Secure Boot

Winsage
May 14, 2025
Microsoft addressed a boot issue affecting dual-boot systems running Linux alongside Windows after the August 2024 Windows security updates, which caused Linux systems to fail to boot due to a Secure Boot Advanced Targeting (SBAT) update. This issue impacted various Windows operating systems, including Windows 10, Windows 11, and Windows Server 2012 and later. The problem arose from a detection mechanism that failed to recognize some customized dual-boot setups, leading to error messages such as "Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation." Microsoft confirmed that the boot issues would be resolved with the May 2025 Patch Tuesday security updates and provided a temporary workaround in late August, advising users to delete the SBAT update. On September 19, Microsoft stopped the automatic application of the problematic SBAT update and recommended a command to prevent future SBAT updates. The issue was specific to the August 2024 security and preview updates, and subsequent updates starting with September 2024 did not contain the problematic settings.
Winsage
May 14, 2025
Microsoft's Recall feature is set to debut after a delay due to security concerns. The update for Windows 11, released on May 13th, includes AI-driven tools to enhance user interactions and productivity. Key features integrated from the April 25th Preview update include: - Recall (preview): Allows users to retrieve information from various applications, websites, and documents using AI for quick searches based on content descriptions, with options to save snapshots of activities and manage them through Windows Hello. - Click to Do (preview): Enables immediate action on items displayed on the screen using a keyboard shortcut for editing or summarizing content. - Improved Windows Search: Enhanced search capabilities allow natural language queries to locate documents and settings. - Phone Link: Facilitates interaction between Windows PCs and mobile devices for calls, messages, and content sharing. - Widgets: Web developers can create interactive widgets with customization options for lock screen widgets. Additional updates include improvements to File Explorer, accessibility enhancements, and new settings management options for app recommendations. The update for Windows 10 focuses on a fix for Secure Boot Advanced Targeting (SBAT) and Linux Extensible Firmware Interface (EFI) to improve detection of Linux systems. Detailed patch notes and download links are available through the Microsoft Update Catalog.
Winsage
May 9, 2025
On October 14, 2025, Microsoft will stop providing security updates for Windows 10 unless users enroll in the Extended Security Updates program. Upgrading to Windows 11 may be difficult for PCs older than five or six years due to strict compatibility requirements, including a CPU on the approved list and a Trusted Platform Module (TPM) version 2.0. Users may encounter error messages if their hardware does not meet these criteria. There are workarounds for some users, particularly those with PCs designed for Windows 10, but older devices, especially with AMD processors, may face significant challenges. To upgrade, users must ensure their PC is configured to start with UEFI, supports Secure Boot, and has an enabled TPM. A registry edit can allow bypassing CPU checks and accepting older TPM versions. Alternatively, a clean installation of Windows 11 can be performed using installation media, which bypasses CPU compatibility checks but still requires TPM and Secure Boot support. Microsoft has introduced new restrictions with the Windows 11 version 24H2 update, requiring CPUs to support specific instructions (SSE4.2 and PopCnt). For those opting to use the Rufus utility to create installation media, it is essential to use version 4.6 or later to bypass compatibility checks. Users must download the Windows 11 ISO, prepare a USB drive, and follow specific steps to initiate the upgrade process.
Winsage
May 4, 2025
Microsoft is encouraging users to transition from Windows 10 to Windows 11, especially as support for Windows 10 will end on October 14, 2025. Upgrading to Windows 11 on new devices, such as the Surface Copilot+ PCs, can enhance productivity, with workflows reportedly running up to 50% faster compared to older devices. Organizations using Windows 11 Pro have experienced a 62% reduction in security incidents, and features like Secure Boot can reduce firmware attacks by three times. Additionally, deployment of these systems is approximately 25% faster, aiding IT teams in transitioning users efficiently.
