I'm still fairly new to Linux and currently use Mint in a dual-boot setup. I'm interested in trying an Arch-based distribution eventually, but I need Secure Boot to remain enabled because Windows games such as Valorant and other titles with strict anti-cheat systems may require it. Can Arch or an Arch-based distribution run reliably with Secure Boot enabled all the time, or would I need to switch it off whenever I boot Linux?
2 Answers
Yes, it’s possible, but Arch generally requires more manual setup than distributions that support Secure Boot out of the box. You’ll need a properly signed bootloader and kernel, and any out-of-tree kernel modules or drivers may also need to be signed. The Arch documentation on UEFI Secure Boot is the best guide, and you should be prepared to troubleshoot if you use third-party drivers.
Secure Boot can stay enabled for both operating systems as long as your Linux boot chain is signed and configured correctly. If you want the easiest experience, some distributions provide Secure Boot support without much extra work, while Arch-based systems may require enrollment of your own keys and signing kernels or modules. The Windows anti-cheat requirement doesn’t mean Linux itself has to disable Secure Boot; the important part is that the firmware setting remains enabled when Windows starts.
That’s why choosing a distribution with built-in Secure Boot support can be simpler for a dual-boot machine. Arch can do it, but it’s more of a hands-on project and may need maintenance after kernel or driver updates.