Secure Boot with Gigabyte UEFI DualBIOS

English Open Chat
#1

I thought I’d share what it took to get secure boot working with a Gigabyte GA-H81-D3 motherboard and Gigabyte UEFI DualBIOS.

Enable Secure Boot in YaST2 -> Bootloader

Reboot and hold Delete

Switch to the BIOS Features tab (scroll down with the mouse wheel)

Set Windows 8 Features to: Windows 8

Set CSM support to: Never

Set Secure Boot to: Enabled

Set Secure Boot Mode to Custom

Select: Key Management

Select: Install default Secure Boot keys

Save and Exit

Agree to trust things signed by openSUSE

#2

I just tried switching CSM support to “Always”, and my computer rebooted twice and then froze. So I’d say setting it to “Never” is needed. >_<

#3

For reference:

https://doc.opensuse.org/documentation/leap/reference/html/book.opensuse.reference/cha.uefi.html

https://www.gigabyte.com/Motherboard/GA-H81-D3-rev-10/support#support-manual which ironically doesn’t mention the relevant Secure Boot options.

https://www.eightforums.com/threads/secure-boot-and-windows-8-activation.56219

#4

Enabling secure-boot ought to imply CSM=never. But who knows – there are weird UEFI implementations out there.