UEFI - Misplaced Pages

(Redirected from UEFI secure boot) Technical specification for firmware architecture

Unified Extensible Firmware Interface

Abbreviation	UEFI
Status	Published
Year started	2006
Latest version	2.11 December 16, 2024
Organization	UEFI Forum
Related standards	ACPI, UEFI Platform Initialization
Predecessor	BIOS on IBM PC compatible computers
Domain	Firmware
Website	uefi.org

Unified Extensible Firmware Interface (UEFI, /ˈjuːɪfaɪ/ or as an acronym) is a specification for the firmware architecture of a computing platform. When a computer is powered on, the UEFI-implementation is typically the first that runs, before starting the operating system. Examples include AMI Aptio, Phoenix SecureCore, TianoCore EDK II, InsydeH2O.

UEFI replaces the BIOS that was present in the boot ROM of all personal computers that are IBM PC compatible, although it can provide backwards compatibility with the BIOS using CSM booting. Unlike its predecessor, BIOS, which is a de facto standard originally created by IBM as proprietary software, UEFI is an open standard maintained by an industry consortium.

Intel developed the original Extensible Firmware Interface (EFI) specification. The last Intel version of EFI was 1.10 released in 2005. Subsequent versions have been developed as UEFI by the Unified EFI Forum.

UEFI is independent of platform and programming language, but C is used for the reference implementation TianoCore EDKII.

History

The original motivation for EFI came during early development of the first Intel–HP Itanium systems in the mid-1990s. BIOS limitations (such as 16-bit real mode, 1 MB addressable memory space, assembly language programming, and PC AT hardware) had become too restrictive for the larger server platforms Itanium was targeting. The effort to address these concerns began in 1998 and was initially called Intel Boot Initiative. It was later renamed to Extensible Firmware Interface (EFI).

The first open source UEFI implementation, Tiano, was released by Intel in 2004. Tiano has since then been superseded by EDK and EDK II and is now maintained by the TianoCore community.

In July 2005, Intel ceased its development of the EFI specification at version 1.10, and contributed it to the Unified EFI Forum, which has developed the specification as the Unified Extensible Firmware Interface (UEFI). The original EFI specification remains owned by Intel, which exclusively provides licenses for EFI-based products, but the UEFI specification is owned by the UEFI Forum.

Version 2.0 of the UEFI specification was released on 31 January 2006. It added cryptography and security.

Version 2.1 of the UEFI specification was released on 7 January 2007. It added network authentication and the user interface architecture ('Human Interface Infrastructure' in UEFI).

In October 2018, Arm announced Arm ServerReady, a compliance certification program for landing the generic off-the-shelf operating systems and hypervisors on Arm-based servers. The program requires the system firmware to comply with Server Base Boot Requirements (SBBR). SBBR requires UEFI, ACPI and SMBIOS compliance. In October 2020, Arm announced the extension of the program to the edge and IoT market. The new program name is Arm SystemReady. Arm SystemReady defined the Base Boot Requirements (BBR) specification that currently provides three recipes, two of which are related to UEFI: 1) SBBR: which requires UEFI, ACPI and SMBIOS compliance suitable for enterprise level operating environments such as Windows, Red Hat Enterprise Linux, and VMware ESXi; and 2) EBBR: which requires compliance to a set of UEFI interfaces as defined in the Embedded Base Boot Requirements (EBBR) suitable for embedded environments such as Yocto. Many Linux and BSD distros can support both recipes.

In December 2018, Microsoft announced Project Mu, a fork of TianoCore EDK II used in Microsoft Surface and Hyper-V products. The project promotes the idea of firmware as a service.

The latest UEFI specification, version 2.11, was published in December 2024.

Advantages

The interface defined by the EFI specification includes data tables that contain platform information, and boot and runtime services that are available to the OS loader and OS. UEFI firmware provides several technical advantages over a BIOS:

Ability to boot a disk containing large partitions (over 2 TB) with a GUID Partition Table (GPT)
Flexible pre-OS environment, including network capability, GUI, multi language
32-bit (for example IA-32, ARM32) or 64-bit (for example x64, AArch64) pre-OS environment
C language programming
Python programming using Python interpreter for UEFI shell
Modular design
Backward and forward compatibility

With UEFI, it is possible to store product keys for operating systems such as Windows, on the UEFI firmware of the device. UEFI is required for Secure Boot on devices shipping with Windows 8 and above.

It is also possible for operating systems to access UEFI configuration data.

Compatibility

Processor compatibility

As of version 2.5, processor bindings exist for Itanium, x86, x86-64, ARM (AArch32) and ARM64 (AArch64). Only little-endian processors can be supported. Unofficial UEFI support is under development for POWERPC64 by implementing TianoCore on top of OPAL, the OpenPOWER abstraction layer, running in little-endian mode. Similar projects exist for MIPS and RISC-V. As of UEFI 2.7, RISC-V processor bindings have been officially established for 32-, 64- and 128-bit modes.

Standard PC BIOS is limited to a 16-bit processor mode and 1 MB of addressable memory space, resulting from the design based on the IBM 5150 that used a 16-bit Intel 8088 processor. In comparison, the processor mode in a UEFI environment can be either 32-bit (IA-32, AArch32) or 64-bit (x86-64, Itanium, and AArch64). 64-bit UEFI firmware implementations support long mode, which allows applications in the preboot environment to use 64-bit addressing to get direct access to all of the machine's memory.

UEFI requires the firmware and operating system loader (or kernel) to be size-matched; that is, a 64-bit UEFI firmware implementation can load only a 64-bit operating system (OS) boot loader or kernel (unless the CSM-based legacy boot is used) and the same applies to 32-bit. After the system transitions from boot services to runtime services, the operating system kernel takes over. At this point, the kernel can change processor modes if it desires, but this bars usage of the runtime services (unless the kernel switches back again). As of version 3.15, the Linux kernel supports 64-bit kernels to be booted on 32-bit UEFI firmware implementations running on x86-64 CPUs, with UEFI handover support from a UEFI boot loader as the requirement. UEFI handover protocol deduplicates the UEFI initialization code between the kernel and UEFI boot loaders, leaving the initialization to be performed only by the Linux kernel's UEFI boot stub.

Disk device compatibility

In addition to the standard PC disk partition scheme that uses a master boot record (MBR), UEFI also works with the GUID Partition Table (GPT) partitioning scheme, which is free from many of the limitations of MBR. In particular, the MBR limits on the number and size of disk partitions (up to four primary partitions per disk, and up to 2 TB (2 × 2 bytes) per disk) are relaxed. More specifically, GPT allows for a maximum disk and partition size of 8 ZiB (8 × 2 bytes).

Linux

Microsoft Windows

Some of the EFI's practices and data formats mirror those of Microsoft Windows.

The 64-bit versions of Windows Vista SP1 and later and 64-bit versions of Windows 8, 8.1, 10, and 11 can boot from a GPT disk that is larger than 2 TB.

Features

Services

EFI defines two types of services: boot services and runtime services. Boot services are available only while the firmware owns the platform (i.e., before the ExitBootServices() call), and they include text and graphical consoles on various devices, and bus, block and file services. Runtime services are still accessible while the operating system is running; they include services such as date, time and NVRAM access.

