LWN: Comments on "UEFI Secure boot using qemu-kvm"

UEFI Secure boot using qemu-kvm

Fowl — Sun, 01 Jul 2012 21:24:45 +0000

The (stated) purpose of secure boot is to prevent unsigned code from executing, not from preventing signed code from executing somewhere else.

Baylink — Sun, 01 Jul 2012 18:50:06 +0000

Perhaps I'm missing something... but if it's emulable, isn't it useless?

aliguori — Thu, 28 Jun 2012 13:59:05 +0000

FWIW, there's nothing qemu-kvm specific here. OVMF runs perfectly fine under normal qemu.git including using TCG.

So if you're on an ARM or PPC host and want to experience the horror of Secure Boot, you certainly can with QEMU :-)