XPost: misc.phone.mobile.iphone, alt.comp.os.windows-10   
   From: nospam@needed.invalid   
      
   On Tue, 9/23/2025 6:38 PM, Hank Rogers wrote:   
   > Your Name wrote on 9/23/2025 3:18 PM:   
   >> On 2025-09-23 11:51:43 +0000, Carlos E.R. said:   
   >>> On 2025-09-20 14:48, Tyrone wrote:   
   >>>   
   >>> ...   
   >>>   
   >>>> None have TPM 2.0 and Secure boot. But those are only checked during the   
   >>>> install. Neither are needed to actually RUN Windows 11.   
   >>>   
   >>> Hum.   
   >>>   
   >>> I have a W11 virtual machine on a vmware host running on Linux. One day I   
   needed to delete some files. Windows refused. Ok, boot Linux from a CD and do   
   it. But Linux CD would not boot, because failed key. Fine, disable secure   
   boot, then boot Linux CD,   
    then delete the damn file, finally reboot Windows.   
   >>>   
   >>> Hey, this is funny, Windows has lost internet access. What...? Did I   
   delete something crucial? No, W11 decided that no secure boot implies   
   networking is disabled, not secure.   
   >>   
   >> Windoze is cheap crap, it has always been cheap crap, and it will always be   
   cheap crap ...   
   >   
   > That's why Linus RULEZ Dood!   
   >   
   > And Apple!   
   >   
   >   
      
   VMWare is its own special little world.   
      
   But, I can't get VirtualBox to run a plain Win11 install (without Rufus).   
   I'm sick of testing new versions of VirtualBox for working TPM passthru.   
      
   VMWare likes to insist on Secure Boot, or encrypting at least the   
   control file for the VM. When it is set to encrypt the container   
   files, that wastes disk space.   
      
   Windows, for its contribution, reached into UEFI and it revokes the old   
   MS Certificate, and installs a newer Certificate. That's a kind of "fix" for   
   Black Lotus. Linux, for its part, had to sign the Linux shim with the newer   
   Certificate (requiring people to fly to the air-gapped signing setup and   
   do it in person). Newer Linux DVDs and their shim, are now signed with   
   a certificate that is the same as the one Windows 11 installed. This   
   means you don't have to do anything special to boot whatever you want.   
      
   To get this to work on my Big machine, I actually had to install Win11 in   
   parallel with an existing Win11, *just* to get the update to install that   
   installs the certificate. Then I removed the excess Windows installation,   
   and since the UEFI store is in hardware, the certificate is then   
   present so the existing Windows can Secure Boot. That's an example of   
   the hassle involved, to keep the Black Lotus status of the machine correct.   
   (The Big machine has been given the task of Secure Boot testing.)   
      
   Computers are just... endless fun... and you can hardly get any   
   work done. It took *hours* today, just to make a simple PDF.   
      
      [Picture]   
      
       https://i.postimg.cc/DydK123N/PDF-fonts-onboard.gif   
      
   Now, try and do *that* on a modern computer. It's a PDF   
   with copies of full fonts (not subset) inside it. Some other   
   tools I have, don't even want to work with the file, when   
   it has full fonts in it :-) Well, that's how PDF used to work.   
      
      Paul   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)