Graphics Output Protocol (GOP) services: The Graphics Output Protocol (GOP) provides runtime services; see also Graphics features section below. The operating system is permitted to directly write to the framebuffer provided by GOP during runtime mode.

UEFI Memory map services

SMM services

ACPI services

SMBIOS services

Devicetree services (for RISC processors)

Variable services: UEFI variables provide a way to store data, in particular non-volatile data. Some UEFI variables are shared between platform firmware and operating systems. Variable namespaces are identified by GUIDs, and variables are key/value pairs. For example, UEFI variables can be used to keep crash messages in NVRAM after a crash for the operating system to retrieve after a reboot.

Time services: UEFI provides time services. Time services include support for time zone and daylight saving fields, which allow the hardware real-time clock to be set to local time or UTC. On machines using a PC-AT real-time clock, by default the hardware clock still has to be set to local time for compatibility with BIOS-based Windows, unless using recent versions and an entry in the Windows registry is set to indicate the use of UTC.

Applications

Beyond loading an OS, UEFI can run UEFI applications, which reside as files on the EFI system partition. They can be executed from the UEFI Shell, by the firmware's boot manager, or by other UEFI applications. UEFI applications can be developed and installed independently of the original equipment manufacturers (OEMs).

A type of UEFI application is an OS boot loader such as GRUB, rEFInd, Gummiboot, and Windows Boot Manager, which loads some OS files into memory and executes them. Also, an OS boot loader can provide a user interface to allow the selection of another UEFI application to run. Utilities like the UEFI Shell are also UEFI applications.

Protocols

EFI defines protocols as a set of software interfaces used for communication between two binary modules. All EFI drivers must provide services to others via protocols. The EFI Protocols are similar to the BIOS interrupt calls.

Device drivers

In addition to standard instruction set architecture-specific device drivers, EFI provides for a ISA-independent device driver stored in non-volatile memory as EFI byte code or EBC. System firmware has an interpreter for EBC images. In that sense, EBC is analogous to Open Firmware, the ISA-independent firmware used in PowerPC-based Apple Macintosh and Sun Microsystems SPARC computers, among others.

Some architecture-specific (non-EFI Byte Code) EFI drivers for some device types can have interfaces for use by the OS. This allows the OS to rely on EFI for drivers to perform basic graphics and network functions before, and if, operating-system-specific drivers are loaded.

In other cases, the EFI driver can be filesystem drivers that allow for booting from other types of disk volumes. Examples include efifs for 37 file systems (based on GRUB2 code), used by Rufus for chain-loading NTFS ESPs.

Graphics features

The EFI 1.0 specification defined a UGA (Universal Graphic Adapter) protocol as a way to support graphics features. UEFI did not include UGA and replaced it with GOP (Graphics Output Protocol).

UEFI 2.1 defined a "Human Interface Infrastructure" (HII) to manage user input, localized strings, fonts, and forms (in the HTML sense). These enable original equipment manufacturers (OEMs) or independent BIOS vendors (IBVs) to design graphical interfaces for pre-boot configuration. UEFI uses UTF-16 to encode strings by default.

Most early UEFI firmware implementations were console-based. Today many UEFI firmware implementations are GUI-based.

EFI system partition

Main article: EFI system partition

An EFI system partition, often abbreviated to ESP, is a data storage device partition that is used in computers adhering to the UEFI specification. Accessed by the UEFI firmware when a computer is powered up, it stores UEFI applications and the files these applications need to run, including operating system boot loaders. Supported partition table schemes include MBR and GPT, as well as El Torito volumes on optical discs. For use on ESPs, UEFI defines a specific version of the FAT file system, which is maintained as part of the UEFI specification and independently from the original FAT specification, encompassing the FAT32, FAT16 and FAT12 file systems. The ESP also provides space for a boot sector as part of the backward BIOS compatibility.

Booting

UEFI booting

Unlike the legacy PC BIOS, UEFI does not rely on boot sectors, defining instead a boot manager as part of the UEFI specification. When a computer is powered on, the boot manager checks the boot configuration and, based on its settings, then executes the specified OS boot loader or operating system kernel (usually boot loader). The boot configuration is defined by variables stored in NVRAM, including variables that indicate the file system paths to OS loaders or OS kernels.

OS boot loaders can be automatically detected by UEFI, which enables easy booting from removable devices such as USB flash drives. This automated detection relies on standardized file paths to the OS boot loader, with the path varying depending on the computer architecture. The format of the file path is defined as <EFI_SYSTEM_PARTITION>\EFI\BOOT\BOOT<MACHINE_TYPE_SHORT_NAME>.EFI; for example, the file path to the OS loader on an x86-64 system is \efi\boot\bootx64.efi, and \efi\boot\bootaa64.efi on ARM64 architecture.

Booting UEFI systems from GPT-partitioned disks is commonly called UEFI-GPT booting. Despite the fact that the UEFI specification requires MBR partition tables to be fully supported, some UEFI firmware implementations immediately switch to the BIOS-based CSM booting depending on the type of boot disk's partition table, effectively preventing UEFI booting to be performed from EFI System Partition on MBR-partitioned disks. Such a boot scheme is commonly called UEFI-MBR.

It is also common for a boot manager to have a textual user interface so the user can select the desired OS (or setup utility) from a list of available boot options.

CSM booting

To ensure backward compatibility, UEFI firmware implementations on PC-class machines could support booting in legacy BIOS mode from MBR-partitioned disks through the Compatibility Support Module (CSM) that provides legacy BIOS compatibility. In this scenario, booting is performed in the same way as on legacy BIOS-based systems, by ignoring the partition table and relying on the content of a boot sector.

BIOS-style booting from MBR-partitioned disks is commonly called BIOS-MBR, regardless of it being performed on UEFI or legacy BIOS-based systems. Furthermore, booting legacy BIOS-based systems from GPT disks is also possible, and such a boot scheme is commonly called BIOS-GPT.

The Compatibility Support Module allows legacy operating systems and some legacy option ROMs that do not support UEFI to still be used. It also provides required legacy System Management Mode (SMM) functionality, called CompatibilitySmm, as an addition to features provided by the UEFI SMM. An example of such a legacy SMM functionality is providing USB legacy support for keyboard and mouse, by emulating their classic PS/2 counterparts.

In November 2017, Intel announced that it planned to phase out support CSM for client platforms by 2020.

In July, of 2022, Kaspersky Labs published information regarding a Rootkit designed to chain boot malicious code on machines using Intel's H81 chipset and the Compatibility Support module of affected motherboards.

In August 2023, Intel announced that it planned to phase out support CSM for server platforms by 2024.

As of today, all computers based on Intel platforms no longer have CSM support.

Network booting

The UEFI specification includes support for booting over network via the Preboot eXecution Environment (PXE). PXE booting network protocols include Internet Protocol (IPv4 and IPv6), User Datagram Protocol (UDP), Dynamic Host Configuration Protocol (DHCP), Trivial File Transfer Protocol (TFTP) and iSCSI.

