Guide to Secure Boot - CompTIA A+ Examination
Secure Boot: An Overview
Secure Boot is a security standard developed by members of the PC industry to make sure that your PC boots using only software that is trusted by the PC manufacturer. When the PC starts, the firmware checks the signature of each piece of boot software, including firmware drivers (Option ROMs) and the operating system.
Importance of Secure Boot
It is an important security measure, especially to prevent malware attacks like rootkits, that install when the computer starts up. Rootkits use the same boot scripts that the OS uses to start up. When you stop these scripts from being modified, you effectively stop rootkits.
How Does Secure Boot Work?
In simple terms, Secure Boot stops your computer from loading unsigned (not cryptographically signed) software or drivers. It is generally a mechanism that only permits binaries signed with a key that is registered in the UEFI firmware to load.
Exam Tips: Answering Questions on Secure Boot
1. Emphasize the role of Secure Boot in preventing unauthorized applications and drivers at boot time.
2. Explain how Secure Boot works, and understand the importance of cryptography and keys in it.
3. Show awareness of the controversy surrounding Secure Boot - mainly issues with certain Linux distributions and older hardware.
4. Explain how Secure Boot operates within UEFI environment.