Questions tagged [secure-boot]
Secure Boot is an UEFI feature that blocks unsigned drivers and operating systems from running. Use this tag if you have questions about Ubuntu on a secure-boot enabled system.
388
questions
0
votes
1
answer
56
views
Migrating Ubuntu-20.04 boot disk from old laptop to new laptop with secure-boot enabled
I have an laptop running 20.04 (no secure-boot, title it old). I wanted to move the boot disk to a new laptop (titled new) which has secure-boot enabled. I do not want to disable secure boot on new, ...
0
votes
1
answer
136
views
Benefit of using secure boot with MOK over disabling secure boot
Following this guide, I was able to enroll a Machine Owner Key (MOK) to sign my NVIDIA (proprietary) driver. It is fairly easy to set up and it works fine. So far I am happy with it.
I had to enter a ...
1
vote
0
answers
37
views
Auto disable secure boot when switching to ubuntu 22.04 [duplicate]
Currently, my laptop is set up with dual-boot for Windows 11 and Ubuntu 22.04. However, when using a external adapters in Ubuntu, I need to disable Secure Boot.
Unfortunately, I don't want to disable ...
0
votes
1
answer
423
views
Get VirtualBox runnning with SecureBoot
I try to get VirtualBox running on my Ubuntu 23.10 with Secure Boot enabled.
When starting any Virtual Mache in VirtualBox the error is shown:
Kernel driver not installed (rc=-1908)
The VirtualBox ...
0
votes
0
answers
155
views
Getting "This computer currently has no detected operating systems." while installing Ubuntu 23.10 alongside Windows 10
After carefully reviewing answers to these similar questions:
"This computer currently has no detected operating systems."-
Ubuntu 14.04 install Windows 8.1
"Install alongside" ...
0
votes
0
answers
71
views
how to change bios mode from legacyto UEFI mode?
Currently, my operating system is windows 10. I want to dual boot ubuntu and windows 10. Since the current drive didn’t have enough space I added another ssd drive. When I was installing ubuntu, I ...
1
vote
0
answers
467
views
Mok Management steps to take?
After the first rebook I get to Mok Management blue screen. My issue is that I don't have the same choices as any other forum/video that I have seen.
My choices are:
Continue boot
Reset Mok
...
0
votes
0
answers
171
views
DBX firmware update and corrupted bios
everyone,
Last week, I updated the DBX firmware to 371 from Ubuntu on Aspire A515-43. So, when I updated the dbx, my laptop froze (Ubuntu OS), which led me to perform a forced shutdown via the power ...
0
votes
0
answers
81
views
DBX Secure boot keys and windows time boot
Last week, i installed DBX Firmware update through ubuntu 23.10 update, but after that, i still face problem with restart windows os which take long time to boot. So, is the dbx have relation to this ...
4
votes
2
answers
3k
views
Secure Boot dbx Configuration Update 77 - 371 Ubuntu 23.10
I've a message starting popping up after the upgrade to 23.10 from 23.04, that I've got some updates. Turned out that this is that in the sub. Tried to update and it fails. This is what I've got ...
1
vote
0
answers
225
views
Can't do anything with apt without an error caused by shim-signed
Suppose I type,
sudo apt-get install SOME_PACKAGE
Regardless of what package I'm installing, I end up with the following error:
Setting up shim-signed (1.51.3+15.7-0ubuntu1) ...
/var/lib/dpkg/...
0
votes
0
answers
377
views
Enable secure boot on an already installed dual boot system
I am unable to enable secure boot on my system. Please help me enable it, without bricking my pc :)
Pc info:
HP laptop
Dual boot
Windows 11 (I bypassed secure-boot check to install it)
Ubuntu ...
0
votes
1
answer
54
views
apt shim package
I noticed in the APT repo there is both shim and shim-signed. I'm wondering what the purpose of the shim package is?
Can it be used to insert a db certificate into the boot process?
I'm looking for an ...
2
votes
1
answer
393
views
grubx64.efi made with grub-mkstandalone fails to start under SecureBoot
Using Ubuntu 20.4 with GRUB2 2.04, Shim 15.7 (I think)
I've been following the Simon Ruderich guide to "Secure Boot with GRUB 2 and signed Linux images and initrds"
When booting with the ...
0
votes
1
answer
342
views
mkusb grub doesn't work with secure boot on (lubuntu live persistent usb)
I'd like to make a persistent-live-usb lubuntu 22.04 that works on systems with enabled Secure Boot (bios option).
I've tried the dus-persistent method in mkusb, but I'm only able to access the grub (...
0
votes
1
answer
3k
views
UEFI Secure Boot:- bad shim signature
Before proceeding I don't want to disable the Secure Boot option. I need a solution, not a workaround.