OS images can be remotely stored on storage area networks (SANs), with Internet Small Computer System Interface (iSCSI) and Fibre Channel over Ethernet (FCoE) as supported protocols for accessing the SANs.

Version 2.5 of the UEFI specification adds support for accessing boot images over HTTP.

Secure Boot

UEFI shell

UEFI provides a shell environment, which can be used to execute other UEFI applications, including UEFI boot loaders. Apart from that, commands available in the UEFI shell can be used for obtaining various other information about the system or the firmware, including getting the memory map (memmap), modifying boot manager variables (bcfg), running partitioning programs (diskpart), loading UEFI drivers, and editing text files (edit).

Source code for a UEFI shell can be downloaded from the Intel's TianoCore UDK/EDK2 project. A pre-built ShellBinPkg is also available. Shell v2 works best in UEFI 2.3+ systems and is recommended over Shell v1 in those systems. Shell v1 should work in all UEFI systems.

Methods used for launching UEFI shell depend on the manufacturer and model of the system motherboard. Some of them already provide a direct option in firmware setup for launching, e.g. compiled x86-64 version of the shell needs to be made available as <EFI_SYSTEM_PARTITION>/SHELLX64.EFI. Some other systems have an already embedded UEFI shell which can be launched by appropriate key press combinations. For other systems, the solution is either creating an appropriate USB flash drive or adding manually (bcfg) a boot option associated with the compiled version of shell.

Commands

The following is a list of commands supported by the EFI shell.

alias
attrib
bcfg
cd
cls
comp
cp
date
dblk
dh
dmpstore
echo
Edd30
EddDebug
edit
err
guid
help
load
ls
map
mem
memmap
mkdir
mm
mode
mount
pause
pci
reset
rm
set
stall
time
type
unload
ver
vol

Extensions

Extensions to UEFI can be loaded from virtually any non-volatile storage device attached to the computer. For example, an original equipment manufacturer (OEM) can distribute systems with an EFI system partition on the hard drive, which would add additional functions to the standard UEFI firmware stored on the motherboard's ROM.

UEFI Capsule

UEFI Capsule defines a Firmware-to-OS firmware update interface, marketed as modern and secure. Windows 8, Windows 8.1, Windows 10, and Fwupd for Linux each support the UEFI Capsule.

Hardware

Like BIOS, UEFI initializes and tests system hardware components (e.g. memory training, PCIe link training, USB link training on typical x86 systems), and then loads the boot loader from a mass storage device or through a network connection. In x86 systems, the UEFI firmware is usually stored in the NOR flash chip of the motherboard. In some ARM-based Android and Windows Phone devices, the UEFI boot loader is stored in the eMMC or eUFS flash memory.

Classes

UEFI machines can have one of the following classes, which were used to help ease the transition to UEFI:

Class 0: Legacy BIOS
Class 1: UEFI with a CSM interface and no external UEFI interface. The only UEFI interfaces are internal to the firmware.
Class 2: UEFI with CSM and external UEFI interfaces, eg. UEFI Boot.
Class 3: UEFI without a CSM interface and with an external UEFI interface.
Class 3+: UEFI class 3 that has Secure Boot enabled.

Starting from the 10th Gen Intel Core, Intel no longer provides Legacy Video BIOS for the iGPU (Intel Graphics Technology). Legacy boot with those CPUs requires a Legacy Video BIOS, which can still be provided by a video card.

Boot stages

SEC – Security Phase

This is the first stage of the UEFI boot but may have platform specific binary code that precedes it. (e.g., Intel ME, AMD PSP, CPU microcode). It consists of minimal code written in assembly language for the specific architecture. It initializes a temporary memory (often CPU cache-as-RAM (CAR), or SoC on-chip SRAM) and serves as the system's software root of trust with the option of verifying PEI before hand-off.

PEI – Pre-EFI Initialization

The second stage of UEFI boot consists of a dependency-aware dispatcher that loads and runs PEI modules (PEIMs) to handle early hardware initialization tasks such as main memory initialization (initialize memory controller and DRAM) and firmware recovery operations. Additionally, it is responsible for discovery of the current boot mode and handling many ACPI S3 operations. In the case of ACPI S3 resume, it is responsible for restoring many hardware registers to a pre-sleep state. PEI also uses CAR. Initialization at this stage involves creating data structures in memory and establishing default values within these structures.

DXE – Driver Execution Environment

This stage consist of C modules and a dependency-aware dispatcher. With main memory now available, CPU, chipset, mainboard and other I/O devices are initialized in DXE and BDS. Initialization at this stage involves assigning EFI device paths to the hardware connected to the motherboard, and transferring configuration data to the hardware.

BDS – Boot Device Select

BDS is a part of the DXE. In this stage, boot devices are initialized, UEFI drivers or Option ROMs of PCI devices are executed according to system configuration, and boot options are processed.

TSL – Transient System Load

This is the stage between boot device selection and hand-off to the OS. At this point one may enter UEFI shell, or execute an UEFI application such as the OS boot loader.

RT – Runtime

The UEFI hands off to the operating system (OS) after ExitBootServices() is executed. A UEFI compatible OS is now responsible for exiting boot services triggering the firmware to unload all no longer needed code and data, leaving only runtime services code/data, e.g. SMM and ACPI. A typical modern OS will prefer to use its own programs (such as kernel drivers) to control hardware devices.

When a legacy OS is used, CSM will handle this call ensuring the system is compatible with legacy BIOS expectations.

Usage

Implementations

Intel's implementation of EFI is the Intel Platform Innovation Framework, codenamed Tiano. Tiano runs on Intel's XScale, Itanium, IA-32 and x86-64 processors, and is proprietary software, although a portion of the code has been released under the BSD license or Eclipse Public License (EPL) as TianoCore EDK II. TianoCore can be used as a payload for coreboot.

Phoenix Technologies' implementation of UEFI is branded as SecureCore Technology (SCT). American Megatrends offers its own UEFI firmware implementation known as Aptio, while Insyde Software offers InsydeH2O, and Byosoft offers ByoCore.

In December 2018, Microsoft released an open source version of its TianoCore EDK2-based UEFI implementation from the Surface line, Project Mu.

An implementation of the UEFI API was introduced into the Universal Boot Loader (Das U-Boot) in 2017. On the ARMv8 architecture Linux distributions use the U-Boot UEFI implementation in conjunction with GNU GRUB for booting (e.g. SUSE Linux), the same holds true for OpenBSD. For booting from iSCSI iPXE can be used as a UEFI application loaded by U-Boot.

Platforms

Intel's first Itanium workstations and servers, released in 2000, implemented EFI 1.02.

Hewlett-Packard's first Itanium 2 systems, released in 2002, implemented EFI 1.10; they were able to boot Windows, Linux, FreeBSD and HP-UX; OpenVMS added UEFI capability in June 2003.

In January 2006, Apple Inc. shipped its first Intel-based Macintosh computers. These systems used EFI instead of Open Firmware, which had been used on its previous PowerPC-based systems. On 5 April 2006, Apple first released Boot Camp, which produces a Windows drivers disk and a non-destructive partitioning tool to allow the installation of Windows XP or Vista without requiring a reinstallation of Mac OS X (now macOS). A firmware update was also released that added BIOS compatibility to its EFI implementation. Subsequent Macintosh models shipped with the newer firmware.

