1. Forum
  2. FidoNet
  3. alt.os.linux.mint

  • Re: UEFI secure boot certificates

    From Axel@3:633/10 to All on Friday, February 13, 2026 21:08:15
    keithr0 wrote:
    https://arstechnica.com/gadgets/2026/02/microsoft-sounds-the-alarm-about-secure-boot-certificates-expiring-later-this-year/


    Note from the comments, this also applies to Linux machines if they
    have secure boot turned on.

    so turn of SB and problem goes away? newer computers are a PITA

    --
    Linux Mint 22.3


    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Alan K@3:633/10 to All on Friday, February 13, 2026 09:34:17
    On 2/13/2026 5:08 AM, Axel wrote:
    keithr0 wrote:
    https://arstechnica.com/gadgets/2026/02/microsoft-sounds-the-alarm-about-secure-boot-certificates-expiring-later-this-year/

    Note from the comments, this also applies to Linux machines if they have secure boot turned on.

    so turn of SB and problem goes away? newer computers are a PITA

    Thank God even though mine is 1yr old, I can turn off SB. I noticed someone posted that manufacturers were going to drop that setting in the BIOS. I sure hope I read
    that wrong.


    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)
  • From Paul@3:633/10 to All on Friday, February 13, 2026 13:43:05
    On Fri, 2/13/2026 9:34 AM, Alan K wrote:
    On 2/13/2026 5:08 AM, Axel wrote:
    keithr0 wrote:
    https://arstechnica.com/gadgets/2026/02/microsoft-sounds-the-alarm-about-secure-boot-certificates-expiring-later-this-year/

    Note from the comments, this also applies to Linux machines if they have secure boot turned on.

    so turn of SB and problem goes away? newer computers are a PITA

    Thank God even though mine is 1yr old, I can turn off SB.ÿ
    I noticed someone posted that manufacturers were going to drop that
    setting in the BIOS.ÿ I sure hope I read that wrong.


    I got another hint today, about what Ubuntu has been up to :-)

    I was catching up on updates, on Ubuntu 2504 (testing DSNote installation),
    and I saw a notification at the top of the screen (this is on a machine
    that will never Secure Boot, because it has nothing to attest with).

    "Unknown App 1 hour ago

    Firmware update available for UEFI dbx
    UEFI dbx can be upgraded from version 20230501 to 20250902.
    "

    The Canonical additions to the four files in the BIOS, might be to .dbx .

    Now I have to figure out where the Microsoft PCA 2023 that is supposed
    to be installed before mid-year, goes. Which database that is.

    Paul




    --- PyGate Linux v1.5.11
    * Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)