Interesting to learn this.īut secure boot is definitely still pushed by default and on by default on any computer I've ever seen. Apparently if you are using some legacy drivers, you must disable secure boot. It appears Windows 10 (at least some variants like Home or Pro) does allow you to boot it with secure boot disabled.

My information is a bit dated, back a couple of years when people were trying to dual boot Linux and Windows 10. But not all machines (especially some laptops) even allow disabling secure boot. If you don't need to run windows at all, it's easy to disable secure boot. Also users can add their own keys to the secure boot key store if they make a custom kernel. Linux distros work with secure boot by having MS sign the Linux distro's keys. Secure boot is enabled by default on all shipping systems right now, because Windows requires it. Future versions of Windows will not support legacy boot at all (or BIOS computers), once legacy boot disappears from PCs sometime around 2020. If using EFI at all, Windows 10 *requires* secure boot be enabled. We can all wish that EFI's secure boot doesn't matter outside of corporate computers, but we'd be mistaken. Nor would it even run without the BIOS resident in memory. I think the DVDs have some kind of dual boot functionality that boots 16-bit grub if you're using legacy boot, or the 32-bit EFI grub if you're using EFI.Īs for FreeDOS or MS-DOS, without enabling Legacy Boot, EFI will not boot MS-DOS from an MS-DOS partition.

Uefi emulator mac