Windows 10: Standard Hardware support is not available after I signed my own secure boot keys in fedora

So I dual-booted my laptop, now I have Windows 11 and Fedora 38 and after installing NVIDIA drivers and manually signing them to the secure boot keys using mokutil in Fedora,I checked Device Security in Windows and it says Standard Hardware support is not available for this device.Virtualization, TPM, and DEP are already enabled.

:)

 

Standard Hardware Security not supported

Hi Paul,

Thank you for writing to Microsoft Community Forums.

We would suggest you to follow the steps mentioned below to run hardware troubleshooter and let us know if that helps.

Type "Troubleshooting" in the
Windows Search bar and press Enter.

1. Click on "View All" in the top left corner.
2. This will display the list of troubleshooters which are built-in in the computer. You can click on Hardware and Devices from the list and you can run the troubleshooter.

Also I would suggest to check if there are any update pending with regard to drivers and to do so, please follow steps mentioned below.

1. Search for Device Manager in
   Windows search bar.
2. Click on Device Manager.
3. Check if there Yellow Exclamation Point in the list of drivers.

Make sure Windows is up to date.

Hope it helps.

Manjunath H

Microsoft Community – Moderator

 

Windows 8 Secure Boot Feature: Not So Secure?

• Linux
• Linux
• Linux
• Linux
• Oh and OSX

Here is a statement from a Kernal Developer at Red Hat:

I'm not sure this exploits the legacy BIOS but rather it exploits the legacy boot method on MBR drives, injecting a signed key before the OS boots, which you are correct in that it has nothing to do with Windows 8. And the simplest fix would just be to require boot drives use GPT when Secure Boot is enabled in UEFI.

 

Standard hardware security not supported

I'm replying to Jetta48's post since I'm building off of his reference, which is where I got the original information I used as the basis for my own facetious rant above. Reviewing the section related to Standard Hardware Security:

At the bottom of the Device security screen, one of the following messages will appear indicating the security capability of your device:

Your device meets the requirements for standard hardware security
This means your device supports memory integrity and core isolation and also has:

• TPM 2.0 (also referred to as your security processor)
• Secure boot enabled
• DEP
• UEFI MAT

As most PC systems built since the time of at least Vista and most probably during the later period of the WinXP era would contain hardware DEP and Secure boot was often enabled on higher-end systems even with Windows 8, these typically wouldn't be involved
in the display of this message for recent systems.

However, since both the TPM 2.0 and UEFI MAT hardware (really firmware) requirements are relatively new, either and often both of these might be involved on any system such as Jetta48's, since only the newest models might typically include these.

While looking for some of this info, I found the following Microsoft Docs article that provides some additional detail for these and other

Standards for a highly secure Windows 10 device.

Both the TPM and UEFI MAT are either described or include a reference to other documentation in their respective hardware or firmware sections.

Rob