Questions tagged [secure-boot]
Secure Boot is an UEFI feature that blocks unsigned drivers and operating systems from running. Use this tag if you have questions about Ubuntu on a secure-boot enabled system.
372
questions
1
vote
0
answers
37
views
Ubuntu secure boot installation problems
I've installed ubuntu 22.04 on my old laptop. Since there was secure boot enabled, in the installation I checked the "Install third-party software and drivers" and entered the password in ...
- 267
0
votes
0
answers
42
views
Out of the box signed GRUB2 for secure boot
I’m trying to create a tool which replaces Windows boot loader with GRUB2 and I’m using an UEFI computer that allowing Secure Boot (that I’m trying to keep).
I tried to copy shimx64.efi and mmx64.efi ...
- 1
0
votes
1
answer
52
views
Is it okay to use the same pw for root and secure boot?
If I install with secure boot enabled I’m asked to set a pw which I’m told I won’t need often. Is it safe to use the same pw as for root?
- 2,283
-1
votes
1
answer
71
views
Secure boot & 'Device Security'
about 3 days ago I bought a brand new system and did a clean install of 23.04.
I did not have secure boot enabled. I then spent the next 3 days installing software to get my system up to a fully ...
0
votes
0
answers
54
views
How to setup secure boot on customized Ubuntu Server ISO?
I have an Ubuntu Server 20.04 but I want it to support secure boot automatically just like how the official Ubuntu Desktop does.
- 1
0
votes
0
answers
63
views
firmware question during install + no wifi
When installing ubuntu 22.04 LTS on a low-end Lenovo, it asked me about installing third-party firmware/software for wifi etc. I of course said yes, and entered in a password for secureboot where ...
- 101
0
votes
0
answers
170
views
PXE and UEFI SecureBoot
I am trying to PXE boot with SecureBoot enabled. My PXE does boot with UEFI enabled, however when enabling SecureBoot I get the error “Boot failed. EFI Network. Failed Secure Boot Verification.”
My ...
- 31
1
vote
1
answer
66
views
Apparmor full system implementation help
I am trying to implement Apparmor full system implementation on Ubuntu Bionic in AWS EC2 instances.
https://gitlab.com/apparmor/apparmor/-/wikis/FullSystemPolicy#distribution
My goal is employ a deny-...
- 263
0
votes
1
answer
376
views
How to install Virtualbox with signed kernel modules
I have read Signing Virtualbox modules with EFI Secure Boot enabled. The procedure described there does not work as described with the --reinstall step. There is no detailed prompt. Note that VMware ...
- 493
2
votes
0
answers
48
views
Issue with secure boot and official kernel 5.15.0-56
I got a new ThinkPad L13 and I decided to install Ubuntu on it. Installation went fine until I had to install the kernel 5.15.0-56, which is a requirement for an application. 5.15.0-56 installs ...
- 121
3
votes
1
answer
266
views
Ubuntu's dkms v3.0.6 breaks drivers with enabled SecureBoot
What happened
I upgraded my system yesterday and it updated dkms to the latest version for Ubuntu 22.10: dmks3.0.6-2ubuntu1. At the same time, apt upgraded me to the latest kernel version.
Since then, ...
- 121
0
votes
0
answers
36
views
why secure boot is now failing?
i had secure boot enabled on my dell 9320 with factory windows. after booting it from a flashdrive, i've installed ubuntu, where i opted to install proprietary drivers and with this i had to enroll ...
- 195
0
votes
1
answer
81
views
Unable to Download Latest Version of DBX
I'm running 22.04.2 LTS, and I have a message in the Software Update tool it says I have a firmware upgrade to install: "Secure Boot dbx Configuration Update" (Version 77 -> 217).
...
- 3
-1
votes
1
answer
144
views
Black screen in Ubuntu 22.04.1
I have an ASUS Prime b350m-a motherboard with BIOS version 6042, a Nvidia 710 video card and a ryzen 3 1300x processor.
I tried to install Ubuntu 22.04.1 LTS and everything is correct but when I turn ...
- 1
0
votes
1
answer
201
views
Enrolling MOK when installing VirtualBox 7 on 22.04
When I try to install VirtualBox 7 on 22.04, it is asking to add MOK to the firmware while reboot. Is it safe to do so? I have an HP laptop with Secure Boot enabled.
Will it change the firmware ...
- 3,921
0
votes
2
answers
27
views
I got an error with a dkms file
So I was trying to fix my obs studio and had a snap version installed from the store and tried installing it from the website simultaneously. When i installed its prerequisite, it started throwing and ...
0
votes
0
answers
114
views
Mok Enrolled/Signed Nvidia Driver Not Working
I have shim installed I have Secure Boot working and I enrolled my Nvidia driver successfully using mokutil, if I try to enroll Nvidia.der (my key) again with mokutil --import, it tells me that the ...
