I try to install KDE Neon 18.04 on my Dell Laptop (from USB drive).

The installer asks me if I want to use third party software/drivers. Yes, I want to use them (when available).

Directly below that option I am allowed to configure Secure Boot. When ticking that checkbox I need to set a password for Secure Boot.

Directly above, it says that I need Secure Boot for Third Party drivers. If this is correct I suppose I need to configure Secure Boot and set a password.

However I always have been under the opposite impression. I thought that using Secure Boot may prevent (unsigned) third party drivers from being installed.

So, where is my mistake? Should I configure Secure Boot and a corresponding password or not?


More and more Linux distributions are adding the necessary facilities for full support of Secure Boot. That can include include configuring Secure Boot with a custom certificate, and signing third-party modules using that certificate when installed using the distribution's standard procedure. If the provider of the third-party modules provides pre-signed modules, it might also be possible to add the public certificate of that module provider to the kernel's whitelist.

If all the necessary facilities for handling Secure Boot are not yet in place in a particular Linux distribution, then disabling Secure Boot may be necessary to either allow the use of third-party kernel modules, or the use of that Linux distribution altogether.

KDE Neon is apparently an Ubuntu-based Linux distribution, and so it has the same Secure Boot facilities as the corresponding version of Ubuntu Linux. Personally I don't use Ubuntu, but I understand they've spent a lot of effort to integrate Secure Boot to the standard installation process and to make it as user-friendly as possible.

Note that Secure Boot for Third Party drivers may require a more complex configuration than just Secure Boot, but it seems the installer might be programmed to cover both cases.

Bottom line: assuming that everything works as it should, it is certainly possible that the installer can make the proper preparations to support Secure Boot with third-party drivers.

But if you encounter problems, be aware that some of them may be caused by Secure Boot-related UEFI firmware bugs or limitations of Dell's particular implementation of Secure Boot. In that case, you may have to look for the option to disable Secure Boot in the system's firmware settings (commonly called "BIOS settings", but Secure Boot requires UEFI, and UEFI is not a traditional BIOS).

If you want to understand what is happening in more detail, this webpage might be helpful, although it is not about Ubuntu-style distributions specifically.

| improve this answer | |
  • Finally I decided to use UEFI with disabled secure boot. Alas I never understood what the installer tried to tell me. – Silicomancer Apr 27 '19 at 12:37

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.