tails live usb

[salmooni]

I am trying to create my first tails usb, and following the instructions here: https://tails.boum.org/install/win/usb/index.en.html Once I copied the .iso image to the pen drive, I had trouble booting into it. I checked in instructions and repeated a number of times. I have Windows 10 and in order to boot using a usb image, I go to settings, Recovery, and under Advanced Setup there is an button with "Restart now" label. The next interface has an option for booting from other devices such as usb. Once I choose it, I have seven options, which three of them have the usb name on them, and a couple are options for booting from the network. I have tried all the usb options but it keeps booting into Windows. The one thing I have not tried, is to turn off safe boot; apparently it is a Windows 10 feature and I need to figure out how to turn it off on my machine. My question is if anyone knows what the solution is aside from the safe boot thing.
This is the only forum I found with questions about tails. If there is a more appropriate forum for this question, please point me to it.
Thanks.

[pylkko]

Your operating system does not support secure boot. For secure boot you need a signed key that verifies the OS. If you turn it off, your UEFI will work as old school BIOS did more or less and allow you to boot anything you serve on the USB.

Source:
https://tails.boum.org/blueprint/UEFI_Secure_boot/

[p.H]

Wrong. Secure boot is only an option of UEFI. You can disable secure boot and still boot in native EFI mode.

[pylkko]

Wrong. Secure boot is only an option of UEFI. You can disable secure boot and still boot in native EFI mode.

I didn't say that if you disable secure boot, that your uefi will magically change to a BIOS. If you disable secure boot, when using a non signed operating system image, then you will be able to have it work straight from the USB as in BIOS. Uefi is not BIOS. Uefi has 'legacy boot' but even that is not BIOS, it just emulates old BIOS.

Also, this entire topic is irrelevant for the issue at hand. It is really annoying to nitpick like this over something that doesn't help the OP in any way

[p.H]

I didn't say that if you disable secure boot, that your uefi will magically change to a BIOS.

What about this ?

If you turn it off, your UEFI will work as old school BIOS

[pylkko]

Yes, but that is w.r.t the booting the stick. You are cutting half a sentence out of context to labor a stupid point. The rest of that sentence indicates that it will work "more or less" for that specific purpose (booting usb easily), and not exactly like BIOS as you imply. Even worse, even if your reading of that sentence like that is allowed, it doesn't matter for the issue at hand, or for anything else for that matter. Do you feel that you are helping here some how? I mean before I posted to this guy, all other readers had ignored his post. Thanks for helping him find a solution.

[salmooni]

I really appreciate the info. I would not have known that would cause the issue.

[pylkko]

I want to add that because some one opened that ticket (in other words, there was some preliminary discussion about including the feature), it is possible that future versions of that operating system (tails) will support the secure boot feature. However, after the Microsoft leak it remains questionable what this is supposed to provide for anyone:

http://fortune.com/2016/08/11/uh-oh-mic ... s-devices/

[salmooni]

Your operating system does not support secure boot. For secure boot you need a signed key that verifies the OS. If you turn it off, your UEFI will work as old school BIOS did more or less and allow you to boot anything you serve on the USB.

Source:
https://tails.boum.org/blueprint/UEFI_Secure_boot/

Again thank you for the latest reply. I have looked at the link you sent in an effort to see if there is some way for me to run the OS without turning off secure boot. I know where the option is for turning it off, but I like to explore the other option if possible. I did find https://mjg59.dreamwidth.org/20303.html, and tried to follow it, and I believe it is written for Linux environment. I downloaded the file but did not find the file names. I posted the following question for the author

Thank you so much for taking the time to create the code and content. My question is if this would work for a live usb stick of tails operating system I am trying to create. I just don't see the files you reference in your post. I did download shim-0.2.tar.bz2, and shim-0.2.tar, and used 7-zip as I am on a Win10 machine to extract the insides. I don't see an efi extension. Also I don't know which is the bootloader binary for this distro. Under the boot directory, there is a grub directory and in it there is a i386-efi directory. Is that the one? Do I need to change it to grubX64.efi?
thanks for your help

I wanted to reach out here also, and see if perhaps you or someone else has done this with the tails OS. Is it possible to run tails with out turning secure boot off?

[arochester]

This is the only forum I found with questions about tails

https://www.linuxquestions.org/questions/incognito-85/

[Segfault]

You can add secure boot manually. See the link.

http://www.rodsbooks.com/efi-bootloader ... ing_signed

Should be no problem for a Tails user.

[Head_on_a_Stick]

^ The required signing programs are now available in stretch:

https://packages.debian.org/stretch/sbsigntool

https://packages.debian.org/stretch/shim

https://packages.debian.org/stretch/pesign

And there is always the Linux Foundation's PreLoader & HashTool (as used by the Arch ISO image):

https://blog.hansenpartnership.com/linu ... -released/