0
votes
0
answers
182
views
MOK manangment/enroll key
Do I require secure boot by adding a MOK management/enroll key. I was given a tablet and long story short. There was porn(XXX). I didn't know and I logged into my gmail account. Then every device I ...
0
votes
0
answers
124
views
Re-enable secure boot via MOK
I have disabled secure boot by MOK to install something and now I want to re-enable it. But When I try to do it by BIOS secure boot section is not changeable. Then I tried by Mok by
sudo mokutil --...
- 11
0
votes
0
answers
24
views
Secure boot inconsistent behavior
I have two systems with 20.04 LTS. Secure boot is enabled on both. The behavior of the two systems is different, and I have not idea why.
System 1: Asks for a new secure boot password on each kernel ...
- 1
0
votes
0
answers
45
views
Is it possible to sign a dkms driver on an Ubuntu 20.04 image that's restored on many machines?
I am following this guide:
Automatic Signing of DKMS-Generated Kernel Modules for Secure Boot (Nvidia Driver on CentOS 8 as Example)
I am adapting it for a biometric device driver (Nitgen VenusDrv).
I ...
- 365
0
votes
0
answers
117
views
Unable to update "Secure Boot dbx" : no volumes of type ... (It's a different problem here)
I've got a secure boot dbx update (78->217) waiting in my Ubuntu Software app. When I try to install it, I get this error message :
" Blocked executable in the ESP, ensure that grub and shim ...
- 11
2
votes
1
answer
1k
views
"Secure Boot dbx Configuration Update" resulting in error on 2018 Razer Blade 15
I get this error message when clicking update:
Unable to update "Secure Boot dbx Configuration Update": Message recipient disconnected from message bus without replying
What do I need to ...
0
votes
0
answers
896
views
Boot errors (error: out of memory)
I’m trying to go back to Linux from windows after some viruses. I was able to download and use the live cd of Ubuntu with no problems (a few messages popped up, but I got no errors once up and running)...
- 1
1
vote
0
answers
54
views
is it normal that i didn't encounter any thing related to the mokutil during the process of installing nvidia driver on ubuntu 22.10 with secureboot?
i installed ubuntu 22.10 with secure boot and nvidia drivers.
I know about the dkms bug
steps to reproduce
1-during installation i didn't install third party drivers
2-i updated the system then ...
1
vote
0
answers
753
views
I can't install Kubuntu 22.04 while Secure Boot is On
I installed Ubuntu 22.04 LTS Desktop while Secure Boot is enabled, and so far, it works.
Now, I'm trying to install Kubuntu 22.04 LTS Desktop on my Hyper-V to see if it will work while Secure Boot is ...
- 107
3
votes
1
answer
2k
views
What do I need to update Secure boot for?
There is update of Secure Boot, DBX - from 77 to 217. It cannot be installed because grub is old. I have switched Secure Boot off in bios. What is DBX update? I am not going to install it. Ubuntu 22....
- 539
0
votes
1
answer
3k
views
GPU driver not loaded when secure boot is enabled
I had installed Ubuntu 22.04 (with secure boot on), but I upgraded to 22.10 with secure boot off. I went to enable secure boot, but the GPU driver (nvidia proprietary) wasn't loaded. Do I need some ...
3
votes
1
answer
988
views
signed kernel module not accepted
I signed a kernel module with MOK using:
$ sudo kmodsign sha512 \
/var/lib/shim-signed/mok/MOK.priv \
/var/lib/shim-signed/mok/MOK.der \
./ipu6-drivers/0.0.0/5.19.0-23-generic/x86_64/module/...
- 2,029
-2
votes
2
answers
222
views
security risk? why ubuntu apply strange permissions in /boot/initrd* and /boot/vmlinuz*?
the initrd.img are all 644, the vmlinuz in another hand is 600. This is reversed on many other distros if not all. I think other distros actually do it correctly. the content in vlinuz is all public ...
- 568
0
votes
0
answers
76
views
BootHoleDetection script claims Ubuntu 22 signed-shim is vulnerable to BootHole problem
https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/
Description of BootHole vulnerability from July, 2020.
The check script is from eclypsium,
https://github.com/eclypsium/BootHole
the folks ...
0
votes
0
answers
37
views
Is there a documented procedure for signing a kernel build on 22.04 with a custom key?
I have looked for a few days and have not yet found a clear procedure for rebuilding the kernel on Ubuntu (say, 22.04) using my own private key.
I have found many partial procedures. Yet I must be ...
1
vote
0
answers
188
views
How can I take advantage of the secure boot technology that my laptop has?
My laptop has secure boot and from what I understand it is supposed to protect the bootloader. So if my OS gets infected it won't show me any message and boot but if the bootloader is infected it will ...
- 11
0
votes
0
answers
369
views
Is it safe to delete mok keys?
I have recently created and enrolled a few mok keys while trying to make my virtual machine work in Ubuntu (20.04).
