Dual-Booting openSUSE Tumbleweed and Windows 11 with Secure Boot

Dual-Booting openSUSE Tumbleweed and Windows 11 with Secure Boot

Dual-booting a laptop with two different operating systems can be a challenging task, especially when trying to keep Secure Boot enabled. This article will guide you through the process of dual-booting a ThinkPad T14 Gen 5 laptop with openSUSE Tumbleweed and Windows 11, while keeping Secure Boot enabled.

What is Dual-Booting?

Dual-booting is the process of installing two or more operating systems on a single computer. This allows the user to choose which operating system to use at startup. Dual-booting can be useful for testing new operating systems, running applications that are not available on one operating system, or for separating work and personal use.

What is Secure Boot?

Secure Boot is a security feature in modern computers that prevents unauthorized firmware, operating systems, and bootloaders from running. Secure Boot uses digital signatures to verify the integrity of these components. This helps to prevent malware and other malicious software from taking control of the computer during the boot process.

Can I Dual-Boot with Secure Boot Enabled?

Yes, it is possible to dual-boot with Secure Boot enabled, but it can be more difficult than dual-booting with Secure Boot disabled. This is because Secure Boot only allows signed operating systems and bootloaders to run. To dual-boot with Secure Boot enabled, you will need to use a bootloader that is signed by Microsoft or a trusted third-party.

Preparing the Laptop for Dual-Booting

Before installing openSUSE Tumbleweed, you will need to create a separate partition for it. This can be done using the built-in Disk Management tool in Windows 11. You will need to shrink the existing partition to make room for the new one. It is recommended to leave at least 20GB of free space for openSUSE Tumbleweed.

Installing openSUSE Tumbleweed

To install openSUSE Tumbleweed, you will need to create a bootable USB drive using a tool such as Rufus. Once you have created the bootable USB drive, you can boot your laptop from it. During the installation process, you will be prompted to select a partition for openSUSE Tumbleweed. After selecting the partition, you can continue with the installation.

Installing a Signed Bootloader

After installing openSUSE Tumbleweed, you will need to install a signed bootloader. This can be done using the sbsign tool. First, you will need to download the sbsign tool from the openSUSE Build Service. Once you have downloaded the tool, you can use it to sign the bootloader:

Replace path-to-key.priv and path-to-key.crt with the paths to your private and public keys, respectively. After signing the bootloader, you can reboot your laptop and select openSUSE Tumbleweed from the boot menu.

• Dual-booting a laptop with openSUSE Tumbleweed and Windows 11 is possible with Secure Boot enabled.
• You will need to create a separate partition for openSUSE Tumbleweed and install a signed bootloader.
• The sbsign tool can be used to sign the bootloader.

References

• Booting - openSUSE Leap 15.3
• Secure Boot - Arch Linux Wiki
• How to dual-boot Linux and Windows 8 with Secure Boot

--endarticle--