Winsage
May 2, 2025
The process of installing Linux has evolved from text-based installers in the late 1990s to user-friendly graphical installers in distributions like Ubuntu and OpenSUSE. Users can start with a single-board computer like the Raspberry Pi or set up a dual-boot configuration with Windows and Linux using a custom boot menu called GRUB. It is advisable to back up the drive before installation to prevent data loss. To create a Linux Install USB, users need to download an ISO image of the Linux distribution and use Rufus to write it onto a USB drive of at least 8GB. The steps include selecting the USB drive, choosing the Linux OS, selecting the GPT partition scheme, and writing the OS in ISO image mode. For dual-boot installation, users should insert the USB drive, boot from it, and select “Try or Install Ubuntu” from the GRUB menu. After testing hardware functionality, the installation process involves selecting language, configuring accessibility, choosing keyboard layout, connecting to the Internet, and selecting installation options. Users must choose “Install Ubuntu alongside Windows Boot Manager” and allocate space for each operating system. After installation, users need to adjust BIOS settings to ensure the system boots from the Linux installation. This includes selecting the Boot menu, setting the Linux install as Boot Option 1, and saving the changes. Upon rebooting, users can select their Linux OS from the GRUB menu and verify the functionality of both operating systems.
Winsage
April 22, 2025
Microsoft will officially cease support for Windows 10 on October 14, compelling users to transition to Windows 11, which has more demanding hardware requirements. Users with older systems may struggle to meet these requirements, and Microsoft will not guarantee updates for installations on unsupported hardware. Windows 10 will continue to receive support until October 2025, after which paid updates will be available. The Trusted Platform Module (TPM) is emphasized in Windows 11 for enhanced security, providing encryption and verifying software integrity. Recent statistics show that Windows 11 has surpassed Windows 10 in market share in the U.S., with 54% of users on Windows 11 compared to 44% on Windows 10. However, Windows 10 still holds a 55% market share in Europe and over 60% in Asia.
Winsage
April 20, 2025
Microsoft is encouraging approximately 240 million PC owners to recycle outdated devices, as they will not qualify for a free upgrade to Windows 11 without new hardware. The company emphasizes the importance of the Trusted Platform Module (TPM) 2.0, a security chip that determines eligibility for the upgrade and protects sensitive data. TPM 2.0 offers several security benefits, including data encryption, verification of trusted software, detection of physical tampering, and support for advanced security features in Windows 11. Currently, around 240 million PCs are estimated to be ineligible for the upgrade, which may hinder the adoption of Windows 11 and leave many devices vulnerable to cyber threats.
Winsage
April 20, 2025
Windows 10 has a user base of 54.2%, while Windows 11 has 42.69%. The requirement for TPM 2.0 in Windows 11 poses a barrier for users considering an upgrade. Microsoft highlights the benefits of TPM 2.0, including data protection, software integrity, physical tamper resistance, and support for advanced security features. Microsoft encourages users to transition to Windows 11 for enhanced security, improved user experience, and future readiness. However, the adoption of TPM 2.0-compatible CPUs has not met expectations, and the end of support for Windows 10 may prompt more users to upgrade to Windows 11.
Winsage
April 15, 2025
On October 14, 2025, Microsoft will stop providing security updates for Windows 10 PCs unless users enroll in the Extended Security Updates program. Upgrading to Windows 11 on machines older than five years may result in an error message about CPU compatibility, as Microsoft will not change the requirement for a Trusted Platform Module (TPM) version 2.0. While automatic upgrades may be hindered, there are workarounds for most PCs designed for Windows 10. To upgrade, the computer must boot using UEFI, support Secure Boot, and have an enabled TPM (version 1.2 is acceptable). Users can check their system's BIOS mode and TPM status using the System Information utility and the Trusted Platform Module Management tool, respectively. If UEFI is not an option or if the PC lacks a TPM, an undocumented hack can be used to bypass compatibility checks. A new restriction with the Windows 11 version 24H2 update requires CPUs to support SSE4.2 and PopCnt instructions, making upgrades impossible for PCs built in 2008 or earlier. Most Intel CPUs from 2009 and AMD CPUs from 2013 should meet this requirement. Users can bypass CPU checks and accept any TPM version through a registry edit, which requires running the Setup program from the current Windows installation. The process involves creating a registry key and modifying its value. Alternatively, the Rufus utility can be used to create a bootable USB drive that circumvents compatibility checks, but it cannot bypass the restrictions for very old CPUs lacking support for SSE4.2 and PopCnt instructions.
Search