Help in setup

[Patrick Bouldin]

Hello again,

I verified my Qubes iso and created the boot iso USB as documented.

Then I changed the target machine virtualization, and boot order to USB first - that works ok as I first tested a known usb boot to ubuntu.

When I boot to my usb for Qubes I get : 

Secure Boot Violation

“Invalid signature detected. Check Secure Boot Policy in Setup.

Any help?

Thank you,

Patrick

[Chris Laprise]

> --

You will have to turn secure boot off in your BIOS.

Chris

[Patrick Bouldin]

Thanks Chris, it's working now, installing - finally! Fingers crossed :)

Patrick 

[Chris Laprise]

> --

Congrats! If you wish to employ some boot-time security, you can install
Qubes' anti-evil-maid feature which detects tampering.

Chris

[Patrick Bouldin]

Ok that sounds good, I'll check it out.

[Radosław Szkodzinski]

Depending on the firmware, there might be a way to install your own secureboot trusted root key. Or you could use a bootloader signed with one of Microsoft keys, such as grub2 with shim.

In fact, it might be a good idea to have antievilmaid additionally signed with s secureboot key. This would not increase security beyond what AEM does (esp. if you can seal keys), but it should simplify installation.

R.
--
Sent from my Android device with K-9 Mail. Please excuse my brevity.

[hardco...@gmail.com]

It would help a lot of new starters.

I'm having to dual boot while I get Qubes 'working' how I want (mostly Windows related gaps), and having to toggle Secure Boot to switch OS is a pain ;)