Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
Summary: Will Intel PCs be far behind? It turns out Microsoft will use UEFI to imprison Windows 8 device users to Windows 8.
Microsoft wants to imprison you in its forthcoming Windows 8 devices.
Microsoft and its vendor friends said that there's no Windows 8 plot to lock other operating systems from Windows 8 devices, but now we know Microsoft was not telling the whole truth.
Journalist Glyn Moody dug around Microsoft's Windows Hardware Certification Requirements for Windows 8 client and server systems and found on page 116 that will Windows 8 Secure Boot can be disabled: on Intel systems, "Disabling Secure [Boot] must not be possible on ARM systems."
What does that mean? According to Aaron Williamson, a lawyer with the Software Freedom Law Center an organization that provides pro-bono legal services to developers of Free and open-source software, Microsoft has wasted no time in effectively banning most alternative operating systems on ARM-based devices that ship with Windows 8.
Microsoft will be doing this by using Unified Extensible Firmware Interface (UEFI), to block block all other operating systems from Windows 8 systems. UEFI is the 21st century's replacement to PC and other devices' BIOS. It's used to set up your computer and make it ready to boot.
Williamson explains, "The Certification Requirements define ... a 'custom' secure boot mode, in which a physically present user can add signatures for alternative operating systems to the system's signature database, allowing the system to boot those operating systems. But for ARM devices, Custom Mode is prohibited: 'On an ARM system, it is forbidden to enable Custom Mode. Only Standard Mode may be enable." [sic] Nor will users have the choice to simply disable secure boot, as they will on non-ARM systems: "Disabling Secure [Boot] MUST NOT be possible on ARM systems.' [sic] Between these two requirements, any ARM device that ships with Windows 8 will never run another operating system, unless it is signed with a preloaded key or a security exploit is found that enables users to circumvent secure boot."
In short, Microsoft insists that any Windows 8 ARM-powered device can not be rebooted or rooted with the user's choice of operating system. And you thought rooting some Android phones was troublesome!
Williamson went on to say that while "While UEFI secure boot is ostensibly about protecting user security, these non-standard restrictions have nothing to do with security. For non-ARM systems, Microsoft requires that Custom Mode be enabled-a perverse demand if Custom Mode is a security threat. But the ARM market is different for Microsoft in three important respects"
These are:
Microsoft's hardware partners are different for ARM. ARM is of interest to Microsoft primarily for one reason: all of the handsets running the Windows Phone operating system are ARM-based. By contrast, Intel rules the PC world. There, Microsoft's secure boot requirements-which allow users to add signatures in Custom Mode or disable secure boot entirely-track very closely to the recommendations of the UEFI Forum, of which Intel is a founding member.
Microsoft doesn't need to support legacy Windows versions on ARM. If Microsoft locked unsigned operating systems out of new PCs, it would risk angering its own customers who prefer Windows XP or Windows 7 (or, hypothetically, Vista). With no legacy versions to support on ARM, Microsoft is eager to lock users out.
Microsoft doesn't control sufficient market share on mobile devices to raise antitrust concerns. While Microsoft doesn't command quite the monopoly on PCs that it did in 1998, when it was prosecuted for antitrust violations, it still controls around 90% of the PC operating system market-enough to be concerned that banning non-Windows operating systems from Windows 8 PCs will bring regulators knocking. Its tiny stake in the mobile market may not be a business strategy, but for now it may provide a buffer for its anticompetitive behavior there.
It doesn't have to be this way. As Williamson points out UEFI's secure boot isn't meant to be used to block user's choice. In addition, the Linux Foundation has explained in detail how UEFI secure boot could be implemented by Microsoft so that freedom of choice would be preserved.
Microsoft isn't listening. The Linux Foundation made its proposal in October; Microsoft published its document in December. As Williamson said, "It is clear now that opportunism, not philosophy, is guiding Microsoft's secure boot policy."
Don't think this is about smartphones and thus, given Microsoft's tiny share of the smartphone market of no real importance. Williamson concluded, "Before this week, this policy might have concerned only Windows Phone customers. But just yesterday, Qualcomm announced plans to produce Windows 8 tablets and ultrabook-style laptops built around its ARM-based Snapdragon processors. Unless Microsoft changes its policy, these may be the first PCs ever produced that can never run anything but Windows, no matter how Qualcomm feels about limiting its customers' choices. SFLC predicted in our comments to the Copyright Office that misuse of UEFI secure boot would bring such restrictions, already common on smartphones, to PCs. Between Microsoft's new ARM secure boot policy and Qualcomm's announcement, this worst-case scenario is beginning to look inevitable."
That's the one point I disagree with Williamson on. This isn't the worse case. The worse case is that Microsoft decides, "What the heck" and introduces lock out style UEFI secure booting on Intel PCs. While flirting with fire from the anti-trust action, I wouldn't put it pass them.
Prison Cell image by Tim Pearce, Los Gatos, CC 2.0.
Related Stories:
Leading PC makers confirm: no Windows 8 plot to lock out Linux
Linux Foundation proposes to use UEFI to make PCs secure and free
Free Software Foundation urges OEMs to say no to mandatory Windows 8 UEFI cage
Microsoft to stop Linux, older Windows, from running on Windows 8 PCs
Microsoft: Don't blame us if Windows 8's secure boot requirement blocks Linux dual-boot
Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.
