5 replies to this topic

[sara - pmedia]

When I boot my 10pe (created with win10pese winbuilder + my scripts)  on UEFI Mode

I need to cancel secure boot 

 

When  secure boot is active -  Boot failed 

 

Can I add something to my build So I will not have to cancel it? 

 

It will probably take some time for motherboards manufacturers to stop giving the option to cancel it

 

[stayboogy]

you have to boot your pe in uefi mode, and make sure your pe matches your cpu arch, so if x64 it has to be uefi x64 pe, and if x86 has to be uefi x86 pe. 

 

mbr mode booting will never work with secure boot.

 

also, you must have your bios set to boot your usb first if booting from usb, or make your boot selection menu visible.  on some devices you may have to manually add your usb device to uefi boot menu in your bios to get it to boot, and if on the hard drive then same thing.

Edited by stayboogy, 18 August 2018 - 09:31 PM.

[steve6375]

If it non-secure-boots via UEFI, then it should also secure boot assuming you are using the Microsoft \EFI\BOOT\Bootx64.EFI signed file.

Also, check your BCD to make sure it is checking for 'Integrity' and test-mode (not signed) is not enabled (use BootIce 1.3.4).

[steve6375]

If you have a WinPE that will Secure UEFI boot, you do not have to change the BIOS settings to disable Secure Boot.

This is useful because (1) you may not know the BIOS password and (2) you do not have the bother of having to alter the BIOS settings - boot - and then change back the BIOS settings afterwards (if the system is a Server this can take 10 minutes!).

[Wonko the Sane]

As a side note, likely in the last six months the OP found out that it is possible (or maybe that it is not)  .

 

Wonko