Hyper-V Linux secure boot

Hyper-V Linux Secure Boot

Secure boot in Windows Server 2016 is a good system design to ensure that the loading tools of the operating system are not tampered with. A secure boot can be a good defense against being injected by malicious code before the computer boots into the operating system.

Secure boot combined with UEFI encryption enhances boot and processing power. The encryption key is stored in the firmware. When UEFI requires an operating system loader to start, it can check the operating system loader's cryptographic signature and, if so, the signature key for it. If the image has been signed with a verifiable key, UEFI will allow it to start. Otherwise, the entire startup process is stopped. In Hyper-V, if you check the operating system loader for unsigned or invalid signatures during startup, the system will prompt us with the following:

650) this.width=650; "title=" clip_image002 "style=" border-top:0px;border-right:0px;background-image:none; border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px, "border=" 0 "alt=" clip_ image002 "src=" http://s3.51cto.com/wyfs02/M01/8B/D8/wKiom1haPyLyoMNEAABsx-M5bDg888.jpg "height=" "/>"

To enable Linux secure boot on Hyper-V, the following conditions are required:

1. Hyper-V Server 2016, enabling the Hyper-V role in Windows Server 2016, enabling the Hyper-V role in client Windows 10

2, need to use the supported Linux operating system version, refer to: https://technet.microsoft.com/en-us/windows-server-docs/compute/hyper-v/ Supported-linux-and-freebsd-virtual-machines-for-hyper-v-on-windows

3. Must use the second generation virtual machine

4. Secure boot must be enabled in the Virtual machine settings

5. The selected secure boot template must be a Microsoft UEFI certification authority

Having said so much, let's look at how to turn on secure boot for a supported Linux operating system:

Open Hyper-V Manager and find the operating system for Linux virtual machines in this I use "ubuntu-14.04.4-server-amd64". Note: You need to make sure that the virtual machine is down

Select the virtual machine and click Settings:

650) this.width=650; "title=" clip_image004 "style=" border-top:0px;border-right:0px;background-image:none; border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px, "border=" 0 "alt=" clip_ image004 "src=" http://s3.51cto.com/wyfs02/M01/8B/D4/wKioL1haPySzLG_hAACLqdX_w4U720.jpg "height=" 277 "/>

Click "Security"-tick "Enable secure Boot"-Template Select "Microsoft UEFI certification Authority":

650) this.width=650; "title=" clip_image006 "style=" border-top:0px;border-right:0px;background-image:none; border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px, "border=" 0 "alt=" clip_ image006 "src=" http://s3.51cto.com/wyfs02/M02/8B/D4/wKioL1haPyaig_yVAADaJlffwyg605.jpg "height=" 372 "/>

When the virtual machine is started after Setup is complete, you can see that the virtual machine is booting properly:

650) this.width=650; "title=" clip_image008 "style=" border-top:0px;border-right:0px;background-image:none; border-bottom:0px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px, "border=" 0 "alt=" clip_ image008 "src=" http://s3.51cto.com/wyfs02/M02/8B/D4/wKioL1haPyig3c51AACIb5iyQtY350.jpg "height=" 434 "/>

In addition to the above method, we can also set up Linux secure boot using the following PS command:

Set-vmfirmware-vmname dtlinux-enablesecureboot on-secureboottemplate ' microsoftueficertificateauthority '

This article is from the "Wu Yuzhang Microsoft blog" blog, make sure to keep this source http://wuyvzhang.blog.51cto.com/9992636/1884802

Hyper-V Linux secure boot