<?xml version="1.0" encoding="UTF-8"?>
<xliff xmlns="urn:oasis:names:tc:xliff:document:1.1" version="1.1">
  <file original="NoName" source-language="en" datatype="plaintext" target-language="id">
    <body>
      <trans-unit xml:space="preserve" id="a4cf82650c50a83c" weblate-flags="no-wrap">
        <source>[[!meta title="Secure Boot certificates update"]]
</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="f11b02a438edced0" weblate-flags="no-wrap">
        <source>[[!toc startlevel=2]]
</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="7c098c18d9eb73fc">
        <source>If the **Secure Boot Update Needed** notification below appears when starting Tails, it means that the Secure Boot certificates of this computer need to be updated.</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="aac044cce37279fc" weblate-flags="no-wrap">
        <source>[[!img support/known_issues/secure_boot_certificates/secure_boot_update_needed.png class="screenshot" alt="Notification: Secure Boot Update Needed"]]
</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="e83c01c4e72e4068">
        <source>Otherwise, Tails will no longer start on this computer after a future Tails upgrade. We cannot predict when such an upgrade will occur, because the timing depends on changes that Tails could inherit from Debian in any Tails upgrade.</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="1408ae8181d02864">
        <source>After this change in Tails occurs, the computer might display a **Secure Boot Violation** error or another error message when trying to start Tails.</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="0ca38f2e54534a2e" weblate-flags="no-wrap">
        <source>Why is this happening?</source>
        <target></target>
        <note from="developer">type: Title ##</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="bf4c9073889f79de">
        <source>[[!wikipedia Secure Boot]] is a security measure that prevents starting malicious operating systems on a computer. Most computers running Windows have Secure Boot enabled. Linux distributions, including Tails, also support Secure Boot.</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="d9159a872ac1c4be">
        <source>Since 2023, [[Microsoft has started replacing|https://support.microsoft.com/en-us/topic/windows-secure-boot-certificate-expiration-and-ca-updates-7ff40d33-95dc-4c3c-8725-a9b95457578e]] the Secure Boot certificates originally issued in 2011. These older certificates begin expiring in June 2026.</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="409c4d3e67a137db">
        <source>Tails has detected that the computer still has outdated Secure Boot certificates and needs an update.</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="7f482207e9b1001c" weblate-flags="no-wrap">
        <source>Updating the Secure Boot certificates</source>
        <target></target>
        <note from="developer">type: Title ##</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="94924e49b6982e92">
        <source>To update the Secure Boot certificates of the computer, restart its regular operating system, Windows or Linux, and apply all available updates.</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="44de4512dc89dc3c">
        <source>For Windows, select **Start&amp;nbsp;▸ Settings&amp;nbsp;▸ Windows Update&amp;nbsp;▸ Check for Windows updates**.</source>
        <target></target>
        <note from="developer">type: Bullet: '- '</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="95618e310b452c62" weblate-flags="no-wrap">
        <source>  See also [[Microsoft: Install Windows
  updates|https://support.microsoft.com/en-us/windows/install-windows-updates-3c5ae7fc-9fb6-9af1-1984-b5e0412c556a]].
</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="ccdf4d08ad63c132">
        <source>For Linux, such updates are applied by the [[!wikipedia fwupd]] daemon.</source>
        <target></target>
        <note from="developer">type: Bullet: '- '</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="16013c2f71199a7b" weblate-flags="no-wrap">
        <source>  Linux distributions that use the GNOME desktop automatically apply this
  update through GNOME Software.
</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="20d8ed790619a4e4" weblate-flags="no-wrap">
        <source>Disabling Secure Boot</source>
        <target></target>
        <note from="developer">type: Title ##</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="103e88f93b963c9b">
        <source>If the **Secure Boot Update Needed** notification persists when restarting Tails, it means that the Secure Boot certificates of the computer are still outdated.</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="bc99a2119633825b">
        <source>Instead of updating the certificate, you can also disable Secure Boot. Even with Secure Boot disabled, the regular operating system should still start.</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="1534ab6c1a43c682">
        <source>You can usually disable Secure Boot through the BIOS settings of the computer, but the procedure varies by manufacturer. To learn how to edit the BIOS settings, search for the user manual of the computer on the support website of the manufacturer.</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
      <trans-unit xml:space="preserve" id="4b8cd5e21d0210ee">
        <source>In the BIOS menu, find the **Secure Boot** setting and disable it. This option is usually in either the **Security** tab, the **Boot** tab, or the **Authentication** tab.</source>
        <target></target>
        <note from="developer">type: Plain text</note>
      </trans-unit>
    </body>
  </file>
</xliff>