During 2005, more than one million Intel systems shipped with Intel's implementation of UEFI. New mobile, desktop and server products, using Intel's implementation of UEFI, started shipping in 2006. For instance, boards that use the Intel 945 chipset series use Intel's UEFI firmware implementation.

Since 2005, EFI has also been implemented on non-PC architectures, such as embedded systems based on XScale cores.

The EDK (EFI Developer Kit) includes an NT32 target, which allows EFI firmware and EFI applications to run within a Windows application. But no direct hardware access is allowed by EDK NT32. This means only a subset of EFI application and drivers can be executed by the EDK NT32 target.

In 2008, more x86-64 systems adopted UEFI. While many of these systems still allow booting only the BIOS-based OSes via the Compatibility Support Module (CSM) (thus not appearing to the user to be UEFI-based), other systems started to allow booting UEFI-based OSes. For example, IBM x3450 server, MSI motherboards with ClickBIOS, HP EliteBook Notebook PCs.

In 2009, IBM shipped System x machines (x3550 M2, x3650 M2, iDataPlex dx360 M2) and BladeCenter HS22 with UEFI capability. Dell shipped PowerEdge T610, R610, R710, M610 and M710 servers with UEFI capability. More commercially available systems are mentioned in a UEFI whitepaper.

In 2011, major vendors (such as ASRock, Asus, Gigabyte, and MSI) launched several consumer-oriented motherboards using the Intel 6-series LGA 1155 chipset and AMD 9 Series AM3+ chipsets with UEFI.

With the release of Windows 8 in October 2012, Microsoft's certification requirements now require that computers include firmware that implements the UEFI specification. Furthermore, if the computer supports the "Connected Standby" feature of Windows 8 (which allows devices to have power management comparable to smartphones, with an almost instantaneous return from standby mode), then the firmware is not permitted to contain a Compatibility Support Module (CSM). As such, systems that support Connected Standby are incapable of booting Legacy BIOS operating systems.

In October 2017, Intel announced that it would remove legacy PC BIOS support from all its products by 2020, in favor of UEFI Class 3. By 2019, all computers based on Intel platforms no longer have legacy PC BIOS support.

Operating systems

An operating system that can be booted from a (U)EFI is called a (U)EFI-aware operating system, defined by (U)EFI specification. Here the term booted from a (U)EFI means directly booting the system using a (U)EFI operating system loader stored on any storage device. The default location for the operating system loader is <EFI_SYSTEM_PARTITION>/BOOT/BOOT<MACHINE_TYPE_SHORT_NAME>.EFI, where short name of the machine type can be IA32, X64, IA64, ARM or AA64. Some operating systems vendors may have their own boot loaders. They may also change the default boot location.

The Linux kernel has been able to use EFI at boot time since early 2000s, using the elilo EFI boot loader or, more recently, EFI versions of GRUB. Grub+Linux also supports booting from a GUID partition table without UEFI. The distribution Ubuntu added support for UEFI Secure Boot as of version 12.10. Furthermore, the Linux kernel can be compiled with the option to run as an EFI bootloader on its own through the EFI boot stub feature.
HP-UX has used (U)EFI as its boot mechanism on IA-64 systems since 2002.
OpenVMS has used EFI on IA-64 since its initial evaluation release in December 2003, and for production releases since January 2005. OpenVMS on x86-64 also uses UEFI to boot the operating system.
Apple uses EFI for its line of Intel-based Macs. Mac OS X v10.4 Tiger and Mac OS X v10.5 Leopard implement EFI v1.10 in 32-bit mode even on newer 64-bit CPUs, but full support arrived with OS X v10.8 Mountain Lion.
The Itanium versions of Windows 2000 (Advanced Server Limited Edition and Datacenter Server Limited Edition; based on the pre-release Windows Server 2003 codebase) implemented EFI 1.10 in 2002. Windows XP 64-bit Edition, Windows 2000 Advanced Server Limited Edition (pre-release Windows Server 2003) and Windows Server 2003 for IA-64, all of which are for the Intel Itanium family of processors, implement EFI, a requirement of the platform through the DIG64 specification.
Microsoft introduced UEFI for x64 Windows operating systems with Windows Vista SP1 and Windows Server 2008 however only UGA (Universal Graphic Adapter) 1.1 or Legacy BIOS INT 10h is supported; Graphics Output Protocol (GOP) is not supported. Therefore, PCs running 64-bit versions of Windows Vista SP1, Windows Vista SP2, Windows 7, Windows Server 2008 and Windows Server 2008 R2 are compatible with UEFI Class 2. 32-bit UEFI was originally not supported since vendors did not have any interest in producing native 32-bit UEFI firmware because of the mainstream status of 64-bit computing. Windows 8 finally introduced further optimizations for UEFI systems, including Graphics Output Protocol (GOP) support, a faster startup, 32-bit UEFI support, and Secure Boot support. Since Windows 8, the UEFI firmware with ACPI protocol is a mandatory requirement for ARM-based Microsoft Windows operating systems. Microsoft began requiring UEFI to run Windows with Windows 11, with IoT Enterprise editions of Windows 11 since version 24H2 exempt from the requirement.
On 5 March 2013, the FreeBSD Foundation awarded a grant to a developer seeking to add UEFI support to the FreeBSD kernel and bootloader. The changes were initially stored in a discrete branch of the FreeBSD source code, but were merged into the mainline source on 4 April 2014 (revision 264095); the changes include support in the installer as well. UEFI boot support for amd64 first appeared in FreeBSD 10.1 and for arm64 in FreeBSD 11.0.
Oracle Solaris 11.1 and later support UEFI boot for x86 systems with UEFI firmware version 2.1 or later. GRUB 2 is used as the boot loader on x86.
OpenBSD 5.9 introduced UEFI boot support for 64-bit x86 systems using its own custom loader, OpenBSD 6.0 extended that support to include ARMv7.
illumos added basic UEFI support in October 2017.
ArcaOS supports UEFI booting since the 5.1 release. ArcaOS' UEFI support emulates specific BIOS functionality which the operating system depends on (particularly interrupts INT 10H and INT 13H).

With virtualization

HP Integrity Virtual Machines provides UEFI boot on HP Integrity Servers. It also provides a virtualized UEFI environment for the guest UEFI-aware OSes.
Intel hosts an Open Virtual Machine Firmware project on SourceForge.
VMware Fusion 3 software for Mac OS X can boot Mac OS X Server virtual machines using UEFI.
VMware Workstation prior to version 11 unofficially supports UEFI, but is manually enabled by editing the .vmx file. VMware Workstation version 11 and above supports UEFI, independently of whether the physical host system is UEFI-based. VMware Workstation 14 (and accordingly, Fusion 10) adds support for the Secure Boot feature of UEFI.
The VMware ESXi 5.0 hypervisor officially supports UEFI. Version 6.5 adds support for Secure Boot.
VirtualBox has implemented UEFI since 3.1, but is limited to Unix/Linux operating systems and Windows 8 and later (does not work with Windows Vista x64 and Windows 7 x64).
QEMU/KVM can be used with the Open Virtual Machine Firmware (OVMF) provided by TianoCore.
The second generation of the Microsoft Hyper-V virtual machine supports virtualized UEFI.
Google Cloud Platform Shielded VMs support virtualized UEFI to enable Secure Boot.

