Questions tagged [secure-boot]

Secure Boot is an UEFI feature that blocks unsigned drivers and operating systems from running. Use this tag if you have questions about Ubuntu on a secure-boot enabled system.

Filter by
Sorted by
Tagged with
0 votes
0 answers
28 views

How can I check whether my TPM-chip supports TPM-2.0?

I would like to update my TPM-chip from TPM-1.2 to TPM-2.0, but I don't know whether it has support for it. How can I check that, and how can I update it, if it's supported? (I'm using an HP-Notebook)
user avatar
0 votes
0 answers
36 views

How to boot live distribution with secure boot enabled?

I want to try the live distribution, but I have on my laptop secure boot enabled and I can't disable it because of locked BIOS (company notebook, I can't do anything about it). Is there any way to ...
user avatar
  • 61
0 votes
0 answers
29 views

How to stop list of import_one_mok_state() at boot?

Ubuntu 22.04 on a Dell Inspiron 5570 at boot, start before login it lists items that says mok: import_one_mok_state(). I guess something is wrong with secure-boot and mokutil. How do I fix this? Looks ...
user avatar
0 votes
2 answers
36 views

Will installing a new kernel bork my secure boot windows partition?

I just installed Ubuntu alongside windows with secure boot enabled (I can't disabled it, this is a work laptop), and Windows detected some changes to the EFI partition and locked itself (i.e. ...
user avatar
  • 101
0 votes
1 answer
52 views

How can I install drivers when secure boot is enabled? Can I disable secure boot without messing up my dual boot (with Windows 10)?

I'm trying to install WiFi drivers. I read that I need to do a sudo modprobe wl, but then I get an error saying modprobe: ERROR: could not insert 'wl': Operation not permitted Googling leads me to ...
user avatar
  • 342
1 vote
1 answer
57 views

Every week i need to reinstall Nvidia and VMware drivers when secure boot is on?

I use Secure Boot, and every 1-2 Week, when i boot the computer the Nvidia drivers are not loaded and the VMware says that it needs to install some modules and afterwards gives an error about loading ...
user avatar
0 votes
0 answers
39 views

How to build a secure-boot enabled Kernel in 21.10 (Impish) with modules and signing

I'm running an x64 EFI based secure-boot system. I don't want to disable secure-boot for reasons that are my own. I found the build guide for Ubuntu kernels. Also found the signing-guide, but still ...
user avatar
  • 101
0 votes
1 answer
99 views

Cannot Enter MOK Enroll Password, seems keyboard isn't working

Linux installed with Secure Boot enabled, but cannot Enter password in the MOK Enroll screen, seems keyboard isn't working. Image
user avatar
0 votes
0 answers
31 views

Ubuntu Budgie 20.04.04 Secure Boot [duplicate]

When I try to install Ubuntu Budgie 20.04.04 with MBR & Legacy mode, it just works fine, but with Secure Boot and GPT it gives this message: Failed to set MokListRT: Invalid Parameter Something ...
user avatar
1 vote
0 answers
201 views

Is automatic nvidia driver installation with secure boot broken in ubuntu 20.04.3

Has the automated installation of nvidia drivers broken with the latest ubuntu 20.04/xubuntu 20.04 installs in the case of a secure boot computer? Background: I have used ubuntu and xubuntu for at ...
user avatar
0 votes
0 answers
61 views

How to load grub modules forbidden by secure boot?

I have a multi-boot system with secure boot enabled that's working just fine except for one thing. I have a custom.cfg which uses the datehook module to determine which OS to boot into, and after ...
user avatar
0 votes
0 answers
131 views

Can I install Ubuntu 20.04 alongside Windows 11 Secure (TPM) on a fairly new HP Laptop - Spectre x360 2-in-1 13.5"?

It's not on the Ubuntu Secure-boot 20.04 certified hardware list, but a close more expensive HP Laptop or two are: https://ubuntu.com/certified?q=&category=Laptop&vendor=HP&release=20.04+...
user avatar
0 votes
0 answers
93 views

Where can I find Canonical's secure boot certificates?

