Secure Boot
If I buy a framework laptop with Windows 10 pre-installed, will the secure boot be opened and can it be turned off?
If I buy a framework laptop with no OS pre-installed, will the secure boot be turned off and will it be automatically turned on if I install a Windows 10 manually by ISO?
PS: As a heavy Manjaro/Arch Linux (which do not support secure boot) user, I do not want to see any difference if I disable secure boot when booting. (for example, a bloody-red screen with a lock icon or a sentence reminding you that secure boot is off)
SecureBoot will be turned on in all cases, but you can turn it off in the bios. If you actually want it to be secure (ish), you’d need to set a bios password (not set by default).
There is no difference in the boot screen with secure boot on/off with either Windows or Linux.
Just wanted to comment on this:
Arch absolutely supports Secure Boot. It’s not an easy process, but the Arch Wiki has a very good page on how to do it, by signing your own keys.
https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot#Implementing_Secure_Boot
It’s actually not too hard, but you don’t seem to be able to set the PK using the sbkeysync method on the Framework for some reason. I used efi-updatevar and it worked like a champ.
(Arch w/ secure-boot, a sd-tpm2-totp hook, and a unified kernel.)