I have a humble setup using dnsmasq and the dnsmasq built-in tftp to give me a PXE server. I am ...
0
votes
0
answers
133
views
Secure Boot Violation after moving my Ubuntu UEFI SSD into identical laptop
Recently my old laptop (about 8 years old) with Lubuntu installed on a UEFI SSD died. It just refused to start at all, the little led that normally lights when the mains is on also did not light up. I ...
0
votes
0
answers
119
views
How to install kernel from default ppa etc after manually installing it?
I had some issues with a kernel and had to manually install 6.2 (I'm on Ubuntu 22.04).
Now whenever I boot I need to make sure that I disable secure boot and I suspect this is because I installed the ...
0
votes
0
answers
177
views
Secure boot, Switch my main SSD to another PC
My laptop needs to be sent for repair. I want to take out it's SSD (main, bootable) and plug it into another desktop machine in order to continue my work as as usual.
In theory it should work, but ...
0
votes
1
answer
232
views
Dual boot Ubuntu and Windows 11 on my organization managed school laptop
thanks for taking the time to read this. I want to dual boot ubuntu and windows 11 on my school laptop that is managed by my organization/school. I don't want this process to go wrong since I want ...
0
votes
0
answers
261
views
Can't enter BIOS on ACER laptop
I had installed the latest Lubuntu(22.04.2 LTS (Jammy Jellyfish)) on an old ACER laptop by deleting everything on it (chose the Erase all option) on the partitioning step of the installation, but ...
0
votes
2
answers
12k
views
Error "shim_lock protocol not found" in GRUB while secure boot is enabled [closed]
I have a dual-boot system and the following error appears after selecting any OS in the GRUB menu:
error: shim_lock protocol not found.
error: you need to load the kernel first.
Press any key to ...
2
votes
0
answers
451
views
Ubuntu secure boot installation problems
I've installed ubuntu 22.04 on my old laptop. Since there was secure boot enabled, in the installation I checked the "Install third-party software and drivers" and entered the password in ...
0
votes
0
answers
442
views
Out of the box signed GRUB2 for secure boot
I’m trying to create a tool which replaces Windows boot loader with GRUB2 and I’m using an UEFI computer that allowing Secure Boot (that I’m trying to keep).
I tried to copy shimx64.efi and mmx64.efi ...
0
votes
1
answer
105
views
Is it okay to use the same pw for root and secure boot?
If I install with secure boot enabled I’m asked to set a pw which I’m told I won’t need often. Is it safe to use the same pw as for root?
-1
votes
2
answers
306
views
Secure boot & 'Device Security'
about 3 days ago I bought a brand new system and did a clean install of 23.04.
I did not have secure boot enabled. I then spent the next 3 days installing software to get my system up to a fully ...
0
votes
0
answers
93
views
How to setup secure boot on customized Ubuntu Server ISO?
I have an Ubuntu Server 20.04 but I want it to support secure boot automatically just like how the official Ubuntu Desktop does.
0
votes
0
answers
120
views
firmware question during install + no wifi
When installing ubuntu 22.04 LTS on a low-end Lenovo, it asked me about installing third-party firmware/software for wifi etc. I of course said yes, and entered in a password for secureboot where ...
0
votes
0
answers
997
views
PXE and UEFI SecureBoot
I am trying to PXE boot with SecureBoot enabled. My PXE does boot with UEFI enabled, however when enabling SecureBoot I get the error “Boot failed. EFI Network. Failed Secure Boot Verification.”
My ...
1
vote
1
answer
196
views
Apparmor full system implementation help
I am trying to implement Apparmor full system implementation on Ubuntu Bionic in AWS EC2 instances.
https://gitlab.com/apparmor/apparmor/-/wikis/FullSystemPolicy#distribution
My goal is employ a deny-...
0
votes
1
answer
5k
views
How to install Virtualbox with signed kernel modules
I have read Signing Virtualbox modules with EFI Secure Boot enabled. The procedure described there does not work as described with the --reinstall step. There is no detailed prompt. Note that VMware ...
2
votes
0
answers
65
views
Issue with secure boot and official kernel 5.15.0-56
I got a new ThinkPad L13 and I decided to install Ubuntu on it. Installation went fine until I had to install the kernel 5.15.0-56, which is a requirement for an application. 5.15.0-56 installs ...
3
votes
1
answer
980
views
Ubuntu's dkms v3.0.6 breaks drivers with enabled SecureBoot
What happened
I upgraded my system yesterday and it updated dkms to the latest version for Ubuntu 22.10: dmks3.0.6-2ubuntu1. At the same time, apt upgraded me to the latest kernel version.
Since then, ...
7
votes
2
answers
10k
views
Signing Virtualbox modules with EFI Secure Boot enabled
I have a system (22.04.1 LTS) with an Nvidia card and with EFI secure boot enabled.
