Dual boot system with windows about arch-secure-boot HOT 4 CLOSED

Okay sounds good that’s enough for me to dive in and give it a try. Happy to hear that It goes through its own entry and I was hoping to not have to share the private key to the windows system. If I learn anything interesting about the process I’ll report back here for others.

from arch-secure-boot.

Hello, glad you found this interesting!

I did have to install Windows as dual-boot a few times for some short experiments, always used UEFI method, Windows will just add its entry and that's it.

However you are right to suspect issues with Secure Boot - I dont know if it's possible to force Windows to use our own keypair, since I didn't need it for long I just disabled Secure Boot when I needed to boot into Windows.

Alternatively you should look into this approach: https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#Using_a_signed_boot_loader

I don't particularly like the approach, as earlier in that same wiki page they mention a downside when using manufacturer's key:

Default manufacturer/third party keys aren't in use, as they have been shown to weaken the security model of Secure Boot by a great margin[3]

But I guess it's better than disabling Secure Boot altogether :)

from arch-secure-boot.

@skbolton what did you learn? Did you find a working list of steps? best to install windows first? delete windows keys or use them?

from arch-secure-boot.

I never attempted as shortly after getting this system up and running I switched to nixos.

from arch-secure-boot.