{"id":536554,"date":"2023-01-06T21:15:39","date_gmt":"2023-01-06T18:15:39","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/how-to-boot-and-install-linux-on-a-uefi-pc-with-secure-boot\/"},"modified":"2023-01-06T21:15:39","modified_gmt":"2023-01-06T18:15:39","slug":"how-to-boot-and-install-linux-on-a-uefi-pc-with-secure-boot","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/how-to-boot-and-install-linux-on-a-uefi-pc-with-secure-boot\/","title":{"rendered":"#How to Boot and Install Linux on a UEFI PC With Secure Boot"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_84 counter-hierarchy ez-toc-counter ez-toc-custom ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a2df6ed82e2f\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #dd3333;color:#dd3333\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #dd3333;color:#dd3333\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6a2df6ed82e2f\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-1'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/buradabiliyorum.com\/en\/how-to-boot-and-install-linux-on-a-uefi-pc-with-secure-boot\/#%E2%80%9CHow_to_Boot_and_Install_Linux_on_a_UEFI_PC_With_Secure_Boot%E2%80%9D\" >&#8220;How to Boot and Install Linux on a UEFI PC With Secure Boot&#8221;<\/a><ul class='ez-toc-list-level-2' ><li class='ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/buradabiliyorum.com\/en\/how-to-boot-and-install-linux-on-a-uefi-pc-with-secure-boot\/#How_Secure_Boot_Works\" >How Secure Boot Works<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/buradabiliyorum.com\/en\/how-to-boot-and-install-linux-on-a-uefi-pc-with-secure-boot\/#Options_for_Installing_Linux\" >Options for Installing Linux<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/buradabiliyorum.com\/en\/how-to-boot-and-install-linux-on-a-uefi-pc-with-secure-boot\/#How_to_Disable_Secure_Boot\" >How to Disable Secure Boot<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/buradabiliyorum.com\/en\/how-to-boot-and-install-linux-on-a-uefi-pc-with-secure-boot\/#Boot_From_Removable_Media\" >Boot From Removable Media<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h1><span class=\"ez-toc-section\" id=\"%E2%80%9CHow_to_Boot_and_Install_Linux_on_a_UEFI_PC_With_Secure_Boot%E2%80%9D\"><\/span>&#8220;How to Boot and Install Linux on a UEFI PC With Secure Boot&#8221;<span class=\"ez-toc-section-end\"><\/span><\/h1>\n<div>\n<img loading=\"lazy\" decoding=\"async\" class=\"type:primaryImage\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-width: 0px;\" data-pagespeed-no-defer=\"\" src=\"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2013\/11\/ubuntu-on-surface-pro-2.jpg?width=1198&amp;trim=1,1&amp;bg-color=000&amp;pad=1,1\" alt=\"\" width=\"650\" height=\"300\" border=\"0\"\/><\/p>\n<p>New Windows PCs come with UEFI firmware and Secure Boot enabled. Secure Boot prevents operating systems from booting unless they\u2019re signed by a key loaded into UEFI \u2014 out of the box, only Microsoft-signed software can boot.<\/p>\n<p>Microsoft mandates that PC vendors allow users to disable Secure Boot, so you can disable Secure Boot or add your own custom key to get around this limitation.<\/p>\n<h2 role=\"heading\" aria-level=\"2\"><span class=\"ez-toc-section\" id=\"How_Secure_Boot_Works\"><\/span>How Secure Boot Works<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>PCs that come with Windows 10 or Windows 11 include UEFI firmware instead of the traditional BIOS. By default, the machine\u2019s UEFI firmware will only boot boot loaders signed by a key embedded in the UEFI firmware. This feature is known as \u201cSecure Boot\u201d or \u201cTrusted Boot.\u201d On traditional PCs without this security feature, a rootkit could install itself and become the boot loader. The computer\u2019s BIOS would then load the rootkit at boot time, which would boot and load Windows, hiding itself from the operating system and embedding itself at a deep level.<\/p>\n<p>Secure Boot blocks this \u2014 the computer will only boot trusted software, so malicious boot loaders won\u2019t be able to infect the system.<\/p>\n<p><strong>RELATED:<\/strong> <strong><em>How Secure Boot Works on Windows 8 and 10, and What It Means for Linux<\/em><\/strong><\/p>\n<p>On an Intel x86 PC (not ARM PCs), you have control over Secure Boot. You can choose to disable it or even add your own signing key. Organizations could use their own keys to ensure only <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/download-scripts-themes-apps\/\" data-internallinksmanager029f6b8e52c=\"9\" title=\"Download Scripts &amp; Themes &amp; Apps\" target=\"_blank\" rel=\"noopener\">app<\/a>roved Linux operating systems could boot, for example.