Talkback
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
This isn???t the worse case. The worse case is that Apple decides, ???What the heck???, lets go open source and make everything free.
Let the imaginations run wild !!! :)
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
I don't think that's even legal under the GPL.
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
SJVN does not know the "case" he speculates based on his personal bias and hatred for Microsoft but praises companies he loves like Google for doing similar things or conveniently neglects to report on that stuff. If the maker of the tablet (which won't be Microsoft) disables the functionality to disable secureboot then that is the Maker of the Tablet or computer and not Microsoft. If the ARM processor has an incompatibility with disabling Secure Boot like he mentions in the first paragraph then that is a limitation of the ARM processor also not made by Microsoft.
Also he neglects to mention that at least 90% of the people of this world do not ever change the OS that comes with their devices. People buy it for the features it comes with and use it at that. There are plenty of Tablet choices and if they do not want a Windows based one then they look at one of the many other offerings. This is the same crap that Linux fanboys say about PCs. People buy a computer for what it comes with and if they do not want a Windows based computer then there are many other choices like to assemble their own or support a local geek or PC shop and have one put together with our without an OS of their choice.
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
Umm.. Yeah key word there is imagination
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
[i]SJVN does not know the "case" he speculates based on his personal bias and hatred for Microsoft but praises companies he loves like Google for doing similar things or conveniently neglects to report on that stuff.[/i]
And yet you still read it. Why don't you give up the myth that everybody's supposed to be "unbiased". That's a ridiculous pipe dream.
[i]If the maker of the tablet (which won't be Microsoft) disables the functionality to disable secureboot then that is the Maker of the Tablet or computer and not Microsoft. If the ARM processor has an incompatibility with disabling Secure Boot like he mentions in the first paragraph then that is a limitation of the ARM processor also not made by Microsoft.[/i]
Did you bother to read the article, bobiroc?
It SAYS:
"Journalist Glyn Moody dug around Microsoft???s Windows Hardware Certification Requirements for Windows 8 client and server systems and found on page 116 that will Windows 8 Secure Boot can be disabled: on Intel systems, [b]"Disabling Secure [Boot] must not be possible on ARM systems."[/b]
Do you not understand English? Did you miss that part? This is right out of Microsoft's own certification requirements!
Good grief man, is denial one of your strong suits? Get a grip.
[i]There are plenty of Tablet choices and if they do not want a Windows based one then they look at one of the many other offerings.[/i]
Well there really isn't much in the line of ARM-based Windows tablet out there yet. And no, the Slate failure doesn't count.
[i]This is the same crap that Linux fanboys say about PCs. People buy a computer for what it comes with and if they do not want a Windows based computer then there are many other choices like to assemble their own or support a local geek or PC shop and have one put together with our without an OS of their choice.[/i]
And you've been told repeatedly that not everyone can afford custom-made PCs just so they can get around Microsoft's monopoly. That is a small fraction of the PC market. A better solution would be to have blank HDs at the time of ordering and let the customer choose what they want. If it's overwhelmingly Windows then so be it.
You've been told this before, bobiroc. Many times. Many many times.
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
And why would you ever need a custom-made PC? Most Linux install discs are easy to set up and allow you to wipe the existing hard drive clean.
And, no, the HP Slate doesn't count. It's an x86-based tablet. Aimed at business users.
Also, this entire article isn't news. Basically: "All Windows 8 ARM tablets will have locked bootloaders." (or at least its functional equivalent). So? iPads/iPhones have locked bootloaders. Motorola phones have locked bootloaders. It hasn't stopped people from buying them yet.
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
+1 It seems that the bloggers here have become very tech vendor biased to where it is becoming the National Enquirer of tech sites. So sad to see this i have been a daily zdnet site visitor for years. It would be nice to see factuals on there articles instead of complete opinions or interpretations.
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
He gave you the facts...
If you would take the time to actually read the article and look up the references, you would find them to be completely factual. If you want to ignore the facts for your biased opinion, then then is your option. You continue to spin in your fantasy world hoping that it becomes the real one, we the rest of us will deal with the real facts.
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
+100000
Agreed. When the truth doesn't support a person's hatred
then they just bend the truth to make it work in their favor.
Chromebook is different, he says - they make it so you can't install another OS so as to make it "more secure", in a sense, "looking out for our well being".
But then ZDNet doesn't pay the bloggers on accuracy, they pay on replys
They pay by page views
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
Please stop talking about the Chromebook and address the fact that Microsoft is requiring ARM devices to be locked down, something you suggested wouldn't happen.
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
And Microsoft is initiating that, something that they're in deep denial about.
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
Most people don't care about locked bootloaders on ARM devices. They're used for tablets, phones, embedded systems, in which this doesn't matter quite as much.
RE: Microsoft to lock out other operating systems from Windows 8 ARM PCs & devices
It also doesn't really matter for desktops. For those of us who actually DO try other operating systems on desktops, we all know a dozen ways to get around this issue, including VMWare or Hyper-V. In fact, most of that 0.1% who test other operating systems have an old PC sitting around to try things on in a worst case scenario.