Applications development

EDK2 Application Development Kit (EADK) makes it possible to use standard C library functions in UEFI applications. EADK can be freely downloaded from the Intel's TianoCore UDK / EDK2 SourceForge project. As an example, a port of the Python interpreter is made available as a UEFI application by using the EADK. The development has moved to GitHub since UDK2015.

A minimalistic "hello, world" C program written using EADK looks similar to its usual C counterpart:

#include <Uefi.h>
#include <Library/UefiLib.h>
#include <Library/ShellCEntryLib.h>
EFI_STATUS EFIAPI ShellAppMain(IN UINTN Argc, IN CHAR16 **Argv)
{
    Print(L"hello, world\n");
    return EFI_SUCCESS;
}

Criticism

Numerous digital rights activists have protested UEFI. Ronald G. Minnich, a co-author of coreboot, and Cory Doctorow, a digital rights activist, have criticized UEFI as an attempt to remove the ability of the user to truly control the computer. It does not solve the BIOS's long-standing problems of requiring two different drivers—one for the firmware and one for the operating system—for most hardware.

Open-source project TianoCore also provides UEFIs. TianoCore lacks the specialized drivers that initialize chipset functions, which are instead provided by coreboot, of which TianoCore is one of many payload options. The development of coreboot requires cooperation from chipset manufacturers to provide the specifications needed to develop initialization drivers.

Secure Boot

Firmware problems

The increased prominence of UEFI firmware in devices has also led to a number of technical problems blamed on their respective implementations.

Following the release of Windows 8 in late 2012, it was discovered that certain Lenovo computer models with Secure Boot had firmware that was hardcoded to allow only executables named "Windows Boot Manager" or "Red Hat Enterprise Linux" to load, regardless of any other setting. Other problems were encountered by several Toshiba laptop models with Secure Boot that were missing certain certificates required for its proper operation.

In January 2013, a bug surrounding the UEFI implementation on some Samsung laptops was publicized, which caused them to be bricked after installing a Linux distribution in UEFI mode. While potential conflicts with a kernel module designed to access system features on Samsung laptops were initially blamed (also prompting kernel maintainers to disable the module on UEFI systems as a safety measure), Matthew Garrett discovered that the bug was actually triggered by storing too many UEFI variables to memory, and that the bug could also be triggered under Windows under certain conditions. In conclusion, he determined that the offending kernel module had caused kernel message dumps to be written to the firmware, thus triggering the bug.

Notes

Originally started in 1998 as Intel Boot Initiative and later as Extensible Firmware Interface (EFI), which was deprecated in 2005 and replaced by UEFI.
Part of the BIOS that is required for booting an operating system that is not UEFI-compatible can be implemented as a CSM DXE module, see § CSM booting
Historically also written as Unified EFI, when UEFI was the newly introduced successor to EFI.
Large disk support and features such as Advanced Configuration and Power Interface (ACPI) and System Management BIOS (SMBIOS) were subsequently implemented in BIOS-based systems.

