Secure Boot in SLES12 RC2

I have installed a SLES12 RC2 OS on my Dell Server[which does not support Secure boot]. In this case will my operating system still support secure boot as my hardware does not support it?? :expressionless:

You are probably posting in the wrong forum. This is for opensuse, not for the commercial version.

I鈥檓 not sure what you think it means for an OS to support secure-boot.

I鈥檓 running opensuse on this system, installed to use secure-boot. It I turn off secure-boot in the BIOS settings, it still boots. It鈥檚 just that the signature verifications won鈥檛 be done.

If I have turned off secure-boot before an install, then the installer will default to not setting up secure-boot. But I can tell it to use secure-boot anyway.

If your server does not support UEFI, then the issue is academic. You at least need UEFI support to setup secure boot.

Totally agree with your points. Read these few pointers:
2.1.5 Current Features and Limitations in a UEFI Secure Boot Context #](https://www.suse.com/releasenotes/x86_64/SUSE-SLES/12/#fate-317500)Support for Secure Boot on EFI machines is enabled by default.
When booting with Secure Boot mode enabled in the firmware, the following features apply:
路 Installation to UEFI default boot-loader location with a mechanism to restore boot entries.
路 Reboot via UEFI.
路 Xen hypervisor can be booted without MSFT signature.
路 UEFI IPv6 PXE boot support.
路 UEFI get videomode support, the kernel is able to retrieve the video mode from UEFI to configure KMS mode with the same parameters.
路 UEFI booting from USB devices is supported
Simultaneously, the following limitations apply:
路 bootloader, kernel and kernel modules must be signed.
kexec and kdump are disabled.**

******Now, this is my query. I am trying to generate a crash dump. And on triggering a crash 鈥渆cho c > /proc/sysrq-trigger鈥, the kdump log does not get generated on the /var/crash logs. Although my machine hardware does not support Secure boot, is this dependency/limitation still applicable?

I have no idea.

It depends on how those restrictions are implemented. My guess is that 鈥渒exec鈥 and 鈥渒dump鈥 include code to dynamically check whether secure-boot is in force (by examining efivars). And if they do it that way, then they will notice that secure-boot is disabled, so presumably they would run without restriction.

I still think itis realy beter to go to https://forums.suse.com/forum.php with your problem.

Nobody here is testing SLES 12 and I guess that testers of SLES 12 need your input before they release it.

If the hardware does not support Secure boot the OS will not some how magically support it. So I assume you do not have a UEFI BIOS so no secure boot has nothing at all to do with none EFI BIOS. If it is a EFI BIOS that does not support secure boot (is there such an animal?) Then still no problem even if the secure boot stuff is installed the BIOS has no use for it. Same with EFI with secure boot turns off. It only comes into play when the Secure boot is actually turned on in the BIOS鈥

I agree you should ask again on the Suse board since your question seems to be concerned with the Suse 12 beta.

On Thu, 11 Sep 2014 04:36:01 +0000, anjalipk wrote:

> I have installed a SLES12 RC2 OS on my Dell Server[which does not
> support Secure boot]. In this case will my operating system still
> support secure boot as my hardware does not support it?? :expressionless:

SLES12 is pre-release of the enterprise version, which others have
indicated is supported at forums.opensuse.org.

As I recall, though, this is a closed beta at the present time - in which
case, as a participant in the closed beta, you should have a way to
contact the product team in order to provide feedback and ask questions.

(I could be mistaken about its closed-beta status, however)

Jim


Jim Henderson
openSUSE Forums Administrator
Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

On Thu 11 Sep 2014 06:49:36 PM CDT, Jim Henderson wrote:

On Thu, 11 Sep 2014 04:36:01 +0000, anjalipk wrote:

> I have installed a SLES12 RC2 OS on my Dell Server[which does not
> support Secure boot]. In this case will my operating system still
> support secure boot as my hardware does not support it?? :expressionless:

SLES12 is pre-release of the enterprise version, which others have
indicated is supported at forums.opensuse.org.

As I recall, though, this is a closed beta at the present time - in
which case, as a participant in the closed beta, you should have a way
to contact the product team in order to provide feedback and ask
questions.

(I could be mistaken about its closed-beta status, however)

Jim

Hi
No, your correct Jim, it鈥檚 a closed beta. Even at the SUSE forum, you
will get pointed to the correct place which is the SLE 12 beta mailing
list鈥 :wink:


Cheers Malcolm 掳驴掳 LFCS, SUSE Knowledge Partner (Linux Counter #276890)
openSUSE 13.1 (Bottle) (x86_64) GNOME 3.10.1 Kernel 3.11.10-21-desktop
If you find this post helpful and are logged into the web interface,
please show your appreciation and click on the star below鈥 Thanks!

On Thu, 11 Sep 2014 20:05:07 +0000, malcolmlewis wrote:

> Hi No, your correct Jim, it鈥檚 a closed beta. Even at the SUSE forum, you
> will get pointed to the correct place which is the SLE 12 beta mailing
> list鈥 :wink:

Great, thanks for the confirmation, Malcolm - I figured you鈥檇 hop in with
the details. :slight_smile:

Jim


Jim Henderson
openSUSE Forums Administrator
Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C