System is bios locked with secure boot on. No way short of extreme bios hack to fix.
Rufus makes bootable media that sometimes comes to a screen for registering MOK. Maybe there is a way to continue there but I am not familiar enough to find the right steps. (Sometimes fails out to grub prompt, sometimes finds its way to the MOK interface.)
Meanwhile, it seems rufus is forced to create an NTFS filesystem because the iso is so large (about 8GB). The guides/posts say GPT, FAT32, UEFI for settings in Rufus. (Using ver 4.5) This does not seem possible.
So how are people making FAT32 bootable USB sticks with Rufus for Zorin Pro iso?
I’ve also encountered issues several times when using Rufus to install Linux-based operating systems—so it’s better to use Balena Etcher, which at least worked reliably for me. Warning: I’ve seen reports in several places claiming this software damaged their USB flash drives, though I personally haven’t experienced that. Releases · balena-io/etcher · GitHub
Personally I found Ventoy worked best to create the bootable USB stick.
As for your BIOS locked issue, I would have thought you should be able to disable Secure Boot in Windows settings as well as in the BIOS itself.
This is what I found for unlocking BIOS if you have forgotten the password (usual caveat about AI of course);
*"If your BIOS is locked and you've forgotten the password, several methods can be attempted to regain access. The most common approach is to enter an incorrect password three times during boot, which often triggers a "System Disabled" message displaying a 5 to 8 character code.
This code can be used on a separate computer to generate a backdoor password via websites like bios-pw.org or biosbug.com, which provide master passwords based on the code.*
These backdoor passwords are not guaranteed to work for all systems, as they depend on the manufacturer and BIOS version.*
Another widely used method is to reset the CMOS memory, which stores BIOS settings and passwords. This can be done by removing the CMOS battery (a small coin-cell battery on the motherboard) for at least 15–30 minutes while the computer is unplugged from power.
After reinserting the battery, the BIOS settings will revert to default, and the password should be cleared.*
For desktops, an alternative is to locate the CMOS jumper (often labeled CLR-CMOS, CLEAR, or RESET) on the motherboard, disconnect it for a few minutes, then reconnect it to reset the BIOS.*
For laptops, the process is more complex due to their compact design. Some models allow access to the CMOS battery by removing the bottom panel, and disconnecting both the CMOS battery and the laptop’s main battery can help reset the BIOS password.
However, newer laptops may have CMOS chips that retain settings even without power, making the battery removal method ineffective.*
In such cases, contacting the manufacturer is recommended. Companies like Dell, Lenovo, and Toshiba may provide a password release code if you can prove ownership using the Service Tag or other identifying information.*
If the above methods fail, the last resort is to contact the manufacturer's technical support directly, as they are the only ones who can provide specific solutions for their hardware.
For older systems, especially desktops, physical jumpers or switches may be available to clear the password.*
It is important to note that these procedures do not erase your data, but they will reset all BIOS settings to factory defaults.*
Always ensure you have a backup of important data before attempting any reset.*
Thank you for the feedback! This is a locked-locked bios, as in I would have to buy a bios clip interface and reprogram it from another computer. There is no bios jumper, no windows gui interface, admin password is set, and the bios lock is enabled in the bios settings. Incorrect passwords force reboot on third try without any text. Manufacturer confirmed the bios locked. (Got a great price for it and runs Win11 well.)
I will give a different bootable usb drive maker a try before looking at notebook alternatives.
OK. Got it. USB Universal Installer worked. It even lists Zorin as an option. You pick Zorin and choose the downloaded iso from your folder list. (It right away seemed to be the better solution because it offered up a MOK / .cer file on the first attempt and booted to USB stick no problem after that.) Then attempted zorin pro install with nvidia and that crashed out-- I think this was bcs it needs a reboot to establish Secure Boot w/ Zorin MOK key once before the signed proprietary nvidia driver could be installed. Went back and did a generic install then upgraded to the nvidia driver and that runs fine.
Sound is terrible (THX under Windows is great) and OpenRGB for the LED keyboard doesn't run from Flatpak. Those are for another thread I guess.
Warning: I’ve seen reports in several places claiming this software damaged their USB flash drives, though I personally haven’t experienced that.