Booting with secure
This document describes booting
Fatdog64 from a USB flash drive on a computer with UEFI and
secure boot enabled. All Windows 8 computers come with secure
boot enabled by default. Secure boot can be disabled if you like
in UEFI setup, and Windows will still boot normally.
At the time of this writing the UEFI
implementations vary a lot. Some are easy to configure, some are
not. Some only except keys that are added though the UEFI setup
menu. Some are really just broken and won't recognize the keys
that are added. Fortunately these are few and hopefully soon to
Step 1: For most systems pressing F2 when the
computer starts to boot will take you to the UEFI setup menu.
Plug in your flash drive that has Fatdog64 installed, turn on
the computer and press the F2 key to enter UEFI setup.
Go to the boot tab and move your USB drive to the top of the boot
list so that the computer will try to boot from it first. Exit
setup and save your changes. (Usually F10). On some UEFI
implementations you won't have this option, but you will have an
option to manually add a boot option. Some have both. If you need
to manually add a boot option, you'll need to browse to
/EFI/boot/bootx64.efi on the USB drive.
When the computer reboots you should see
a screen like this if it booted off the flash drive with secure
Use the cursor keys to navigate and the enter key to select
and option. You will need to select 'Enroll key from disk' and
Select the device/partition that
contains the key and press enter. It should be the one with 'USB'
in it. In the example below that would be the line just under
Select the 'keys' folder and press enter. If
you don't see a 'keys' folder you probably selected the wrong
partition, select 'Return to filesystem list' and select a
Step 5: Select 'fatdog64.cer'. This is the
Step 6: The Next screen should look like
below. Press the zero key and then enter.
On the Next screen press y and enter.
After that you can power off or press
Ctrl-Alt-Del to reboot. Now that the keys are installed you won't
be asked for them again. If for some reason you want to remove the
Fatdog64 key, you can delete all the added keys (MOKs) by booting to the UEFI shell from rEFInd
and type dmpstore -d MokList