Hi there. I wish I could spend more time writing this nuanced post, but I’ll try to save it for those who are clueless: Installing UEFI Secure Boot is easy and doesn’t need Microsoft. Just try using Ventoy, the ISO system that comes with a SecureBoot key for you to add to your SecureKey list while…

SecureBoot is on our roadmap already, expected in 2025. We want it as well, just takes time like everything else :slight_smile:

[image] Philene: Otherwise, I would only use TrueNAS for hobbyist or laboratory things unless you have enterprise support that can ensure and guarantee your system remains uncompromised. Even secure boot has been compromised. For example, my model of SuperMicro motherboard was in the list of …

[image] neofusion: My view of this post is that it’s scare mongering. Exactly.

It’s Microsoft’s and Intel’s attempt at vendor lock in and utterly useless as a security tool. If I don’t have full control over a system that I have physical access to that’s the opposite of security in my book. My hardware - my control.

Thank you, Kris. I really can’t wait, but I might be busy enough that you’ll finish when I can take TrueNAS back. The work and security it takes to safeguard a PKI is really understated in the current international condition. And I’m unfamiliar with the build process you’d need to develop to sign …

For anybody else reading, you might need to dig a little deeper than the preceding replies had, as they might have been unable to assemble the malformed links I posted, or the arguments behind them. SecureBoot is an ideology of signing a bootloader with a key, so if the bootloader file changes, the…

[image] Philene: certificate signed by Let’s Encrypt, let’s revisit how Entrust I’d ask what you think these two things have to do with each other (they are, after all, completely unrelated CAs), but I’m afraid your answer would be yet another random and bizarre rant.

Ah, I love how it’s not clear if you’re willing to dredge the threat of PKI compromise, or if you think there will always be a root CA for you to trust that’s not “vendor lock-in.” no, you go on. :blush:

With a stance like that, how are you going to acquire a copy of TrueNAS 25.10 Sarcastic Fringehead, featuring the new Secure Boot bits, without trusting HTTPS during the transfer? And that’s without even broaching the subject of DNS and how that can be manipulated… Pick your battles.

“Sarcastic Fringehead” :rofl::rofl::joy: I love that. It reminded me of this guy: [image] (it’s max headroom) Thank you for mentioning DNS as that’s just another leg I’m learning about. (I like TrueNAS CORE does ACME DNS certificate issuing, I want TrueNAS scale to take it on, but that’s anoth…

SecureBoot IS NECESSARY for TrueNAS; Attention All Users

TrueNAS General

kris February 17, 2025, 11:17pm 14

SecureBoot is planned for 25.10 this fall.

Topic		Replies	Views
FreeBSD kicks me back to BIOS on boot after upgrading CPU TrueNAS General CORE , Hardware	5	340	May 14, 2024
[Closed] SecureBoot in TrueNAS SCALE and CORE; Vendor Keys First, MS keys Later Feature Requests	2	420	October 9, 2025
BIOS updated: cannot start TrueNAS when secure boot is on TrueNAS General	7	790	November 24, 2025
TrueNAS 26 Nightlies Emerge! Announcements	19	1595	March 16, 2026
Presence of keyboard halts boot-up process? TrueNAS General SCALE , Hardware	21	467	May 24, 2024

SecureBoot IS NECESSARY for TrueNAS; Attention All Users

Related topics