References

"UEFI Forum Releases the UEFI 2.11 Specification and the PI 1.9 Specification To Streamline User Implementations | Unified Extensible Firmware Interface Forum". uefi.org. UEFI Forum. Retrieved 22 December 2024.
"Documentation - Winbond".
"Microsoft Surface Laptop 7 (13.8-inch) Chip ID". 22 June 2024.
Zimmer, Vincent; Rothman, Michael; Marisetty, Suresh (2017). Beyond BIOS: Developing with the Unified Extensible Firmware Interface, Third Edition. Walter de Gruyter GmbH & Co KG. ISBN 978-1-5015-0569-0.
Kinney, Michael (1 September 2000). "Solving BIOS Boot Issues with EFI" (PDF). pp. 47–50. Archived from the original (PDF) on 23 January 2007. Retrieved 14 September 2010.
^ "MS denies secure boot will exclude Linux". The Register. 23 September 2011. Retrieved 24 September 2011.
"Memory Map (x86) - OSDev Wiki". wiki.osdev.org. Retrieved 11 December 2020.
^ "Emulex UEFI Implementation Delivers Industry-leading Features for IBM Systems" (PDF). Emulex. Retrieved 14 September 2010.
Extensible Firmware Interface (EFI) and Unified EFI (UEFI), Intel, archived from the original on 5 January 2010
Wei, Dong (2006), "foreword", Beyond BIOS, Intel Press, ISBN 978-0-9743649-0-2
"1.10 Specification overview", Extensible Firmware Interface, Intel
"GitHub - tianocore/Edk: Git mirror of EDK". GitHub. 19 March 2019.
"GitHub - tianocore/Tianocore.github.io: Tianocore website". GitHub. 8 August 2019.
"What is TianoCore?".
About, Unified EFI Forum, Q: What is the relationship between EFI and UEFI? A: The UEFI specification is based on the EFI 1.10 specification published by Intel with corrections and changes managed by the Unified EFI Forum. Intel still holds the copyright on the EFI 1.10 specification, but has contributed it to the Forum so that the Forum can evolve it. There will be no future versions of the EFI specification, but customers who license it can still use it under the terms of their license from Intel. The license to the Unified EFI Specification comes from the Forum, not from Intel
"Microsoft announces Project Mu, an open-source release of the UEFI core". 20 December 2018.
"Unified Extensible Firmware Interface (UEFI) Specification Version 2.11" (PDF). www.uefi.org. December 2024. Retrieved 22 December 2024.
"UEFI and Windows". Microsoft. 15 September 2009. Retrieved 14 September 2010.
^ "Installation". 3.4 BIOS installation. GNU GRUB. Retrieved 25 September 2013.
"Non-boot disks can use a GPT partition table even with no UEFI bios".
"Using the OA 3.0 Tool on the factory floor". 25 October 2021.
"OA 3.0 Tool: Command-line and config file syntax". 29 July 2021.
UEFI pre-boot guidelines and Microsoft® Windows® 8 UEFI Secure Boot for HP Business PCs (PDF) (Report).{{cite report}}: CS1 maint: url-status (link)
"Next-gen boot spec could forever lock Linux off Windows 8 PCS".
"Windows 8 secure boot could complicate Linux installs". 21 September 2011.
Zimmer, Vincent; Rothman, Michael; Marisetty, Suresh (2017). Beyond BIOS: Developing with the Unified Extensible Firmware Interface, Third Edition. Walter de Gruyter GmbH & Co KG. ISBN 978-1-5015-0569-0.
UEFI Specification 2.4, section 2.3
UEFI specification 2.3.1, section 1.8.1.
"GitHub - andreiw/ppc64le-edk2: TianoCore UEFI for OPAL/PowerNV (PPC64/PowerPC64 Little-Endian)". GitHub. 3 May 2021.
"Tianocore for OpenPOWER". Firmware Security. 12 October 2015.
kontais (3 September 2015). "EFI-MIPS". SourceForge.
"lowRISC · lowRISC".
"Unified Extensible Firmware Interface Specification, Version 2.7" (PDF). May 2017.
Hardwidge, Ben (1 June 2010). "LBA explained — Solving the 3TB Problem?". bit-tech. Retrieved 18 June 2010.
Richardson, Brian (10 May 2010). "Ask a BIOS Guy: "Why UEFI"". Intel Architecture Blog. Archived from the original on 9 October 2010. Retrieved 18 June 2010.
Simpson, Gary. "UEFI Momentum — The AMD perspective". AMD. Archived from the original (PPTX) on 4 January 2014. Retrieved 20 September 2014.
^ "UEFI Specifications (version 2.4 and older)" (PDF). Unified EFI, Inc. June 2013. Retrieved 25 September 2013.
"Linux kernel 3.15, Section 1.3. EFI 64-bit kernels can be booted from 32-bit firmware". kernelnewbies.org. 8 June 2014. Retrieved 15 June 2014.
"x86, efi: Handover Protocol". LWN.net. 19 July 2012. Retrieved 15 June 2014.
"Linux kernel documentation: Documentation/efi-stub.txt". kernel.org. 1 February 2014. Retrieved 15 June 2014.
"FAQ: Drive Partition Limits" (PDF). UEFI Forum. Retrieved 5 December 2019.
"FAQ: Drive Partition Limits" (PDF). UEFI Forum. Archived from the original (PDF) on 22 March 2013. Retrieved 9 June 2010.
^ Smith, Roderick W. (3 July 2012). "Make the most of large drives with GPT and Linux". IBM. Retrieved 25 September 2013.
"block/partitions/Kconfig (3.11.1)". CONFIG_EFI_PARTITION (line #247). kernel.org. Retrieved 25 September 2013.
^ "GRUB". BIOS systems. Arch Linux. Retrieved 25 September 2013.
"GRUB and the boot process on UEFI-based x86 systems". redhat.com. Retrieved 14 November 2013.
"UEFI Booting 64-bit Redhat Enterprise Linux 6". fpmurphy.com. September 2010. Retrieved 14 November 2013.
^ "UEFI Bootloaders". archlinux.org. Retrieved 25 September 2013.
"Unified Extensible Firmware Interface: EFI System Partition". archlinux.org. Retrieved 25 September 2013.
^ "UEFI system booting from MBR partition table and GRUB legacy". Arch Linux Forums. June 2012. Archived from the original on 8 December 2023. Retrieved 6 October 2013.
IBM PC Real Time Clock should run in UT. Cl.cam.ac.uk. Retrieved on 30 October 2013.
^ Garrett, Matthew (19 January 2012). "EFI and Linux: The Future Is Here, and It's Awful". linux.conf.au 2012. Archived from the original on 13 November 2021. Retrieved 2 April 2012.
"What is efifb? — The Linux Kernel documentation". www.kernel.org. Retrieved 24 November 2020.
^ "Samsung UEFI bug: Notebook bricked from Windows". The H. Retrieved 27 February 2013.
UEFI specification, section 7.3
"Free Software EFI Drivers".
Batard, Pete (13 March 2020). "pbatard/uefi-ntfs". GitHub.
"Intel Embedded Graphics Drivers FAQ: BIOS and firmware". Intel. Retrieved 19 May 2014.
"UEFI Specification Version 2.5, Section 12.3 File System Format" (PDF). uefi.org. April 2015. pp. 536, 537. Retrieved 29 May 2015. The file system supported by the Extensible Firmware Interface is based on the FAT file system. EFI defines a specific version of FAT that is explicitly documented and testable. Conformance to the EFI specification and its associate reference documents is the only definition of FAT that needs to be implemented to support EFI. To differentiate the EFI file system from pure FAT, a new partition file system type has been defined.
"Technical Note TN2166: Secrets of the GPT". developer.apple.com. 6 November 2006. Retrieved 6 May 2015.
"UEFI - OSDev Wiki". wiki.osdev.org. Retrieved 26 September 2020.
"EFISTUB - ArchWiki". wiki.archlinux.org. Retrieved 27 October 2020.
^ "Intel® Platform Innovation Framework for EFI" (PDF). Compatibility Support Module Specification (revision 0.97). Intel. 4 September 2007. Retrieved 6 October 2013.
"The PC BIOS will be killed off by 2020 as Intel plans move to pure UEFI". Ars Technica. Retrieved 29 May 2018.
"CosmicStrand: the discovery of a sophisticated UEFI firmware rootkit". Securelist by Kaspersky. Retrieved 4 August 2022.
"Removal of Legacy Boot Support for Intel Platforms Technical Advisory".
"Red Hat Enterprise Linux 6 Installation Guide". 30.2.2. Configuring PXE boot for EFI. Red Hat. Retrieved 9 October 2013.
El-Haj-Mahmoud, Samer (July 2013). "Advances in Pre-OS Networking in UEFI 2.4" (PDF). Hewlett-Packard. Retrieved 29 May 2019.
Racherla, Sangam; Erdenberger, Silvio; Rajagopal, Harish; Ruth, Kai (January 2014). Storage and Network Convergence Using FCoE and iSCSI (PDF) (2nd ed.). IBM Redbooks. Retrieved 20 April 2022.
"New UEFI HTTP Boot support in UEFI 2.5". firmwaresecurity.com. 9 May 2015. Retrieved 13 August 2015.
"Secure Boot Overview". Microsoft. 10 December 2014. Retrieved 18 February 2016.
Edge, Jake. "UEFI and "secure boot"". LWN.net. Retrieved 9 September 2012.
^ "Windows 8 Secure Boot: The Controversy Continues". PC World. Retrieved 9 September 2012.
"Secure Boot for ESXi 6.5 - Hypervisor Assurance". VMware vSphere Blog. 4 May 2017. Retrieved 18 August 2017.
HowTos/UEFI - CentOS Wiki
Larabel, Michael (30 April 2018). "Debian Making Progress on UEFI SecureBoot Support in 2018". Phoronix. Phoronix Media. Retrieved 23 May 2018.
Garrett, Matthew (27 December 2012). "Secure Boot distribution support". Mjg59.dreamwidth.org. Retrieved 20 March 2014.
"Linux Mint Secure boot". Linux Mint. Retrieved 12 January 2024.
"8.4 | AlmaLinux Wiki". wiki.almalinux.org. Retrieved 10 April 2024.
"SecureBoot". FreeBSD Wiki. FreeBSD. Retrieved 16 June 2015.
^ "Unified Extensible Firmware Interface". UEFI Shell. Arch Linux. Retrieved 25 September 2013.
^ "EFI Shells and Scripting". Intel. Retrieved 25 September 2013.
^ "UEFI Shell Specification Version 2.0, Errata A" (PDF). Unified EFI, Inc. May 2012. Retrieved 25 September 2013.
"EDK2: ShellPkg". GitHub. Retrieved 18 March 2020.
"tianocore/edk2: releases". GitHub.
"Email Archive: edk2-devel". Inclusion of UEFI shell in Linux distro iso. SourceForge. 2012. Retrieved 25 September 2013.
"TianoCore on SourceForge". Shell FAQ. Intel. Retrieved 25 September 2013.
^ "Unified Extensible Firmware Interface". Launching UEFI Shell. Arch Linux. Retrieved 25 September 2013.
"Basic Instructions for Using EFI for Server Configuration on Intel® Server Boards and Intel® Server Systems" (PDF). Intel. 2008. Retrieved 25 September 2013.
"Unified Extensible Firmware Interface". bcfg. Arch Linux. Retrieved 25 September 2013.
"GRUB EFI Examples". Asus. Arch Linux. Retrieved 25 September 2013.
"Signed Capsule Update". tianocore-docs.github.io.
barrygolden. "Windows UEFI firmware update platform - Windows drivers". docs.microsoft.com. Retrieved 25 September 2020.
"Getting Started | Microchip Technology". www.microchip.com. Retrieved 24 December 2020.
