First you should meantion, that UEFI specification includes a definition of a feature to turn secures boot on and off. Vendors may not provide it, which I would expect to happen on vendors like Sony, where they do not support any "options". But most of the HW producers will IMHO enable the Secure Boot to be switched off as this is advantage for nothing and they avoid a flood of "your hardware is broken" questions.
Anyway, there is always a single assembler instruction in the code to switch from "hash is valid" to "hash is not valid"...
Power management, mobile and firmware developer on Linux. Security developer at nvidia. Ex-biologist. Content here should not be interpreted as the opinion of my employer. Also on Mastodon and Bluesky.
![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
UEFI Sec boot on/off
Date: 2012-06-10 02:43 pm (UTC)Anyway, there is always a single assembler instruction in the code to switch from "hash is valid" to "hash is not valid"...