Unable to Access BIOS to Disable Secure Boot on Old School Laptop

Unable to Access BIOS and Disable Secure Boot on an Old School Laptop

If you have an old school laptop and want to play around with different Linux distros, you might run into some issues when trying to disable Secure Boot. This is especially true if you have been using Windows 10 and recently installed Ubuntu Server as a host for NextCloud.

What is Secure Boot?

Secure Boot is a feature of the Unified Extensible Firmware Interface (UEFI) that helps to prevent unauthorized firmware, operating systems, or malware from running on your device. It does this by checking the digital signature of firmware and operating systems against a database of known good signatures. If the signature is not present in the database, Secure Boot will prevent the firmware or operating system from running.

Why Disable Secure Boot?

There are several reasons why you might want to disable Secure Boot on your old school laptop. For example, you might want to:

• Install a different version of Linux that is not signed by Microsoft
• Run a custom or modified version of Linux
• Experiment with low-level system software

How to Disable Secure Boot

Disabling Secure Boot is a relatively simple process, but it can vary depending on the make and model of your laptop. Here are the general steps:

1. Restart your laptop and press the key to enter the UEFI settings (this is usually F2, F10, or the Delete key)
2. Navigate to the Security or Boot menu
3. Find the Secure Boot option and disable it
4. Save your changes and exit the UEFI settings

Issues with Old School Laptops

However, if you have an old school laptop, you might run into some issues when trying to disable Secure Boot. For example:

• Your laptop might not have UEFI and only support the older BIOS firmware
• Your laptop might not have a Secure Boot option in the UEFI settings
• Your laptop might not allow you to disable Secure Boot

Workaround for Old School Laptops

If you have an old school laptop and are unable to access the BIOS or disable Secure Boot, there is a workaround. You can use the MOK (Machine Owner Key) enrollment feature of Secure Boot to enroll your own key and allow your custom or unsigned operating system to run.

Steps to Enroll a MOK

1. Create a MOK on a separate Windows or Linux machine using the mokutil tool
2. Transfer the MOK to a USB drive
3. Restart your laptop and press the key to enter the UEFI settings
4. Navigate to the Security or Boot menu
5. Find the MOK Management option and enroll your MOK
6. Save your changes and exit the UEFI settings
7. Boot your custom or unsigned operating system

In this article, we have covered the topic of how to disable Secure Boot on an old school laptop. We have discussed what Secure Boot is, why you might want to disable it, and how to do it. We have also covered some of the issues that you might encounter with old school laptops and provided a workaround using the MOK enrollment feature of Secure Boot.

References

• Secure Boot Overview
• UEFI Secure Boot
• mokutil on GitHub