"Framework-Laptop-16/Mainboard/Mainboard_Interfaces_Schematic_Framework_Laptop_16_7040_Series.PDF at main · FrameworkComputer/Framework-Laptop-16" (PDF). GitHub.
Barry, Peter; Crowley, Patrick (2012). Modern embedded computing : designing connected, pervasive, media-rich systems. Waltham, MA: Morgan Kaufmann Publishers. p. 169. ISBN 978-0-12-394407-8. OCLC 810455404.
"Intel schrapt bios-compatibiliteit uefi in 2020". Tweakers (in Dutch). Retrieved 30 December 2022.
Zimmer, Vincent; Rothman, Michael; Marisetty, Suresh (2017). Beyond BIOS: Developing with the Unified Extensible Firmware Interface, Third Edition. Walter de Gruyter GmbH & Co KG. ISBN 978-1-5015-0569-0.
Zimmer, Vincent; Rothman, Michael; Marisetty, Suresh (2017). Beyond BIOS: Developing with the Unified Extensible Firmware Interface, Third Edition. Walter de Gruyter GmbH & Co KG. ISBN 978-1-5015-0569-0.
"PI Boot Flow · tianocore/Tianocore.github.io Wiki". GitHub.
"Engineering Services" (PDF).
"The Unified Extensible Firmware Interface (UEFI)". The Linux Kernel documentation.
"TianoCore - coreboot". Retrieved 25 May 2012.
"SecureCore Tiano™". Phoenix Technologies. Archived from the original on 6 September 2010. Retrieved 14 September 2010.
"Aptio®: The Complete UEFI Product Solution" (PDF). American Megatrends, Inc. Retrieved 2 May 2018.
"Why US?". Insyde Software Corp. Retrieved 2 May 2018.
"Microsoft Announces "Project Mu" For Open-Source UEFI Alternative To TianoCore". Phoronix. Retrieved 20 December 2018.
"Marrying U-Boot UEFI and GRUB" (PDF). Retrieved 12 September 2018.
"UEFI on Top of U-Boot" (PDF). Archived from the original (PDF) on 11 September 2018. Retrieved 12 September 2018.
"Installing OpenBSD 6.3 on Raspberry 3". Archived from the original on 21 November 2018. Retrieved 12 September 2018.
"iSCSI booting with U-Boot and iPXE". Archived from the original on 31 July 2020. Retrieved 18 May 2020.
Apple Computer. "Universal Binary Programming Guidelines, Second Edition: Extensible Firmware Interface (EFI) Archived 24 July 2008 at the Wayback Machine"
Apple's Transition from Open Firmware to Extensible Firmware Interface, mactech, 2007.
^ "Intel® Platform Innovation Framework for UEFI Overview". Intel. Retrieved 14 September 2010.
Evaluating UEFI using Commercially Available Platforms and Solutions (PDF), UEFI, May 2011, archived from the original (PDF) on 22 March 2012
Asus P67 Motherboard Preview.
"Windows Hardware Certification Requirements for Client and Server Systems". Microsoft. January 2013. System.Fundamentals.Firmware.CS.UEFISecureBoot.ConnectedStandby ... Platforms shall be UEFI Class Three (see UEFI Industry Group, Evaluating UEFI using Commercially Available Platforms and Solutions, version 0.3, for a definition) with no Compatibility Support Module installed or installable. BIOS emulation and legacy PC/AT boot must be disabled.
"Microsoft: All You Need to Know About Windows 8 on ARM". PC Magazine. Archived from the original on 6 September 2013. Retrieved 30 September 2013.
Richardson, Brian (30 October 2017). ""Last Mile" Barriers to Removing Legacy BIOS" (PDF). Retrieved 22 November 2017.
Announcement of release 3.5pre1 by maintainer Brett Johnson made on 27 February 2004.
EFI version of Grub, Debian GNU/Linux, retrieved 1 May 2008
^ "Ubuntu will use GRUB 2 for its Secure Boot implementation". The H Online. Retrieved 28 October 2012.
OpenVMS Release History, HP, archived from the original on 5 January 2009, retrieved 16 September 2008
"State of the Port to x86-64" (PDF). vmssoftware.com. 6 October 2017. Archived from the original (PDF) on 22 September 2020. Retrieved 9 September 2020.
rEFIt — Windows Vista and EFI, SourceForge, archived from the original on 5 September 2008, retrieved 31 May 2008
"Extensible Firmware Interface", Windows Server TechCenter, Microsoft, archived from the original on 30 August 2006
Unified Extensible Firmware Interface (UEFI) Implementation Guidelines
Ersek, Laszlo (January 2015). "Open Virtual Machine Firmware (OVMF) Status Report". Linux KVM Project. Retrieved 13 November 2022.
Boot to UEFI Mode or legacy BIOS mode
"Unified Extended Firmware Interface support in Windows Vista". Microsoft. 26 October 2006. Retrieved 12 June 2010. Microsoft determined that vendors would not have any interest in producing native UEFI 32-bit firmware because of the current status of mainstream 64-bit computing and platform costs. Therefore, Microsoft originally did not to ship support for 32-bit UEFI implementations.
Microsoft Basic Display Driver
"Microsoft Touts Incredible Windows 8 Boot Times". Retrieved 9 September 2011.
Brodkin, Jon (21 September 2011). "Windows 8 secure boot could complicate Linux installs". Ars Technica. Retrieved 23 September 2011.
"Find Windows 11 specs, features, and computer requirements". Microsoft.
"Minimum System Requirements for Windows IoT Enterprise". Microsoft Learn. 22 May 2024. Retrieved 7 June 2024.
"FreeBSD to get UEFI support". The H. Retrieved 7 March 2013.
"UEFI - FreeBSD Wiki". FreeBSD.org. Retrieved 19 June 2014.
"uefi(8)". www.freebsd.org. Retrieved 11 January 2021.
"Oracle Solaris 11.1 — What's New" (PDF). oracle.com. Retrieved 4 November 2013.
"OpenBSD 5.9". www.openbsd.org. Retrieved 11 September 2016.
"OpenBSD 6.0". www.openbsd.org. Retrieved 11 September 2016.
"8422 uts: basic UEFI support for illumos". www.illumos.org. Retrieved 17 December 2024.
Proven, Liam (4 September 2023). "ArcaOS 5.1 gives vintage OS/2 a UEFI facelift for the 21st century". The Register. Retrieved 4 September 2023.
"Booting ArcaOS on UEFI hardware (demonstration)". youtube.com. 8 August 2019. Retrieved 22 September 2020.
Sanders, James (13 August 2019). "Modern OS/2 distribution ArcaOS adds support for booting via UEFI". techrepublic.com. Archived from the original on 21 October 2019. Retrieved 4 September 2023.
Open Virtual Machine Firmware, SourceForge, archived from the original on 6 October 2011
"VMWare Workstation EFI firmware | VMware Communities". Communities.vmware.com. 3 October 2012. Retrieved 28 February 2014.
"Using EFI/UEFI firmware in a VMware Virtual Machine | VMware Communities". Communities.vmware.com. 6 December 2014. Retrieved 18 January 2016.
"Announcing VMware Workstation 14 - VMware Workstation Zealot". VMware Workstation Zealot. 22 August 2017. Retrieved 2 August 2018.
"What's New in vSphere 5.0". Vmware.com. Retrieved 28 February 2014.
"VMware vSphere 6.5 Release Notes". pubs.vmware.com. Retrieved 13 January 2017.
3.1 Changelog, VirtualBox, archived from the original on 28 September 2010
Ticket 7702, VirtualBox
"Statement by sr. software engineer at Oracle", Forum, VirtualBox
"Testing secureboot with KVM". FedoraProject. Retrieved 28 February 2014.
"What's New in Hyper-V for Windows Server 2012 R2". MicrosoftTechNet. Retrieved 24 June 2013.
"Shielded VMs". Retrieved 16 February 2019.
"TianoCore on SourceForge: EDK2 Application Development Kit (EADK)". Intel. Retrieved 25 September 2013.
"Tianocore: UDK". GitHub.
"Interview: Ronald G Minnich". Fosdem. 6 February 2007. Retrieved 14 September 2010.
Doctorow, Cory (27 December 2011), The Coming War on General Purpose Computation, retrieved 25 September 2013
"coreboot (aka LinuxBIOS): The Free/Open-Source x86 Firmware". YouTube. 31 October 2008. Retrieved 14 September 2010.
"Welcome", TianoCore, SourceForge, archived from the original on 23 April 2012
"Next-gen boot spec could forever lock Linux off Windows 8 PCS".
"Windows 8 secure boot could complicate Linux installs". 21 September 2011.
^ "Is Microsoft Blocking Linux Booting on ARM Hardware?". Computerworld UK. Retrieved 6 March 2012.
"Windows 10 to make the Secure Boot alt-OS lock out a reality". Ars Technica. 20 March 2015. Retrieved 21 March 2015.
"Free Software Foundation recommendations for free operating system distributions considering Secure Boot — Free Software Foundation — working together for free software". Free Software Foundation. Retrieved 18 March 2020.
"Shimming your way to Linux on Windows 8 PCs". ZDNet. Retrieved 26 February 2013.
^ "Ubuntu details its UEFI Secure Boot plans". Linux Weekly News. Retrieved 11 September 2012.
^ "No Microsoft certificate support in Linux kernel says Torvalds". The H. Retrieved 26 February 2013.
"Linus Torvalds: I will not change Linux to "deep-throat Microsoft"". Ars Technica. 26 February 2013. Retrieved 26 February 2013.
"Exclusive: Open software group files complaint against Microsoft to EU". Reuters. 26 March 2013. Retrieved 26 March 2013.
"Researchers demo exploits that bypass Windows 8 Secure Boot". IT World. Archived from the original on 5 August 2013. Retrieved 5 August 2013.
MENDELSOHN, Tom (12 August 2016). "Secure Boot snafu: Microsoft leaks backdoor key, firmware flung wide open [Updated]". Ars Technica. Retrieved 12 August 2016.
Smolár, Martin (1 March 2023). "BlackLotus UEFI bootkit: Myth confirmed". welivesecurity.com. Retrieved 1 March 2023.
Goodin, Dan (6 March 2023). "Stealthy UEFI malware bypassing Secure Boot enabled by unpatchable Windows flaw". Ars Technica. Retrieved 6 March 2023.
WindowsCommunications (26 August 2024). "Windows 11, version 23H2 known issues and notifications". learn.microsoft.com. Retrieved 3 September 2024.
"HowTos/UEFI - CentOS Wiki". wiki.centos.org. Retrieved 10 November 2020.
"SecureBoot - Debian Wiki". wiki.debian.org. Retrieved 10 November 2020.
"SUSE Linux Enterprise Server 15 SP1: Chapter 13. UEFI (Unified Extensible Firmware Interface) (Administration Guide)". documentation.suse.com. Retrieved 10 November 2020.
^ "Linux on Windows 8 PCs: Some progress, but still a nuisance". ZDNet. Retrieved 26 February 2013.
"Lenovo UEFI Only Wants To Boot Windows, RHEL". Phoronix. Retrieved 26 February 2013.
"Linux acquitted in Samsung laptop UEFI deaths". Bit-tech. Retrieved 26 February 2013.
"Booting Linux using UEFI can brick Samsung laptops". The H. Retrieved 26 February 2013.

