In this article, we will explore how to use Ventoy v1.0.99 to create a dual boot Live USB for Ubuntu 22.04.4 LTS and Windows 10, even if Secure Boot is turned on. If you have been trying to create a dual boot Live USB with Ventoy and encountered a "Verification failed: (0x1A) Security" error, this article is for you.
What is Ventoy?
Ventoy is an open-source tool that allows you to create a bootable USB drive with multiple ISO files on it, without the need to format the USB drive for each ISO. With Ventoy, you can simply copy an ISO file to the USB drive, and it will be automatically added to the boot menu. This makes it an ideal tool for creating a dual boot Live USB drive.
Why do we need to worry about Secure Boot?
Secure Boot is a feature of modern PCs that helps prevent unauthorized firmware, operating systems, or bootloaders from running on your computer. It is designed to protect your computer from malware that can infect the boot process. However, it can sometimes cause issues when trying to boot from a USB drive, especially when the USB drive contains a bootloader that is not signed by a trusted authority.
How to use Ventoy v1.0.99 with Secure Boot
To use Ventoy v1.0.99 with Secure Boot, you need to sign the Ventoy bootloader with a Secure Boot key. The process of signing the Ventoy bootloader is complicated, but it is required if you want to boot from a USB drive that contains multiple ISO files, even if Secure Boot is turned off.
Generating a Secure Boot key
Before you can sign the Ventoy bootloader, you need to generate a Secure Boot key. You can use the Microsoft's BPDT tool to generate a Secure Boot key. Here are the steps:
- Download and extract the BPDT tool.
- Run the following command in PowerShell:
.\BpTools\bpdtool.exe create-key --output-file VenToysbkey.der
This will generate a Secure Boot key in the form of a DER-encoded X.509 certificate and save it as a file named VentToysbkey.der.
Signing the Ventoy bootloader
Once you have generated a Secure Boot key, you can sign the Ventoy bootloader. Here are the steps:
- Download and extract the Ventoy v1.0.99.
- Run the following command in PowerShell:
.\signtool.exe sign /fd sha256 /f VentToysbkey.der /p .\Ventoy2Disk.efi
This will sign the Ventoy bootloader with the Secure Boot key and password that you provided. Once the Ventoy bootloader is signed, you can use it to create a dual boot Live USB with Secure Boot turned on.
Creating a dual boot Live USB with Ventoy v1.0.99
Now that you have signed the Ventoy bootloader, you can create a dual boot Live USB with Ventoy v1.0.99. Here are the