If somebody can help with that i can test some of the possibilities out here. Searched the web but no fix for that one. So, i can't put it off or change it anymore. Since then when i try to put 'firmware password' off to test Ventoy it says that i can't use that symbol in a 'firmware password'. Years ago i have put a 'firmware password', with a symbol in it, because that's a nice extra securety but with one of the latest Catalina Security Updates the 'firmware' was updated. So, i am willing to test but first i have to fix the 'locked out firmware password' problem that i have. Linux /casper/vmlinuz nomodeset file=/cdrom/preseed/ubuntu.I imagin that all people in this discussion can and are willing to test.īut does Ventoy has time and energie to work on this? Linux /casper/vmlinuz file=/cdrom/preseed/ed maybe-ubiquity quiet splash. Set menu_color_highlight=black/light-gray In the meantime, if the need is great then Ventoy should do the job as a temporary front end. It will be interesting ot see what you come up with. The only obstacle is if a previous owner has locked you out of the entire bios setup. AFAIK, NO computer out there has a baked-in mandatory secure-boot without a user-adjustable toggle.

I just wanted to point this out, since this is not really a technical issue. After you've enrolled the keys, you are good to go for your temporary sessions. This implies that using Porteus on these types of locked-down machines, which usually means temporary authorized usage, then you may want to look into the Ventoy iso multibooter with a stick created for secure-boot, and boot the Porteus iso directly with that. Your sysadmin may not take kindly to you booting Porteus on that, and then your paychecks stop coming. Consider too that this locked-down machine may not be running windows at all, but another linux system that is doing your payroll with secure-boot enabled for obvious reasons. Other things may have been disabled by the IT department itself, like bluetooth and wifi etc etc. But, as you've mentioned, the ability to do this may be locked out by sysadmins (usually for good reasons) - and that means simply being locked / requiring a password to enter the uefi bios itself to do so. If a user is allowed to enter the uefi-bios, then secure-boot can be simply disabled. Fortunately, this is more of a people issue, rather than technical.

Ventoy secure boot