ventoy / Ventoy

A new bootable USB solution.
https://www.ventoy.net
GNU General Public License v3.0
62.52k stars 4.08k forks source link

[issue]: Can't boot Ventoy on my DELL XPS 9510 #1899

Open ymurawski opened 2 years ago

ymurawski commented 2 years ago

Official FAQ

Ventoy Version

1.0.8

What about latest release

Yes. I have tried the latest release, but the bug still exist.

Try alternative boot mode

No. I didn't try these alternative boot modes.

BIOS Mode

UEFI Mode

Partition Style

GPT

Disk Capacity

64

Disk Manufacturer

No response

Image file checksum (if applicable)

No response

Image file download link (if applicable)

No response

What happened?

Hi, i tried to use Ventoy on my DELL XPS. It uses Secure Boot and UEFI.

I used the latest Ventoy to create a stick with GPT and Secure Boot enabled and one without Secure Boot. Both show up in the Boot list but when i select then it doesnt show me anythin and skips the USB boot.

Any Ideas ?

ventoy commented 2 years ago

It's because the shim used by latest Ventoy was added to the dbx(block list) of the UEFI firmware. So if you want to use Ventoy you need to disable secure boot in your BIOS.

ymurawski commented 2 years ago

It's because the shim used by latest Ventoy was added to the dbx(block list) of the UEFI firmware. So if you want to use Ventoy you need to disable secure boot in your BIOS.

Will this be fixed ? Windows 11 and my company doesnt allow disabling this.

steve6375 commented 2 years ago

a multiboot USB drive needs to load a modified grub2 or similar which allows it to run a lot of 'special' code. So multiboot solutions like Ventoy, etc. have problems with secure boot since their 'special' code will never be signed by Microsoft. The current solution is a 'hack' workaround which Microsoft have now blocked by adding the keys to a blacklist in the system BIOS (using Windows Update) to prevent booting from such dodgy but signed bootloaders. i.e. Microsoft signed some grub2 bootloaders without realising that they had security holes - so now they have blocked those signed bootloaders which Ventoy and some other multiboot USB drives use. If you just want to multiboot Windows ISOs try WinSetupFromUSB which uses Microsoft signed files for the bootloader AFAIK. Another alternative is use Easy2Boot and make .imgPTN23 partition images from each Windows ISO and then switch the image that you want in as Partition 1 before you boot from it.

Kirk1984 commented 1 year ago

I had the same issue on my Inspiron 14 5402. i cleared (deleted) the dbx section and ventoy booted without issues. I can add a screenshot of what i did if needed.

M-F-P commented 1 year ago

Shouldn't it be possible to simply delete the lone offending entry from dbx, which would allow Ventoy to continue operating as before while maintaining a functioning secure boot setup?

Kirk1984 commented 1 year ago

My Dell Bios didn't gave me an option to edit dbx.