Some Lenovo Ryzen laptops are now only running Windows

Date:
Mon, 11 Jul 2022 16:05:14 +0000

Description:
Many Lenovo laptops powered by AMD Rembrandt processors and Microsoft Pluton security chips wont load Linux properly.

FULL STORY ======================================================================

Some Lenovo laptops powered by AMD Rembrandt chips and Microsofts Pluton security co-processor are being restricted to Windows operating systems, reports have claimed.

The quirk was initially found by Linux security expert Matthew Garrett, who found he had difficulties getting Linux to boot from a USB drive on a Lenovo Z13 ThinkPad laptop workstation .

Those affected are running the AMD Ryzen 6000 chip, and have been found only to be allowing versions of Windows OS to boot by default. Linux OS for Lenovo laptops

It seems that the affected Lenovo laptops do not trust bootloaders that use Microsoft 3rd party UEFI CA keys. When an operating system other than Windows is loaded onto the laptops which support Secure Boot and TPM, the previous
OSs keys are wiped.

Garrett explained on his blog that it means that you won't be able to boot from any third-party external peripherals that are plugged in via
Thunderbolt.

He continues: There's no security benefit to this. If you want security here you're paying attention to the values measured into the TPM, and thanks to Microsoft's own specification for measurements made into PCR 7, switching
from booting Windows to booting something signed with the 3rd party signing key will change the measurements and invalidate any sealed secrets. It's trivial to detect this. Distrusting the 3rd party CA by default doesn't improve security, it just makes it harder for users to boot alternative operating systems. Read more

Dell, Lenovo and HP kill laptops with hard disk drives, marking the end of

an era

Take note, Arm: The world's first RISC-V laptop is now available for

preorder

These are the best laptops for programming right now

For now, it sounds like it may be possible to boot Linux onto affected AMD-powered Lenovo laptops by disabling the restriction from within the UEFI BIOS, but given the companys recent improvements in support for the Linux OS recently, the entire move seems somewhat counterproductive if not confusing.

This is unlikely to cause an issue for most users, who are happy with the default Windows OS, however this may put pro users off an entire chunk of the Lenovo range. That said, Toms Hardware emphasises that this hurdle does not correspond directly to all Lenovo or Microsoft Pluton-powered laptops, which is great news for Linux lovers. Check out the best Linux laptops around right now



======================================================================
Link to news story: https://www.techradar.com/news/some-lenovo-ryzen-laptops-are-now-only-running- windows/


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)