Jun 17, 2014, 04:23 am
How to install Ubuntu on a system with UEFI Secure Boot...
The introduction of personal computers with Windows 8 preinstalled with them also introduced a controversial under-the-hood modification – Secure Boot.
Secure Boot is a technology which is included in any new computer that has Windows 8 preinstalled and the official sticker.
It is meant to check that you have a certified operating system installed on your computer before it tries to boot it.
This prevents the system from running any “non-certified” (or non-trusted) operating systems, lowering the risk that malicious code runs at boot time.
The idea itself is reasonable, but it completely ignores the fact that personal computers are able to run more than just Windows – there’s Linux, BSD variants, and plenty more. Ever since the specification came into effect, Linux developers have been working hard to support it so that people can continue installing their favorite Linux distributions.
Since manufacturers tend to stick with Microsoft’s specifications, you won’t find a lot of computers that don’t have Secure Boot. If you happen to have a computer which doesn’t include Secure Boot, then you’ll have it a lot easier by following the regular installation procedure. However, if you’re stuck with it, here’s what you’ll need to do.
Try It Normally
Since Ubuntu 12.10 and the release of 12.04.2, the distribution has added support for Secure Boot. While this support is supposed to work for most systems, it may not always be the case. The best way to find out is to try to boot the installation media and install Ubuntu onto your hard drive. Be sure, however, that you’re using the 64-bit media, as it is the only one which works with UEFI Secure Boot (this rule applies to any operating system, not just Ubuntu or Linux as a whole).
If you can’t boot the installation media or you can’t boot into your new installation, then something has gone wrong. As Secure Boot is a brand new technology, experiences can vary for everyone, with failures remaining largely unexplainable.
Disable Secure Boot
If attempting a regular installation with Secure Boot enabled worked out for you, great! If not, you may need to try something else. The specification by Microsoft states that, in order to be Windows 8 certified, it needs to allow the user to disable the technology. Therefore, you should be able to boot into your system’s BIOS and find the setting for Secure Boot and disable it. Any Windows partitions that you keep on the system will still run normally, but it just theoretically reduces the security of your system by a bit.
Turning off this feature should allow Ubuntu to be installed and run without any issues. Just remember to boot off your installation media in UEFI mode instead of BIOS mode in order to remain uniform, as Windows 8 will already be installed on your system in UEFI mode.
Re-Enable Secure Boot If Desired
From here, you’ll have two options – either keep Secure Boot off and work on your system with the slight increase in security risk, or attempt to turn Secure Boot back on. You’re more than welcome to try turning it on if you choose to do so, as you can always turn it back off if Ubuntu fails to load.
Fixing Your Booting Options
![[Image: secure_boot_boot_repair.jpg?ec7b17]](http://main.makeuseoflimited.netdna-cdn.com/wp-content/uploads/2013/02/secure_boot_boot_repair.jpg?ec7b17)
If you still have Windows alongside Ubuntu, you will most likely need to update your boot configuration so that it can correctly identify Windows, especially in a Secure Boot environment. You can easily fix any issues with the Boot-Repair utility.
get boot repair utility here - Boot repair
You’ll first need to add the PPA (personal repository) as well as install it before using it.
You can do all of this, as well as launch the utility, by running the command :
and then run to launch it.
From here, you can click on “Recommended repair”, or go into the Advanced options and make sure that the Secure Boot option is enabled (only if you chose to re-enable it again). Hopefully, after another restart, you should be good to go!
Hope this helps,
The introduction of personal computers with Windows 8 preinstalled with them also introduced a controversial under-the-hood modification – Secure Boot.
Secure Boot is a technology which is included in any new computer that has Windows 8 preinstalled and the official sticker.
It is meant to check that you have a certified operating system installed on your computer before it tries to boot it.
This prevents the system from running any “non-certified” (or non-trusted) operating systems, lowering the risk that malicious code runs at boot time.
The idea itself is reasonable, but it completely ignores the fact that personal computers are able to run more than just Windows – there’s Linux, BSD variants, and plenty more. Ever since the specification came into effect, Linux developers have been working hard to support it so that people can continue installing their favorite Linux distributions.
Since manufacturers tend to stick with Microsoft’s specifications, you won’t find a lot of computers that don’t have Secure Boot. If you happen to have a computer which doesn’t include Secure Boot, then you’ll have it a lot easier by following the regular installation procedure. However, if you’re stuck with it, here’s what you’ll need to do.
Try It Normally
Since Ubuntu 12.10 and the release of 12.04.2, the distribution has added support for Secure Boot. While this support is supposed to work for most systems, it may not always be the case. The best way to find out is to try to boot the installation media and install Ubuntu onto your hard drive. Be sure, however, that you’re using the 64-bit media, as it is the only one which works with UEFI Secure Boot (this rule applies to any operating system, not just Ubuntu or Linux as a whole).
If you can’t boot the installation media or you can’t boot into your new installation, then something has gone wrong. As Secure Boot is a brand new technology, experiences can vary for everyone, with failures remaining largely unexplainable.
Disable Secure Boot
If attempting a regular installation with Secure Boot enabled worked out for you, great! If not, you may need to try something else. The specification by Microsoft states that, in order to be Windows 8 certified, it needs to allow the user to disable the technology. Therefore, you should be able to boot into your system’s BIOS and find the setting for Secure Boot and disable it. Any Windows partitions that you keep on the system will still run normally, but it just theoretically reduces the security of your system by a bit.
Turning off this feature should allow Ubuntu to be installed and run without any issues. Just remember to boot off your installation media in UEFI mode instead of BIOS mode in order to remain uniform, as Windows 8 will already be installed on your system in UEFI mode.
Re-Enable Secure Boot If Desired
From here, you’ll have two options – either keep Secure Boot off and work on your system with the slight increase in security risk, or attempt to turn Secure Boot back on. You’re more than welcome to try turning it on if you choose to do so, as you can always turn it back off if Ubuntu fails to load.
Fixing Your Booting Options
If you still have Windows alongside Ubuntu, you will most likely need to update your boot configuration so that it can correctly identify Windows, especially in a Secure Boot environment. You can easily fix any issues with the Boot-Repair utility.
get boot repair utility here - Boot repair
You’ll first need to add the PPA (personal repository) as well as install it before using it.
You can do all of this, as well as launch the utility, by running the command :
Code:
sudo add-apt-repository ppa:yannubuntu/boot-repair && sudo apt-get update && sudo apt-get install -y boot-repairand then run
Code:
boot-repairFrom here, you can click on “Recommended repair”, or go into the Advanced options and make sure that the Secure Boot option is enabled (only if you chose to re-enable it again). Hopefully, after another restart, you should be good to go!
Hope this helps,
