Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I was looking through APT packages for Quantal and I found one called linux-signed-image-generic, which only says that it's "Signed with the Ubuntu EFI key." The kernel package that it currently depends on says pretty much the same thing.

So if your hardware supports EFI (I think I'm running the signed kernel now) then what benefits does the signed kernel have? Is it just a security thing?

share|improve this question
Signed kernel supports EFI secure boot. – cscarney Mar 5 '13 at 2:12
up vote 13 down vote accepted

It is a security thing but there is no performance benefit four your system.

New Hardware will have secure boot. The problem is, that this hardware won't boot an OS that is not signed. The hardware is checking the software at startup if it is signed. If not, the hardware will prevent the software from booting.

This is a security thing, because it will prevent i.e. malware to start on your hardware.

There was a lot of discussion about this feature because a open source OS must get signed to run on future computers and that must be paid. And this is not the Open Source way.

Short explanation, but there is a lot of stuff on the web about it.

share|improve this answer
Thanks for the answer. Could you, please, point to one piece of 'stuff on the web about it'. I'm interested to learn more. – JW. Apr 17 '15 at 20:06
@JW. this might be a useful starting point – Zanna May 23 at 6:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.