notabot

Level 8
How can we verify that an installer ( eg of an AV or anti-exe ) will install only drivers & kernel modules that are co-signed by Microsoft?
 

ticklemefeet

Level 22
Verified
What is UEFI Secure Boot?
UEFI is a more advanced firmware interface with many more customization and technical options. Secure Boot is something of a security gate. It analyzes code before you execute it on your system. If the code has a valid digital signature, Secure Boot lets it through the gate.
Must be using Windows 8 or newer. The code can also be signed by the pc manufacture. Hope this answers your question.
 
  • Like
Reactions: harlan4096

notabot

Level 8
What is UEFI Secure Boot?
UEFI is a more advanced firmware interface with many more customization and technical options. Secure Boot is something of a security gate. It analyzes code before you execute it on your system. If the code has a valid digital signature, Secure Boot lets it through the gate.
Must be using Windows 8 or newer. The code can also be signed by the pc manufacture. Hope this answers your question.

It doesn’t - installing an unsigned ( not co-signed by MS ) driver will break secure boot - the question is, how can know before running an installer ( which amongst other things installs drivers ) if any drivers to be installed will be co-signed , after they’ve installed it’s too late, secure boot will be broken