Kaspersky FDE supports 2 types of firmware: UEFI 64-bit and Legacy BIOS.
UEFI 32-bit firmware is not supported.
UEFI: compatibility with Secure Boot
Secure Boot is a technology that checks digital signatures for UEFI loaders and drivers. Secure Boot does not allow the running of unsigned UEFI applications and drivers or the ones signed by unknown publishers.
Kaspersky FDE fully supports Secure Boot. Kaspersky FDE authentication agent loaders are signed by Microsoft with the Microsoft Windows UEFI Driver Publisher certificate.
Some devices (e.g. Microsoft Surface Pro or Microsoft Surface Pro 2) contain an outdated list of certificates for checking digital signatures. Before using Kaspersky FDE on such devices, you must update the list of certificates according to the vendor’s instructions.
UEFI: compatibility with Fast Boot
Fast Boot is a technology that speeds up loading of the operating system. When Fast Boot is enabled, only the minimum set of UEFI drivers required for the operating system startup is loaded. When Fast Boot is enabled, USB keyboards, mice, USB tokens, as well as touchpads and touchscreens, may not work.
We recommend that you disable Fast Boot if you want to use Kaspersky FDE. Before encrypting your drives, use FDE Test Utility to check the compatibility of such devices.