I'm still fairly new to Linux and currently use Mint in a dual-boot setup. I'm interested in trying an Arch-based distribution eventually, but I need to keep Secure Boot enabled because Windows games such as Valorant and other titles with strict anti-cheat systems may require it. Can Arch or an Arch-based distro run reliably with Secure Boot enabled all the time, or would I need to disable it when booting Linux?
2 Answers
Yes, Arch can work with Secure Boot enabled, but it usually takes more setup than distributions that support it out of the box. You’ll need to follow the official Secure Boot documentation carefully and may need to sign the bootloader, kernel, and certain drivers yourself. Some third-party or out-of-tree drivers can cause problems if they aren’t signed. Getting comfortable with the Arch documentation is an important part of using Arch.
It’s possible on Arch-based systems, and some distributions make the process easier by providing Secure Boot support already configured. For a beginner, choosing an Arch-based distro with built-in support may be less frustrating than setting up key enrollment and signed boot components manually. This should let you keep Secure Boot enabled for both Linux and Windows, although compatibility can vary depending on the kernel and drivers.
That’s a reasonable approach for a dual-boot system. Some anti-cheat software checks Secure Boot or other Windows security settings, so choosing a distribution with ready-made support can avoid having to maintain the signing setup yourself.