After that, when I didn't need them anymore, I tried to reset and delete all the mok ...
- 1
0
votes
0
answers
377
views
Ubuntu no longer recognizes my imported mokutil keys after i upgraded the kernel to 5.18, causing Nvidia kernel modules to not load with secure boot?
I use Secure boot forcing kernel modules to be signed, and after i updated my Ubuntu 22.04 kernel to 5.18, i no longer can install the nvidia driver that can be download from here:
https://www.nvidia....
- 217
2
votes
1
answer
1k
views
Kubuntu 22.04 won't boot after installing Xanmod Kernal
I installed Xanmod Kernal while setting up Lutris, however when I rebooted, the system wouldn't boot. I thought it might be because I have secure boot enabled, so I went and disabled secure boot but ...
0
votes
0
answers
626
views
OBS Studio virtual camera doesn't work on virtual machine (v4l2loopback-dkms)
I am currently trying to set up the virtual camera in OBS Studio on my Ubuntu 20.04 virtual machine (DigitalOcean droplet) by installing the v4l2loopback-dkms module. However, although the virtual ...
0
votes
1
answer
344
views
How does Secure Boot handle keys?
I have been trying to understand how Secure Boot works, but there is still something not clear to me, which is the reason behind this post.
This is what I understood so far.
Secure Boot is a system, ...
- 1
1
vote
0
answers
334
views
Snap packages not working on ubuntu 22.04 with wayland
I switched to using ubuntu 22.04 with Wayland, I noticed that some snap packages don't work.
Between them: Firefox, Insomnia e Beekeeper Studio
I'm using a clean install of Ubuntu.
Nvidia: GP107M [...
0
votes
0
answers
743
views
What happens if I enable secure boot on a dual boot system?
I recently installed Ubuntu 22.04 LTS on a laptop in a dual boot environment. To install wifi-card drivers, Ubuntu is asking me to enable dual boot with a password of some kind.
I get that this is to ...
- 11
0
votes
1
answer
599
views
linux-oem-22.04a does not load MOK certificates
I started to test the oem kernel on ubuntu 22.04 jammy. Doing so I wondered why all my dkms modules don't load when secure boot is active although they are correctly signed. After investigating quite ...
- 51
0
votes
0
answers
2k
views
How to boot live distribution with secure boot enabled?
I want to try the live distribution, but I have on my laptop secure boot enabled and I can't disable it because of locked BIOS (company notebook, I can't do anything about it). Is there any way to ...
- 61
0
votes
2
answers
105
views
Will installing a new kernel bork my secure boot windows partition?
I just installed Ubuntu alongside windows with secure boot enabled (I can't disabled it, this is a work laptop), and Windows detected some changes to the EFI partition and locked itself (i.e. ...
- 101
0
votes
1
answer
600
views
How can I install drivers when secure boot is enabled? Can I disable secure boot without messing up my dual boot (with Windows 10)?
I'm trying to install WiFi drivers. I read that I need to do a sudo modprobe wl, but then I get an error saying
modprobe: ERROR: could not insert 'wl': Operation not permitted
Googling leads me to ...
- 391
1
vote
1
answer
260
views
Every week i need to reinstall Nvidia and VMware drivers when secure boot is on?
I use Secure Boot, and every 1-2 Week, when i boot the computer the Nvidia drivers are not loaded and the VMware says that it needs to install some modules and afterwards gives an error about loading ...
- 217
0
votes
2
answers
1k
views
Cannot Enter MOK Enroll Password, seems keyboard isn't working
Linux installed with Secure Boot enabled, but cannot Enter password in the MOK Enroll screen, seems keyboard isn't working.
Image
- 3
1
vote
1
answer
980
views
Is automatic nvidia driver installation with secure boot broken in ubuntu 20.04.3
Has the automated installation of nvidia drivers broken with the latest ubuntu 20.04/xubuntu 20.04 installs in the case of a secure boot computer?
Background:
I have used ubuntu and xubuntu for at ...
- 19
3
votes
0
answers
887
views
How to load grub modules forbidden by secure boot?
I have a multi-boot system with secure boot enabled that's working just fine except for one thing. I have a custom.cfg which uses the datehook module to determine which OS to boot into, and after ...
- 31
0
votes
0
answers
493
views
Can I install Ubuntu 20.04 alongside Windows 11 Secure (TPM) on a fairly new HP Laptop - Spectre x360 2-in-1 13.5"?
It's not on the Ubuntu Secure-boot 20.04 certified hardware list, but a close more expensive HP Laptop or two are: https://ubuntu.com/certified?q=&category=Laptop&vendor=HP&release=20.04+...
0
votes
0
answers
336
views
Where can I find Canonical's secure boot certificates?
Where can I find copies of the certificates used by Canonical's secure boot setup?
Specifically, I am looking for the two certificates in the following chain on the bootloader:
% sudo sbverify --list /...
- 1