Secure Boot with Gigabyte UEFI DualBIOS

I thought I’d share what it took to get secure boot working with a Gigabyte GA-H81-D3 motherboard and Gigabyte UEFI DualBIOS.

Enable Secure Boot in YaST2 -> Bootloader

Reboot and hold Delete

Switch to the BIOS Features tab (scroll down with the mouse wheel)

Set Windows 8 Features to: Windows 8

Set CSM support to: Never

Set Secure Boot to: Enabled

Set Secure Boot Mode to Custom

Select: Key Management

Select: Install default Secure Boot keys

Save and Exit

Agree to trust things signed by openSUSE

I just tried switching CSM support to “Always”, and my computer rebooted twice and then froze. So I’d say setting it to “Never” is needed. >_<

For reference: which ironically doesn’t mention the relevant Secure Boot options.

Enabling secure-boot ought to imply CSM=never. But who knows – there are weird UEFI implementations out there.