[9192] in athena10
[Debathena] #1152: Deal with Secure Boot on Windows 8-era hardware
daemon@ATHENA.MIT.EDU (Debathena Trac)
Tue Jun 5 10:21:20 2012
MIME-Version: 1.0
Content-Type: text/plain; charset="utf-8"
From: "Debathena Trac" <debathena@MIT.EDU>
Cc: debathena@MIT.EDU
To: achernya@MIT.EDU
Date: Tue, 05 Jun 2012 14:21:15 -0000
Reply-To:
Message-ID: <044.11f8c2f13d62ee06c654743407dd86c7@mit.edu>
Content-Transfer-Encoding: 8bit
#1152: Deal with Secure Boot on Windows 8-era hardware
-------------------------+----------------------------------
Reporter: achernya | Owner:
Type: task | Status: new
Priority: high | Milestone: Quantum Quetzalcoatl
Component: -- | Keywords:
Upstream bug: |
-------------------------+----------------------------------
Windows 8 requires that all hardware shipped with it pre-installed have
[http://technet.microsoft.com/en-us/library/hh824987.aspx Secure Boot]
enabled. This means that all hardware will have a UEFI and a TPM, along
with a database of trusted keys. The trusted key will, of course, be
Microsoft's.
This means that there will be additional hassle with new hardware bought
for the clusters. For now, an option is to go into the UEFI settings and
disable secure boot, but there is not guarantee that this will work as
expected, or will continue to be an option.
Alternatively, we could do as [http://mjg59.dreamwidth.org/12368.html
Fedora did, and pay $99 for a Microsoft-signed key] to sign our
distributions. This is a one-time fee. This is not ideal, as then we have
to deal with yet another credential, but it beats sitting and waiting for
Upstream to deal.
--
Ticket URL: <https://athena10.mit.edu/trac/ticket/1152>
Debathena <http://debathena.mit.edu>
MIT Debathena Project
