypasses the Paywall, since I find this information important to spread for awareness):
https://lwn.net/SubscriberLink/1029767/0a550f0972703141/
„Linux users who have Secure Boot enabled on their systems knowingly or unknowingly rely on a key from Microsoft that is set to expire in September. After that point, Microsoft will no longer use that key to sign the shim first-stage UEFI bootloader that is used by Linux distributions to boot the kernel with Secure Boot. But the replacement key, which has been available since 2023, may not be installed on many systems; worse yet, it may require the hardware vendor to issue an update for the system firmware, which may or may not happen.“
LWN.netLinux and Secure Boot certificate expirationLinux users who have Secure Boot enabled on their systems knowingly or unknowingly rely on a ke [...]
#Linux users are in for a surprise party on Microsoft's terms—turns out your Secure Boot relies on good ol' Bill Gates' blessing, which is expiring soon 
. Who knew the Linux community's favorite pastime was waiting for #Microsoft to decide when their systems will no longer boot! 
https://lwn.net/SubscriberLink/1029767/43b62a7a7408c2a9/ #SecureBoot #SurpriseParty #TechNews #HackerNews #ngated
LWN.netLinux and Secure Boot certificate expirationLinux users who have Secure Boot enabled on their systems knowingly or unknowingly rely on a ke [...]
Das hier ist das einzige funktionierende #howto um #Fedora Workstation mit #secureboot und #NVidia Treibern zu betreiben. Alle anderen gefundenen Anleitungen haben nicht funktioniert und zu nicht startenden Systemen geführt 
https://github.com/roworu/nvidia-fedora-secureboot
GitHubGitHub - roworu/nvidia-fedora-securebootContribute to roworu/nvidia-fedora-secureboot development by creating an account on GitHub.
Windows Secure Boot Certificate Expired in June, Microsoft Issues Warning
https://gbhackers.com/windows-secure-boot-certificate-expired-in-june/
GBHackers Security | #1 Globally Trusted Cyber Security News Platform · Windows Secure Boot Certificate Expired in June, Microsoft Issues WarningMicrosoft has issued an urgent warning to Windows users about an impending security certificate expiration that could significantly impact device functionality.
Coucou,
j'ai récup à la poubelle un hp élite d'entreprise sous windows 11, que j'aimerais évidemment passer sur debian, sauf qu'il y a un mot de passe sur le bios qui m'empêche d'y accéder, et vu que j'ai récup l'ordi à la schlague je peux pas contacter le constructeur. Le bios est uniquement accessible via windows, c'est protégé via hp secure boot.
Quelles pistes pour virer le mot de passe et booter sur ma clé d'installation la linuxteam ?
J'ai vu la possibilité de démonter l'ordi et enlever la batterie de la carte mère mais j'ai vu des avis divergents sur cette technique.
Replied in thread
@Tourma Most linux distros support #SecureBoot.
Linux Boot Process Explained
Download Now from Google Play
https://play.google.com/store/apps/details?id=com.piembsystech&pcampaignid=web_share Visit for more : 
https://piembsystech.com/
Microsoft warnt: UEFI Secure Boot-Zertifikate laufen 2026 ab. Betroffen sind alle Windows-Versionen seit 2012. Ohne Update könnte die Fähigkeit zum sicheren Booten beeinträchtigt werden. #Microsoft #SecureBoot https://winfuture.de/news,152120.html?utm_source=Mastodon&utm_medium=ManualStatus&utm_campaign=SocialMedia
WinFuture.de · Erinnerung zum Patch-Day: Windows Secure Boot-Zertifikat läuft ab
Continued thread
Wollt Ihr euren Rechner vor unerlaubtem Zugriff schützen, ist die Festplattenverschlüsselung um einiges effektiver.
Solange Ihr bspw. kein Journalist in einem falschen Land/etc. seid, ist SecureBoot meines Erachtens sowieso nicht nützlich. Und wenn doch, dann seid Ihr mit Tails-Linux besser dran :)
#linux #opensource #secureboot
(2/2)
Ubuntu Security ‘Oversight’ Lets Attackers Access Encrypted Systems #news #dracut #secureboot #security #zfs
https://www.omgubuntu.co.uk/2025/07/ubuntu-security-initramfs-bypass-encryption
OMG! Ubuntu · New Linux Security Flaw Uses Initramfs to Inject MalwareA newly found security flaw in Ubuntu could allow attackers with physical access to bypass full disk encryption. Learn how the attack works.
Love it: #uefi #secureboot on a #raspberrypi .. a piece of cake it seems these days - thank you #debian
Vorbereiten auf Einschlag: Microsoft warnt vor Secure-Boot-Zertifikat-Update
"Bereite dich auf das erste globale, großflächige Secure-Boot-Zertifikat-Update vor", warnt Microsoft. Nicht nur Windows ist betroffen.
#IT #Linux #macOS #Microsoft #SecureBoot #Security #Windows #news @de_edv
heise online · Vorbereiten auf Einschlag: Microsoft warnt vor Secure-Boot-Zertifikat-Update