There is a Secure Boot Security Vulnerability that has been addressed by Intel CVE-2020-10713. Dell and other OEMs have been releasing a series of UEFI BIOS Updates to patch this.
The Security Update is related to the Grand Unified Bootloader 2 (GRUB2) which most Linux distributions which formerly passed Secure Boot rely on.
If you have an older Linux distribution installed or are using an older installation ISO you will get Verification Failed: (0x1A) Security Violation and either be forced to disable Secure Boot to boot into your old installation to update or begin the install from an older ISO or seek a newer installation ISO.
The Ubuntu 20.04.1 ISO has been updated to address this, the older Ubuntu 20.04 ISO will be rejected. Ubuntu 20.10 also will pass Secure Boot.
Currently Mint 20, Fedora 33, DeepIn 20 (1003) which previously passed Secure Boot are now rejected by Secure Boot.
I had a lot of questions asking how to create a Windows 10 UEFI Bootable USB on Linux and Mac. Most other guides on this were poor or just didn't work due to the install.wim exceeding 4.0 GB and not fitting on a FAT32 formatted USB flash drive. We can use wimlib to split the install.wim into multiple install.swm files and then manually create our FAT32 formatted USB lash drive. The main Windows 10 guide has been updated to include these instructions:
DeepIn Linux is a Linux distribution made by the Wuhan Deepin Technology Company in China. This company appear to be partnering with Huawei in a move to replace Windows as an Operating System on their hardware (similar to Google and Chromebook but this OS is much more functional and has the full capabilities of a Linux distribution). DeepIn Linux 20 Beta is freely available to download from their website and I demonstrate downloading the ISO, making a Bootable USB and performing a Clean Installation on a Dell OptiPlex 7040 and then taking it for a test drive. I then move to a Latitude 7350 to test its touchscreen capabilities. Although this is a Linux distribution it should be very familiar for Windows users due to having a very similar user interface to Windows 7/8.1 and 10.
The biggest bugs I found on a Latitude 7350 was with the onscreen keyboard, it does not work very well and the screen does not autorotate when in tablet mode.
Full installation instructions, download links and more detailed testing is available on my written guide:
Windows 10 Version 2004 (Final Built 19041.207) has been released.
We are now getting the Windows 10 May 2020 Update (20H1) ready for release and releasing Build 19041.207 to Windows Insiders in the Release Preview ring. We believe that Build 19041.207 is the final build and we will continue to improve the overall experience of the May 2020 Update on customers’ PCs as part of our normal servicing cadence.
In this video I demonstrate Creating the Bootable USB and performing a Clean Installation with a Windows 10 OEM License and a Windows 7 OEM License.
Note that all Product Activation Mechanism for the "Free Upgrade" from the now "End of Life Windows 7" to Windows 10 still work and this new build has substantial performance boosts over all previous Windows 10 builds. These performance enhancements prevent Windows Search from continuously indexing your Hard Drive throttling it and compromising your over all system performance. I decided to take the old low specification OptiPlex 790 I had lying around at home which has:
2011 UEFI BIOS (No Secure Boot)
2nd Generation Intel Processor
4 GB RAM DDR3
7200 RPM Mechanical Hard Drive
I used this to test the Activation Mechanisms of the Free Upgrade and compared the performance with Windows 10 Version 2004 with the previous build Windows 10 Version 1909. Both have a clean install and the performance difference doing a menial task such as watching a YouTube video with a Chromium based Browser is substantial:
Many older Windows 7 systems which had similar performance issues with older builds of Windows 10 should also run quite well with Windows 10 Version 2004 now that these fixes have been made.
All previous versions of Windows 10 were very intensive with Disc Usage when it came to indexing search results, displaying notifications and using browsers such as Google Chrome. This was particularly prevalent when using a Hard Drive with it being throttled at 100 % Disk Usage. Microsoft have finally addressed this feedback:
Back in the summer of 2018, a small group of Windows Insiders did something that we don’t typically recommend. They quietly turned off the Windows Search indexer on their PCs. Luckily for us, they also took us up on our request to explain why. The feedback they provided led to some of the most significant improvements we’ve made recently to the Windows Search experience.
Whenever a Windows Insider disabled Windows Search, a message would pop up on the screen asking why. Insiders gave many reasons for turning off the indexer, but it boiled down to three key areas: high disk and CPU usage, general performance issues, and the indexer didn’t seem valuable to them.
I decided to take the old low specification OptiPlex 790 I had lying around at home which has:
2nd Generation Intel Processor
4 GB RAM
7200 RPM Mechanical Hard Drive
And compared the performance with Windows 10 Version 2004 with the previous build Windows 10 Version 1909. Both have a clean install and the performance difference doing a menial task such as watching a YouTube video with a Chromium based Browser is substantial:
The next 6 month update to Windows 10 is just a small patch that will be delivered via Windows Update. Those in the Windows Insider Slow Track should have it already and it'll be about a week or two until it is released via the Mainstream Track. Although many are calling this "Version 1909", the changes are very minor and the update process won't take much longer than a standard cumulative Windows Update. Moreover the Version remains at Version 1903.
Windows 7 Reaches End of Life in precisely 6 months as of today. This means Microsoft will no longer patch Windows 7. Without Security Patches it will become vulnerable and more susceptible to Malicious software. Obviously with the large market share of Operating System, it is a prime time for hackers to target in order to steal bank details etc when users use online banking or to install randsomware “pay us if you want to access your files again”. In addition to Microsoft not supporting Windows 7, hardware vendors such as Intel have dropped support for Windows 7. This means that newer computers do not have Windows 7 drivers and thus Windows 7 will not run on newer hardware they produce. This is likely to become more and more prevalent as there is little incentive for hardware manufacturers to spend resources supporting a legacy Operating System. Other software companies especially those who make internet browsers such as Mozilla, Google may also drop Windows 7 support soon, which will once again make it even less secure.
Fortunately the free upgrade from Windows 7 to Windows 10 still works as I demonstrated a few moments ago.