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-width: 0px;\" data-pagespeed-lazy-src=\"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2013\/11\/secure-boot-violation-invalid-signature-detected.jpg?trim=1,1&amp;bg-color=000&amp;pad=1,1\" alt=\"\" width=\"650\" height=\"282\" border=\"0\" src=\"\/pagespeed_static\/1.JiBnMqyl6S.gif\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<h2 role=\"heading\" aria-level=\"2\"><span class=\"ez-toc-section\" id=\"Options_for_Installing_Linux\"><\/span>Options for Installing Linux<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>You have several options for installing Linux on a PC with Secure Boot:<\/p>\n<ul>\n<li><strong>Choose a Linux Distribution That Supports Secure Boot<\/strong>: Modern versions of Ubuntu \u2014 starting with Ubuntu 12.04.2 LTS and 12.10 \u2014 will boot and install normally on most PCs with Secure Boot enabled. This is because Ubuntu\u2019s first-stage EFI boot loader is signed by Microsoft. However, <a rel=\"nofollow noopener\" target=\"_blank\" href=\"https:\/\/web.dodds.net\/~vorlon\/wiki\/blog\/SecureBoot_in_Ubuntu_12.10\/\">a Ubuntu developer notes<\/a> that Ubuntu\u2019s boot loader isn\u2019t signed with a key that\u2019s required by Microsoft\u2019s certification process, but simply a key Microsoft says is \u201crecommended.\u201d This means that Ubuntu may not boot on all UEFI PCs. Users may have to disable Secure Boot to to use Ubuntu on some PCs.<\/li>\n<li><strong>Disable Secure Boot<\/strong>: Secure Boot can be disabled, which will exchange its security benefits for the ability to have your PC boot anything, just as older PCs with the traditional BIOS do. This is also necessary if you want to install an older version of Windows that wasn\u2019t developed with Secure Boot in mind, such as Windows 7.<\/li>\n<li><strong>Add a Signing Key to the UEFI Firmware<\/strong>: Some Linux distributions may sign their boot loaders with their own key, which you can add to your UEFI firmware. This doesn\u2019t seem to be a common at the moment.<\/li>\n<\/ul>\n<p>You should check to see which process your Linux distribution of choice recommends. If you need to boot an older Linux distribution that doesn\u2019t provide any information about this, you\u2019ll just need to disable Secure Boot.<\/p>\n<p>You should be able to install current versions of Ubuntu \u2014 either the LTS release or the latest release \u2014 without any trouble on most new PCs. See the last section for instructions on booting from a removable device.<\/p>\n<h2 role=\"heading\" aria-level=\"2\"><span class=\"ez-toc-section\" id=\"How_to_Disable_Secure_Boot\"><\/span>How to Disable Secure Boot<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>You can control Secure Boot from your UEFI Firmware Settings screen. To access this screen, you\u2019ll need to access the boot options menu in Windows 10 or Windows 11. To do this, click the Power Button on the Start Menu and hold down the Shift key as you click Restart. In Windows 11 this will look slightly different, but it\u2019s the same operation.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-864094\" data-pagespeed-lazy-src=\"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2013\/11\/Snag_144209ab.png?trim=1,1&amp;bg-color=000&amp;pad=1,1\" alt=\"Restart on Start Menu\" width=\"1292\" height=\"554\" src=\"\/pagespeed_static\/1.JiBnMqyl6S.gif\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<p>Your computer will restart into the advanced boot options screen. Click the Troubleshoot option here.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-864095\" data-pagespeed-lazy-src=\"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2013\/11\/Snag_1443c872.png?trim=1,1&amp;bg-color=000&amp;pad=1,1\" alt=\"Advanced boot options\" width=\"1024\" height=\"767\" src=\"\/pagespeed_static\/1.JiBnMqyl6S.gif\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<p>Then you\u2019ll want to click on \u201cAdvanced options\u201d on the next screen.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-864096\" data-pagespeed-lazy-src=\"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2013\/11\/Snag_1443c892.png?trim=1,1&amp;bg-color=000&amp;pad=1,1\" alt=\"advanced boot options troubleshoot\" width=\"1024\" height=\"767\" src=\"\/pagespeed_static\/1.JiBnMqyl6S.gif\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<p>And now, finally, you are at the Advanced options screen, which seems like it could have shown up at the last screen, but whatever. Now you can click the UEFI Firmware Settings button here. (You may not see the UEFI Settings option on a few Windows PCs, even if they come with UEFI \u2014 consult your manufacturer\u2019s documentation for information on getting to its UEFI settings screen in this case.)<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-864097\" data-pagespeed-lazy-src=\"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2013\/11\/Snag_1443c8b1.png?trim=1,1&amp;bg-color=000&amp;pad=1,1\" alt=\"advanced options\" width=\"1024\" height=\"767\" src=\"\/pagespeed_static\/1.JiBnMqyl6S.gif\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<p>You\u2019ll be taken to the UEFI Settings screen, where you can choose to disable Secure Boot or add your own key. This will look different on every computer, and probably won\u2019t be so blurry on your computer in real life.