Bad Security issue

[Steven Burnand]

I am having security issues with my Minix Neo Z83-4 Pro, please can you help?

I am no longer able to boot into EUFI and gain any security.

A Msinfo32 report report reads.

(I have included the security issue, lines)

BIOS Mode UEFI
BaseBoard Product NEO Z83-4
BaseBoard Version V1.1
Platform Role Slate
Secure Boot State Unsupported
PCR7 Configuration Binding Not Possible
Kernel DMA Protection Off
Virtualization-based security Not enabled
Device Encryption Support Reasons for failed automatic device encryption: PCR7 binding is not supported

I have tried a boot repair and it failed and tried the diskpart root. The UEFI boot folder, appears to be missing?

I have the latest bios and wonder, do I need the latest firmware as well? Bios is firmware? I am downloading the 1803 firmaware update, however I am concerned about others not able to boot after the update.

Your help would be much appreciated.

 

[notrui]

I am having security issues with my Minix Neo Z83-4 Pro, please can you help?

I am no longer able to boot into EUFI and gain any security.

A Msinfo32 report report reads.

(I have included the security issue, lines)

BIOS Mode UEFI
BaseBoard Product NEO Z83-4
BaseBoard Version V1.1
Platform Role Slate
Secure Boot State Unsupported
PCR7 Configuration Binding Not Possible
Kernel DMA Protection Off
Virtualization-based security Not enabled
Device Encryption Support Reasons for failed automatic device encryption: PCR7 binding is not supported

I have tried a boot repair and it failed and tried the diskpart root. The UEFI boot folder, appears to be missing?

I have the latest bios and wonder, do I need the latest firmware as well? Bios is firmware? I am downloading the 1803 firmaware update, however I am concerned about others not able to boot after the update.

Your help would be much appreciated.

Hello.
BIOS=UEFI (you can boot OS from usb for example)
Firmware is different (is where you have your OS , windows 10 for example)
Try using another keyboard to acess BIOS, a wired keyboard.

 

[Steven Burnand]

Hello.
BIOS=UEFI (you can boot OS from usb for example)
Firmware is different (is where you have your OS , windows 10 for example)
Try using another keyboard to acess BIOS, a wired keyboard.

Hi, thank you for the quick reply.
The PC is booting, however the boot pauses for a while and recently a blue screen is popping up saying please wait.
I am assuming this is the boot repair, trying to run.
The PC boots up OK

However checking Msinfo32 it reads as above.

Can BCDBOOT be run, from a booted C:\ drive? Or is it best to work from a USB key, with the Windows 10 ISO installed?

My Windows 10 version is fully up to date with no known driver issues. My main concern is security.

Can I confirm the key for boot selection is F9? I have a wired keyboard plugged in.

 

[notrui]

Hi, thank you for the quick reply.
The PC is booting, however the boot pauses for a while and recently a blue screen is popping up saying please wait.
I am assuming this is the boot repair, trying to run.
The PC boots up OK

However checking Msinfo32 it reads as above.

Can BCDBOOT be run, from a booted C:\ drive? Or is it best to work from a USB key, with the Windows 10 ISO installed?

My Windows 10 version is fully up to date with no known driver issues. My main concern is security.

Can I confirm the key for boot selection is F9? I have a wired keyboard plugged in.

I cant confirm. I think you use f9 to enter bios (or del) and esc to boot select.
I use antivirus , firewall and especially i always make backup of my files.
If eventually you catch a virus and you have to format OS is just restore from the backup.
I use a NAS but if you dont have use a external hdd.
The best security is backup, configuration and not visiting any untrusted web sites.

 

[Steven Burnand]

I use a configured Kaspersky AV/Firewall and I have hardened the system using gpedit.

I was checking the security and noticed that the Msinfo32 report stated that the UEFI bias was working, however it was not supporting the secure boot or kernel protection. Most odd. I have the latest Bios, however UEFI section is vastly cut down.

Does the Minix Neo support UEFI? I seem to remember the support UEFI on an older version I purchased?

It would be good to see a factory version and settings of the bios. This would at least give me a template.

I have down loaded the latest firmware upgrade and will, rebuild the PC tomorrow. These are great little PC's that function well, for many uses.

I am surprised to find so few exploring what can be done with them. An up gradable, root memory and ram, would make these viable product for schools. If anybody reading this explored and hacks on the bios side or elsewhere please share?

The Linux option looks tempting, as the windows bloatware, goes into overdrive.

 

[ArcticWolf]

I use a configured Kaspersky AV/Firewall and I have hardened the system using gpedit.

I was checking the security and noticed that the Msinfo32 report stated that the UEFI bias was working, however it was not supporting the secure boot or kernel protection. Most odd. I have the latest Bios, however UEFI section is vastly cut down.

Does the Minix Neo support UEFI? I seem to remember the support UEFI on an older version I purchased?

It would be good to see a factory version and settings of the bios. This would at least give me a template.

I have down loaded the latest firmware upgrade and will, rebuild the PC tomorrow. These are great little PC's that function well, for many uses.

I am surprised to find so few exploring what can be done with them. An up gradable, root memory and ram, would make these viable product for schools. If anybody reading this explored and hacks on the bios side or elsewhere please share?

The Linux option looks tempting, as the windows bloatware, goes into overdrive.

Check out the MINIX Neo N42C-4. Upgradeable SSD & RAM .

Indeed, they are exceptionally useful devices