Where can I find copies of the certificates used by Canonical's secure boot setup? Specifically, I am looking for the two certificates in the following chain on the bootloader: % sudo sbverify --list /...
user avatar
  • 1
0 votes
1 answer
2k views

How do I boot to recovery mode in Ubuntu 20.04? [duplicate]

To solve another problem I am having, it has been suggested that I need to "reboot to secure (actually recovery) mode". I don't know exactly what this means. I have been in the BIOS of my ...
user avatar
1 vote
1 answer
98 views

no bootable device, secure boot, UEFI after Ubuntu installation - Acer

I own an Acer Aspire 5720. The laptop had an old version of Ubuntu. Due to networking issues, I had to restore the PC and install the newest version, 21.10. I don't have CDs/DVDs burners on my PCs, so ...
user avatar
  • 11
0 votes
1 answer
175 views

Can't boot with secure boot and with the kernel signed

I want to use Secure Boot with my own keys and with the kernels that I sign. I have gotten Grub to boot, but not with the signed kernel. I get this: "Error: /vmlinuz-5.4.0.91-generic has invalid ...
user avatar
  • 1
0 votes
0 answers
40 views

Ubuntu not permitting Wi-Fi drivers in secure boot. How to solve the problem?

My computer is installed with Ubuntu 21.04 and the Wi-Fi is not detected. tried to install the driver. But When I disabled secure boot, Wi-Fi automatically appeared. I am afraid that disabling secure ...
user avatar
0 votes
0 answers
235 views

I can't change the Secure Boot mode to enabled "Failed to delete Secure Boot state"?

I have Ubuntu 21.10. Secure Boot is showen as enabled, in the BIOS of the Computer, but as I used the sudo mokutil --sb-state to check the status it says "SecureBoot disabled". Then I used ...
user avatar
0 votes
0 answers
43 views

Add script to preseed Ubuntu and enable secure boot

I created customize Ubuntu ISO in Cubic with preseed file, but I would like to add script in late command, but it doesn't work. I tried a lot of ways, but I still have a problem. I added script in ...
user avatar
  • 1
2 votes
0 answers
792 views

Dual boot with Windows 11 pre-installed on new laptop asks for Bitlocker Key

I recently purchased a new laptop--HP Pavilion 15 eh1097nr--that came with Windows 11 pre-installed on a 512GB SSD. I would like to install Ubuntu along side Windows and dual boot. I ran the live USB ...
user avatar
0 votes
0 answers
68 views

kernel modules restricted on a system with secure boot disabled

I have a system with EFI BIOS but without Secure Boot, but system refuses to load third party modules (vmware modules) with the "unsigned module loading is restricted; see man kernel_lockdown.7&...
user avatar
  • 1
0 votes
1 answer
220 views

Issues with apt-get and dpkg related to Secure Boot

I've recently been having trouble with Ubuntu. Whenever I try to sudo apt get something (in this case python 3), I get the error message: dpkg was interrupted, you must manually run 'sudo dpkg --...
user avatar
1 vote
0 answers
43 views

Reduce battery depletion when in suspend mode on Ubuntu 21.10

I recently installed Ubuntu 21.10 on my new machine, dual-booting with Windows (for the time being). My setup is however not the usual setup; I have a /boot partition of 1GB on my disk and a / ...
user avatar
  • 11
0 votes
0 answers
49 views

Installing ubuntu with secure boot disabled?

Since my Ubuntu Live USB does not have shimx64.efi files, I'm installing Ubuntu with Secure Boot disabled. I have no choice. Can I just enable secure boot later on my computer? Will that break ...
user avatar
2 votes
0 answers
389 views

Getting suspend to work on Ubuntu (21.10 - impish release)?

I turned off secure boot and installed ubuntu. Everything was wiped and installation went fine. I am using an aero 15x v8 laptop. Version 21.10 of Ubuntu. Then I turned secure boot back on but it ...
user avatar
1 vote
1 answer
226 views

Will Ubuntu 20.04LTS boot a computer configured for UEFI secure boot?

