Windows 10 Insider Preview Fast/Slow/RP Build 17134.5 - April 27 Insider

f14tomcat said:

Can you imagine having to "root" your Windows device to get tweaking done?

I can easily imagine it. Mandatory secure boot will come sooner or later. Safteynet and e-fuses next - just a matter of time.

lx07 said:

I can easily imagine it. Mandatory secure boot will come sooner or later. Safteynet and e-fuses next - just a matter of time.

Please don't laugh too hard at me. I had and still have no idea what Secure Boot is or does. It is enabled I saw in my Windows Defender Security Center under Device Security.



I clicked learn more link in there and got a 404 at MS page.

Wynona said:

Microsoft Secure Boot is a component of Microsoft's Windows 8 operating system that relies on the UEFI specification’s secure boot functionality to help prevent malicious software applications and "unauthorized" operating systems from loading during the system start-up process.

secure boot windows 10 - Bing

:) I read all that, but I have seen on the forums here, reading that some need to disable it for this or that. I never even knew it was "on" until I got the Insider build of 1803 last night. Probably on by default. Seems like a good thing to have.

Access Denied said:

Probably on by default. Seems like a good thing to have.

Generally it is a good thing - as long as you can turn it off. It means things you boot haven't been tampered with.

If it was mandatory and your system would never boot an OS not signed by Microsoft keys that would be a bad thing. You would not be able to load Linux for example - you would be forever tied to Windows 10. The same thing already happens with some phones (mainly supplied by service providers) where they lock their boot loader and will not let you install anything else. Or Samsung that blow an internal fuse to show that at some point you did.

Wynona said:

Generally, when we do a clean install, Secure Boot needs to be disabled, but turned back on when we're finished. Same with Fast Bootup sometimes.

Ahh, that makes sense. Thank you. My system is old enough that is not required for me to clean install.

lx07 said:

Generally it is a good thing - as long as you can turn it off. It means things you boot haven't been tampered with.

If it was mandatory and your system would never boot an OS not signed by Microsoft keys that would be a bad thing. You would not be able to load Linux for example - you would be forever tied to Windows 10. The same thing already happens with some phones (mainly supplied by service providers) where they lock their boot loader and will not let you install anything else. Or Samsung that blow an internal fuse to show that at some point you did.

I understand it more now. Thanks to both of you. :)