Standards for a highly secure Windows 10 device
-
Hi,
Actually secure boot is activated in both my boards in bios by default
Csm is also which sort of cancel secure boot and enables legacy installs
To disable secure boot one has to clear secure boot keys in bios and secure boot is disabled.
Now what I'm gathering from the article is win-10 wants the ability to enable secure boot in bios if it's disabled
I could be wrong and I hope I am because that would be a bummer if that is the case.
Pretty much why I said this could be an alternate way for MS to put another nail in win-7's coffin
If 10 has the ability to enable secure boot it would also have the ability to disable CSM plus a boat load of other bios stuff.
-
-
![]()
I think you may be misunderstanding some things. Anyway....
Hi,
Actually secure boot is activated in both my boards in bios by default
But what does PowerShell say??? 
You can check this by typing "confirm-SecureBootUEFI" (without quotes) in PowerShell (Admin). You'll either get True or False...
Attachment 163519
And which boards cause I kind of doubt that unless you set them up. Or you're talking about a laptop.
Now what I'm gathering from the article is win-10 wants the ability to enable secure boot in bios if it's disabled
I could be wrong and I hope I am because that would be a bummer if that is the case.
You might need to read that article again. It's not Windows 10 wanting to enable secure boot, it's Microsoft advocating a more secure Windows with a set of features that should be in play; not just secure Boot.
If 10 has the ability to enable secure boot it would also have the ability to disable CSM plus a boat load of other bios stuff.
No Windows isn't trying to enable stuff in your BIOS. Nor can it.
My reply in red as well :)
-
Hi,
Well I came to that thought for a couple reasons
1) MS has added power option functions to set a processors maximum MHz how else would 10 be able to do that if not adjusting the MHz inside the bios settings ?
Before it was just performance/ Balanced .. power plans
2) There are numerous utilities asus extreme tuning/.... that indeed adjust bios settings so why is it untrue MS wouldn't want the same abilities ?
-
-
-
Windows has been doing it for years with Balanced, High Performance, and Power Saver options, only the ability to set a max clock on a CPU is new. But yeah, Windows has been able to communicate wit bios for a looooong time.
-
Hi,
Well I came to that thought for a couple reasons
1) MS has added power option functions to set a processors maximum MHz how else would 10 be able to do that if not adjusting the MHz inside the bios settings ? Before it was just performance/ Balanced .. power plans
Here, Windows is simply tapping into a feature allowed by the BIOS.
2) There are numerous utilities asus extreme tuning/.... that indeed adjust bios settings so why is it untrue MS wouldn't want the same abilities ?
A utility that works within the "running" Windows environment, not outside of it. Regardless, Windows can not enable / disable BIOS settings. Never did. Remember the BIOS enables Windows to load, not the other way around.
Again, based on your comments, you might want to read the article instead of focusing on my Secure Boot post. My post simply tells you what you need to do to get secure boot going, but it's just one point of a whole
Last edited by sygnus21; 14 Nov 2017 at 11:31.
Quote