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-width: 0px;\" data-pagespeed-lazy-src=\"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2013\/11\/surface-pro-2-uefi.jpg?trim=1,1&amp;bg-color=000&amp;pad=1,1\" alt=\"\" width=\"650\" height=\"488\" border=\"0\" src=\"\/pagespeed_static\/1.JiBnMqyl6S.gif\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<h2 role=\"heading\" aria-level=\"2\"><span class=\"ez-toc-section\" id=\"Boot_From_Removable_Media\"><\/span>Boot From Removable Media<span class=\"ez-toc-section-end\"><\/span><\/h2>\n<p>You can boot from removable <a href=\"https:\/\/buradabiliyorum.com\/en\/category\/social-mediaa\/\" data-internallinksmanager029f6b8e52c=\"1\" title=\"Social Media\" target=\"_blank\" rel=\"noopener\">media<\/a> by accessing the boot options menu in the same way \u2014 hold Shift while you click the Restart option. Insert your boot device of choice, select Use a device, and select the device you want to boot from.<\/p>\n<p>After booting from the removable device, you can install Linux as you normally would or just use the live environment from the removable device without installing it.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-top: 0px; padding-left: 0px; display: inline; padding-right: 0px; border-width: 0px;\" data-pagespeed-lazy-src=\"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2013\/11\/windows-8-uefi-choose-boot-device.jpg?trim=1,1&amp;bg-color=000&amp;pad=1,1\" alt=\"\" width=\"650\" height=\"488\" border=\"0\" src=\"\/pagespeed_static\/1.JiBnMqyl6S.gif\" onload=\"pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\" onerror=\"this.onerror=null;pagespeed.lazyLoadImages.loadIfVisibleAndMaybeBeacon(this);\"\/><\/p>\n<hr\/>\n<p>Bear in mind that Secure Boot is a useful security feature. You should leave it enabled unless you need to run operating systems that won\u2019t boot with Secure Boot enabled.<\/p>\n<\/div>\n<p><script>\n setTimeout(function(){\n  !function(f,b,e,v,n,t,s)\n  {if(f.fbq)return;n=f.fbq=function(){n.callMethod?\n  n.callMethod.apply(n,arguments):n.queue.push(arguments)};\n  if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0';\n  n.queue=[];t=b.createElement(e);t.async=!0;\n  t.src=v;s=b.getElementsByTagName(e)[0];\n  s.parentNode.insertBefore(t,s) } (window, document,'script',\n  'https:\/\/connect.facebook.net\/en_US\/fbevents.js');\n   fbq('init', '335401813750447');\n   fbq('track', 'PageView');\n  },3000);\n<\/script><\/p>\n<blockquote><p><strong><span style=\"color: #ff6600;\">If you liked the article, do not forget to share it with your friends. Follow us on\u00a0<span style=\"color: #ff0000;\"><a style=\"color: #ff0000;\" href=\"https:\/\/news.google.com\/publications\/CAAqBwgKMLG0nwswvr63Aw\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">Google News<\/a><\/span>\u00a0too, click on the star and choose us from your favorites.<\/span><\/strong><\/p><\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\">For forums sites go to <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/forum.buradabiliyorum.com\/\" target=\"_blank\" rel=\"noopener\">Forum.BuradaBiliyorum.Com<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<blockquote>\n<p style=\"text-align: center;\"><strong>If you want to read more like this article, you can visit our <span style=\"color: #ff9900;\"><a style=\"color: #ff9900;\" href=\"https:\/\/en.buradabiliyorum.com\/technology\/\" target=\"_blank\" rel=\"noopener\">Technology category.<\/a><\/span><\/strong><\/p>\n<\/blockquote>\n<p><span style=\"color: black;\"><a style=\"color: #ff9900;\" href=\"https:\/\/www.howtogeek.com\/175641\/how-to-boot-and-install-linux-on-a-uefi-pc-with-secure-boot\/\" target=\"_blank\" rel=\"noopener\">Source<\/a><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>&#8220;How to Boot and Install Linux on a UEFI PC With Secure Boot&#8221; New Windows PCs come with UEFI firmware and Secure Boot enabled. Secure Boot prevents operating systems from booting unless they\u2019re signed by a key loaded into UEFI \u2014 out of the box, only Microsoft-signed software can boot. Microsoft mandates that PC vendors&#8230;<\/p>\n","protected":false},"author":1,"featured_media":536555,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"fifu_image_url":"https:\/\/www.howtogeek.com\/wp-content\/uploads\/2013\/11\/ubuntu-on-surface-pro-2.jpg?height=200p&trim=2,2,2,2","fifu_image_alt":"","footnotes":""},"categories":[18],"tags":[],"class_list":["post-536554","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology"],"_links":{"self":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/536554","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/comments?post=536554"}],"version-history":[{"count":0,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/posts\/536554\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media\/536555"}],"wp:attachment":[{"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/media?parent=536554"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/categories?post=536554"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/buradabiliyorum.com\/en\/wp-json\/wp\/v2\/tags?post=536554"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}