Hi!
How should I enable Secure Boot? Custom or standard?
Standard should be used unless signing the boot uefi files with a custom key.
Thinking about it, I’m not sure if enabling Secure Boot is risky with the Windows CA certificate issue. Chuwi doesn’t seem likely to release a BIOS update to adapt to the new certificates.
What do you think?
Windows should be able to update the certs in the firmware database regardless of Chuwi releasing an update.
1 Like
I’ve read on several sites that if they can’t be updated, it’s the manufacturer who must implement it through a BIOS update.
I doubt Chuwi will release anything. The secure boot certificate database is user manageable, and worst case, there’s power shell commands that can force an update to the database from Windows if, for some reason, Windows does not perform the update automatically.