External links

Firmware and booting

Processes

Windows
- 9x
- NT
Linux
- Android

Booting firmware

Types	Proprietary firmware Open-source firmware Custom firmware
Interfaces	UEFI BIOS Video BIOS Open Firmware ACPI MultiProcessor Specification APM Legacy Plug and Play AlphaBIOS SRM SFI
Implementations	SeaBIOS Award BIOS American Megatrends AMIBIOS AMI Aptio InsydeH2O Phoenix SecureCore UEFI TianoCore EDK II OpenBIOS Coreboot Libreboot LinuxBoot Kickstart Run-Time Abstraction Services

Hybrid firmware bootloader

Bootloaders

Implementations	Acronis OS Selector Barebox BootManager BootX (Apple) BootX (Linux) GNU GRUB iBoot systemd-boot loadlin NTLDR OpeniBoot RedBoot rEFInd rEFIt SYSLINUX Windows Boot Manager xOSL Yaboot Plop Boot Manager MILO

Partition layouts

Partitions

Utilities

Software	flashrom fwupd UEFITool Odin Heimdall
Hardware	Bus Pirate Raspberry Pi ft2232

Network boot

ROM variants

Category:

Unified Extensible Firmware Interface

History

Advantages

Compatibility

Processor compatibility

Disk device compatibility

Linux

Microsoft Windows

Features

Services

Applications

Protocols

Device drivers

Graphics features

EFI system partition

Booting

UEFI booting

CSM booting

Network booting

Secure Boot

UEFI shell

Commands

Extensions

UEFI Capsule

Hardware

Classes

Boot stages

SEC – Security Phase

PEI – Pre-EFI Initialization

DXE – Driver Execution Environment

BDS – Boot Device Select

TSL – Transient System Load

RT – Runtime

Usage

Implementations

Platforms

Operating systems

With virtualization

Applications development

Criticism

Secure Boot

Firmware problems

See also

Notes

References

Further reading

External links