Re: [INFAUX] Verrouillage a u niveau du chargeur de démarrage minimal

[Benoît Sibaud <bsibaud AT april.org>]

Bonjour,

Sur le même sujet :
http://www.itworld.com/it-managementstrategy/205255/windows-8-oem-specs-may-block-linux-booting
http://www.networkworld.com/community/node/78727
http://www.itwire.com/opinion-and-analysis/open-sauce/49889-will-windows-8-succeed-in-locking-out-gnulinux
http://www.theregister.co.uk/2011/09/21/secure_boot_firmware_linux_exclusion_fears/
http://www.zdnet.com.au/windows-8-secure-boot-to-block-linux-339322781.htm
http://www.thinq.co.uk/2011/9/21/windows-8-secure-boot-feature-lock-out-linux/
...

La source est la présentation de Arie van der Hoeven, Principal Lead Program
Manager chez Microsoft.
http://video.ch9.ms/build/2011/slides/HW-457T_van_der_Hoeven.pptx
« Secure boot
(...)
UEFI and secure boot harden the boot process
All firmware and software in the boot process must be signed by a trusted
Certificate Authority (CA)
Required for Windows 8 client
Does not require a Trusted Platform Module (TPM) »
et
« New Windows 8 requirements:  
Windows 8 client systems must be certified in UEFI mode
Secure boot
Secure firmware update process
(...) »

En parcourant les liens du document :

HW-462T - Building hardware-based security with a Trusted Platform Module 
(TPM)
http://channel9.msdn.com/Events/BUILD/BUILD2011/HW-462T
http://video.ch9.ms/build/2011/slides/HW-462T_Spiger.pptx
« UEFI will only launch a verified OS loader – such as Windows 8 »
« Windows 8 has a bunch of new TPM-enabled features »

HW-260T - Windows Certification: improvements to the logo program
http://channel9.msdn.com/Events/BUILD/BUILD2011/HW-260T
http://video.ch9.ms/build/2011/slides/HW-260T_Koenders.pptx

Windows 8 Certification Requirements – Preview
http://go.microsoft.com/fwlink/p/?LinkId=227313
Windows Hardware Certification Kit – Preview
http://go.microsoft.com/fwlink/p/?LinkId=228472
(les deux nécessitent un compte Live.com, pas regardés du coup)

Windows Server 8 SW Certification Requirements Draft
http://www.microsoft.com/download/en/details.aspx?id=27423
TODO
Windows Logo Program for Hardware: Overview
http://msdn.microsoft.com/library/windows/hardware/gg463010.aspx
TODO
« SYSFUND-0229. Systems with a greater than 2.2 terabyte boot drive must 
comply
with UEFI specification. »


[HW-659T] Certifying hardware with the Windows Hardware Certification Kit
http://channel9.msdn.com/Events/BUILD/BUILD2011/HW-659T
http://video.ch9.ms/build/2011/slides/HW-659T_Rowland.pptx

[HW-665C] Windows Certification Program, process and tools
http://channel9.msdn.com/Events/BUILD/BUILD2011/HW-665C
http://video.ch9.ms/build/2011/slides/HW-665C_Edfeldt.pptx

[HW-719H] (Lab) Experiencing the Windows Hardware Certification Kit
[APP-840H] (Lab) Hands on lab for Windows App Certification Kit
pas disponibles apparemment

[SAC-932T] Windows Server 8 software and hardware certificationCertification
http://channel9.msdn.com/Events/BUILD/BUILD2011/SAC-932T
http://video.ch9.ms/build/2011/slides/SAC-932T_Arthur.pptx
« Examples of “If Implemented” requirements for Server;
UEFI Firmware
        If UEFI is implemented in the system, it must meet all requirements 
(...)
Trusted Platform Module
        Network Key Protector for BitLocker, Secure Boot, etc. enhance data
security »
Il est aussi question d'une session « UEFI Firmware for Secure Experience,
Session 457 ».


-- 
Benoît Sibaud