Home opinion-and-analysis Open Sauce Installing Windows 8 with secure boot

Author's Opinion

The views in this column are those of the author and do not necessarily reflect the views of iTWire.

Have your say and comment below.

Get all your tech news delivered to your mail box five days a week
iTWire UPDATE - it's FREE!


One of the biggest talking points in the run-up to the release of Windows 8 has been the feature that will supposedly lock down the operating system so that it cannot be infected by malware at boot-time.

Called secure boot, it is a feature made possible by the emergence of a replacement for the old BIOS (basic input output system). Known as UEFI (unified extensible firmware interface), it is now making its appearance in motherboards. (It is now commonly referred to as the UEFI BIOS and I shall use this term throughout this article.)

Microsoft has done its own implementation of secure boot for reasons it refuses to divulge; the public statements are that it is done for the security of users. A process of matching of cryptographic keys takes place at boot-time to ensure that one is booting a genuine copy of Windows 8 and that it has not been tampered with.

All Windows 8 PCs or laptops that are sold by grey-box or other dealers come with secure boot turned on. This means that one cannot install another operating system, either to replace Windows or as an addition, on the same box. Not unless the operating system can boot on a box that is configured for secure boot. Else, one has to get into the UEFI BIOS and turn off secure boot. This is possible on the x86 platform.

Motherboard manufacturers appear to be loath to use the term "secure boot" on their packaging; ASUS has a "Windows 8 ready" sticker on some boxes, with an instruction that readiness may depend on the updating of the BIOS or the installation of drivers. Gigabyte, as yet, has no boards that support secure boot for general purchase in Australia; at least not at the dealer I visited, MSY, one of the bigger franchises selling computer parts in the country.

Micro-Star International (MSI) has a sticker on the box of some boards saying "Windows 8 compatible". This is misleading as even older boards are compatible with Windows 8, just not with the newer features like secure boot. But what the manufacturer really means is that one can use the new Windows 8 features, including secure boot. At this stage, it requires an upgrade of the UEFI BIOS.

Finding a motherboard that supports secure boot is thus somewhat difficult. The dealer did have an ASUS board (P8Z77M) that I knew would be fine as one enterprising blogger has tested out a variant and installed Windows 8 with secure boot enabled. But, then, it is no fun going where others have already gone; hence I opted for an MSI board, a Z77A-G41.

An Intel i5-3330 processor and 16GB of memory were the other parts I needed to upgrade the PC on which this experiment was to be carried out. This board has no IDE interfaces so I had to buy a DVD rewriter that is connected by a SATA cable.

OWN THE FUTURE OF SOFTWARE

Tomorrow, 26 August we’re delivering a FREE day of high-impact content to give you the know-how to lead in the App Economy. Please don’t be sorry you missed it.

• Keynotes on how software is rewriting businesses the world over, including our own backyard

• View code level details with context and repair problems quickly

• Fix problems in minutes before they wreak havoc

• Streams covering DevOps, Security and Management Cloud from pioneers at the coalface.

Register Now - it's FREE!

CLICK TO REGISTER!

ITWIRE SERIES - IS YOUR BACKUP STRATEGY COSTING YOU CLIENTS?

Where are your clients backing up to right now?

Is your DR strategy as advanced as the rest of your service portfolio?

What areas of your business could be improved if you outsourced your backups to a trusted source?

Read the industry whitepaper and discover where to turn to for managed backup

FIND OUT MORE!

Sam Varghese

website statistics

A professional journalist with decades of experience, Sam for nine years used DOS and then Windows, which led him to start experimenting with GNU/Linux in 1998. Since then he has written widely about the use of both free and open source software, and the people behind the code. His personal blog is titled Irregular Expression.

Connect