Enabling SecureBoot?

Hey there,

just playing around with the x4, seems like according to docs windows 11 is supported, which means that secureboot would be enabled by default, as its a hard requirement IIRC. But booting ubuntu on teh board I cann see that secureboot is disabled, and cant find anything in the bios to enable it.

Is secureboot supported? Do I need to upgrade the bios or something to get that option (and cert management as well) ?

Cheers!

1 Like

Hi Itxaka, X4 support secure boot, this item is hidden by BIOS, default is disable.
You can install win11 normally without problem, and you can check tpm info by run tpm.msc

1 Like

Thanks Ryann, is there any way of manually enabling it and the keys management as well? Maybe on a beta bios or something? We are evaluating the X4 with Kairos (kairos.io) and trying to run our UKI flavor which requires secure boot enablement and some key management.

Thanks!

We have a beta bios can enable it, please leave your email.
Please do not disclose and take your own risks.

That would be incredible!

itxaka@kairos.io

Thanks for the help Ryann!

Hi, did you receive my email and files? it said blocked by your eMail Service Provider.

Ah no, it may be because its an alias to forward to my address.

you can try with itxaka.garcia@spectrocloud.com or itxakaserrano@gmail.com

sorry about that!

ok, let me remove that comment, it just needed a full power cycle of removing the power cable and letting it rest!

Sorry about that!

Hi, I would also like to be able to use secure boot. Will a BIOS update be publicly released with secure boot enabled?

Hi, We need to verify several issues and ensure stability before releasing the new bios, so it will take a long time. If you need beta bios, please leave your email address.

@ElvishJerricco m my testing it works perfectly fine for my uses and the SecureBoot and key management work as expected. Im still testing the tpm measurements as something is off with them but the rest of the functionality works as expected.So it should be safe to use the beta bios :smiley:

@ryann if I found any issues, where should I report them to? Is there any email address? or just open a topic here in the forum to report them?

Cheers

Hm, yea, it’s pretty important to me for the TPM2 measurements to be correct. I suppose I could give the beta BIOS a try, as long as it’s possible to downgrade to the non-beta BIOS if I need to.

@ryann Is it possible to private message you my email? I prefer not to leave it on this public page, but I can’t seem to find a private message function on this forum.

@ElvishJerricco @Itxaka Just email to herui@radxa.com

@ryann I see there’s a v2 firmware to be downloaded at https://docs.radxa.com/en/x/x4/bios/update-bios does this include the secure boot, or do I still need the beta version?

Still need beta version for enable secure boot

gotcha, thanks for the confirmation

Is there an ETA for when Secure Boot will be in a public release? About to setup Windows 11 over Christmas/New Year and would be good to have this from the start.

There is no ETA for now, you can use beta version.
Compared with the official version, the beta version only opens more options in BIOS such as secure boot.

Thanks @ryann - I’ve sent an email to herui@radxa.com requesting the Beta version, appreciate your help.