Virtualbox refuses to run a VM and claims that
if the system has EFI Secure Boot enabled you may also need to sign ...
0
votes
1
answer
274
views
Unable to Download Latest Version of DBX
I'm running 22.04.2 LTS, and I have a message in the Software Update tool it says I have a firmware upgrade to install: "Secure Boot dbx Configuration Update" (Version 77 -> 217).
...
-1
votes
1
answer
201
views
Black screen in Ubuntu 22.04.1
I have an ASUS Prime b350m-a motherboard with BIOS version 6042, a Nvidia 710 video card and a ryzen 3 1300x processor.
I tried to install Ubuntu 22.04.1 LTS and everything is correct but when I turn ...
0
votes
1
answer
435
views
Enrolling MOK when installing VirtualBox 7 on 22.04
When I try to install VirtualBox 7 on 22.04, it is asking to add MOK to the firmware while reboot. Is it safe to do so? I have an HP laptop with Secure Boot enabled.
Will it change the firmware ...
0
votes
2
answers
34
views
I got an error with a dkms file
So I was trying to fix my obs studio and had a snap version installed from the store and tried installing it from the website simultaneously. When i installed its prerequisite, it started throwing and ...
0
votes
0
answers
29
views
Secure boot inconsistent behavior
I have two systems with 20.04 LTS. Secure boot is enabled on both. The behavior of the two systems is different, and I have not idea why.
System 1: Asks for a new secure boot password on each kernel ...
0
votes
0
answers
126
views
Unable to update "Secure Boot dbx" : no volumes of type ... (It's a different problem here)
I've got a secure boot dbx update (78->217) waiting in my Ubuntu Software app. When I try to install it, I get this error message :
" Blocked executable in the ESP, ensure that grub and shim ...
2
votes
1
answer
2k
views
"Secure Boot dbx Configuration Update" resulting in error on 2018 Razer Blade 15
I get this error message when clicking update:
Unable to update "Secure Boot dbx Configuration Update": Message recipient disconnected from message bus without replying
What do I need to ...
0
votes
0
answers
2k
views
Boot errors (error: out of memory)
I’m trying to go back to Linux from windows after some viruses. I was able to download and use the live cd of Ubuntu with no problems (a few messages popped up, but I got no errors once up and running)...
1
vote
0
answers
91
views
is it normal that i didn't encounter any thing related to the mokutil during the process of installing nvidia driver on ubuntu 22.10 with secureboot?
i installed ubuntu 22.10 with secure boot and nvidia drivers.
I know about the dkms bug
steps to reproduce
1-during installation i didn't install third party drivers
2-i updated the system then ...
1
vote
0
answers
2k
views
I can't install Kubuntu 22.04 while Secure Boot is On
I installed Ubuntu 22.04 LTS Desktop while Secure Boot is enabled, and so far, it works.
Now, I'm trying to install Kubuntu 22.04 LTS Desktop on my Hyper-V to see if it will work while Secure Boot is ...
4
votes
1
answer
2k
views
What do I need to update Secure boot for?
There is update of Secure Boot, DBX - from 77 to 217. It cannot be installed because grub is old. I have switched Secure Boot off in bios. What is DBX update? I am not going to install it. Ubuntu 22....
0
votes
1
answer
9k
views
GPU driver not loaded when secure boot is enabled
I had installed Ubuntu 22.04 (with secure boot on), but I upgraded to 22.10 with secure boot off. I went to enable secure boot, but the GPU driver (nvidia proprietary) wasn't loaded. Do I need some ...
3
votes
1
answer
2k
views
signed kernel module not accepted
I signed a kernel module with MOK using:
$ sudo kmodsign sha512 \
/var/lib/shim-signed/mok/MOK.priv \
/var/lib/shim-signed/mok/MOK.der \
./ipu6-drivers/0.0.0/5.19.0-23-generic/x86_64/module/...
-1
votes
2
answers
383
views
security risk? why ubuntu apply strange permissions in /boot/initrd* and /boot/vmlinuz*?
the initrd.img are all 644, the vmlinuz in another hand is 600. This is reversed on many other distros if not all. I think other distros actually do it correctly. the content in vlinuz is all public ...
0
votes
0
answers
121
views
BootHoleDetection script claims Ubuntu 22 signed-shim is vulnerable to BootHole problem
https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/
Description of BootHole vulnerability from July, 2020.
The check script is from eclypsium,
https://github.com/eclypsium/BootHole
the folks ...
24
votes
6
answers
31k
views
Impossible to update UEFI dbx
My Ubuntu (20.04) Software is prompting a new firmware available: UEFI dbx 77--> 217 (?), but when I try to update I receive the following error message:
Impossible to update UEFI dbx.
Blocked ...