Home Business IT Open Source FreeBSD begins process to support secure boot
FreeBSD begins process to support secure boot Featured

Subscribe now and get the news that matters to your industry.

* Your Email Address:
* First Name:
* Last Name:
Industry:
Job Function:
Australian State:
Country:
Email marketing by Interspire
weebly statistics

The FreeBSD project has begun the process of making it possible for the operating system to run alongside Windows 8 on a computer which has secure boot enabled.

Secure boot is a feature of the Unified Extensible Firmware Interface or UEFI, the replacement for the BIOS on the motherboard.

Microsoft has implemented secure boot for Windows 8, using cryptographic keys for authenticating the kernel that is being loaded. This means that any other operating system looking to load itself on a secure boot-enabled Windows 8 system has to also be able to authenticate itself.

Some GNU/Linux distributions have developed their own methods of booting on such hardware. However, installing such distributions alongside Windows 8 is still not an easy task for the average user.

Veteran FreeBSD developer Marshall McKusick (pictured) told iTWire, in response to queries, "We looked to see how the Linux distros had handled secure boot. They had approached Microsoft who agreed to sign their boot loader so that the distros would be able to boot Linux.

"To avoid having to go back and re-certify and sign their boot loader every time they needed to make any change to it, the Linux folks created a very minimal "loader" that does nothing more than load their real loader which then works as before. And since the handoff is from their shim loader, for which they know the key being used, they can sign their real loader any time they need to change it.

McKusick said FreeBSD planned to do the same thing. "Indeed we will likely take the Linux shim loader, put our own key in it, and then ask Microsoft to sign it. Since Microsoft will have already vetted the shim loader code, we hope that there will be little trouble getting them to sign our version for us."

Asked about a timeline for the implementation of secure boot support, McKusick replied: "We just started pursing this after a UEFI strategy meeting at BSDCan in May, so we have not yet gotten far enough through the process to have any idea when we will be able to have something that we can use.

"Microsoft could be very responsive or not. My feeling from having talked to others is that Microsoft is only willing to go along with other operating systems at all just so that they could get the program in place. Now that they can point to at least one other example that uses secure boot they may not be in a big hurry to add more. Or they may get off the dime. We shall see."

McKusick said the goal was to have at least FreeBSD able to dual-boot on a PC running Windows 8 with secure boot.

"I don't yet know what legal limitations Microsoft will put on us signing for other folks' boot loaders. Based on past examples, we will likely only be permitted to sign our own releases," he said when asked this would also apply to forks of FreeBSD.

FreeBSD is one of three operating systems derived from the BSD which was developed at the University of California in Berkeley. All three - the others are OpenBSD and NetBSD - enjoy a very good reputation for security and run some of the internet servers with the longest uptimes.

PROTECT YOURSELF AGAINST BANDWIDTH BANDITS!

Don't let traffic bottlenecks slow your network or business-critical apps to a grinding halt. With SolarWinds Bandwidth Analyzer Pack (BAP) you can gain unified network availability, performance, bandwidth, and traffic monitoring together in a single pane of glass.

With SolarWinds BAP, you'll be able to:

• Detect, diagnose, and resolve network performance issues

• Track response time, availability, and uptime of routers, switches, and other SNMP-enabled devices

• Monitor and analyze network bandwidth performance and traffic patterns.

• Identify bandwidth hogs and see which applications are using the most bandwidth

• Graphically display performance metrics in real time via dynamic interactive maps

Download FREE 30 Day Trial!

CLICK TO DOWNLOAD!

ITWIRE SERIES - IS YOUR BACKUP STRATEGY COSTING YOU CLIENTS?

Where are your clients backing up to right now?

Is your DR strategy as advanced as the rest of your service portfolio?

What areas of your business could be improved if you outsourced your backups to a trusted source?

Read the industry whitepaper and discover where to turn to for managed backup

FIND OUT MORE!

Sam Varghese

website statistics

A professional journalist with decades of experience, Sam for nine years used DOS and then Windows, which led him to start experimenting with GNU/Linux in 1998. Since then he has written widely about the use of both free and open source software, and the people behind the code. His personal blog is titled Irregular Expression.

Connect