I have a home-built PC with Gigabyte H370N-WIFI motherboard and two SSDs (the primary one with Ubuntu 20.04 LTS and another one for gaming running Windows 10). I want to be sure my PC will support ...
user avatar
  • 111
3 votes
1 answer
126 views

Windows update broke GRUB2 so bad even a live USB key cannot boot (September 2021)

(and welcome to a new "let's hate on Microsoft" thread) Asus laptop with a 500GB SSD drive, with a 150GB NTFS Windows partition and a 350GB Ubuntu 20.04 partition (almost sure it is ext4). ...
user avatar
0 votes
0 answers
804 views

What is "Platform is in setup mode" mean? SecureBoot disabled although TPM is enabled

I had to wipe my HDD clean and re-installed both Windows 10 and Ubuntu in dual boot setup. I have three main partitions, one of windows (plus three Microsoft related partitions, EFI and linux swap) ...
user avatar
  • 41
3 votes
1 answer
199 views

How can I tell if Ubuntu has booted securely?

I understand that I can reboot, enter the UEFI firmware (formerly BIOS) settings and look for options enabling UEFI boot and forcing secure boot. However, given an already booted system (e.g., a ...
user avatar
0 votes
0 answers
50 views

Fresh 21.04 installation won't boot into OS [duplicate]

Summary: I can boot my Dell Precision 7510 laptop into Ubuntu using a boot USB, but after installing and removing the USB, the laptop fails to boot into the installed Ubuntu OS. I've installed Ubuntu ...
user avatar
0 votes
0 answers
197 views

Not able to load signed driver in secure boot

I am using Kubuntu 21.04 on a HP Victus. It has a Realtek 8852AE wifi adapter for which I have to compile and sign from this repository https://github.com/lwfinger/rtw89. But even after giving a make ...
user avatar
0 votes
1 answer
458 views

RTL8821CE DKMS driver will not work with secure boot enabled

After my recent re install of Ubuntu 20.04.2 LTS, I went into Software and Updates > Additional Drivers and enabled the driver for "Realtek Semiconductor Co., Ltd.: RTL8821CE 802.11ac PCIe ...
user avatar
0 votes
0 answers
363 views

Difficulty installing rEFInd with secure boot enabled

What I am trying to do this on: Dell Inspiron 7506 2in1 Black Edition with Kubuntu 21.04. I have followed the instructions at https://www.rodsbooks.com/refind/secureboot.html#installation but most of ...
user avatar
0 votes
1 answer
683 views

Cannot recover system after Ubuntu went into emergency mode

I removed Windows 10 and installed Ubuntu 18.04 LTS in UEFI Secure Boot Mode in 2019 on my development machine, aside from initial complications of getting the UEFI system working, I've had no ...
user avatar
0 votes
0 answers
270 views

Enabling secure boot disables one of two monitors?

I have a dual boot machine with Windows 10 and Ubuntu 21.04, I have just been in the BIOS enabling Secure Boot and TPM for a future Windows 11 update. Ubuntu boots with TPM & Secure Boot enabled ...
user avatar
  • 101
2 votes
0 answers
234 views

How to PERMANENTLY Disable Secure Boot?

I have been trying to install Nvidia Driver on my Asus Tuf Dash F15 Laptop for a month now. The people at https://forums.developer.nvidia.com/t/problems-installing-driver-on-laptop-with-an-intel-igpu-...
user avatar
  • 143
2 votes
0 answers
115 views

Self-signed kernel loading stopped working after upgrade to 21.04

I have a strange problem with secure boot and self-signed kernels. On 20.10 I was able to boot (everything with Secure Boot) both canonical-signed and self-signed kernels. After upgrade to 21.04 ...
user avatar
  • 21
0 votes
0 answers
61 views

MokManager hangs when no display is present

We are using NUC10i3FNB devices headless in an IoT application. When upgrading kernel to 5.11.0-22 on Ubuntu 20.04 it requested MOK manager to run to install additional keys. With no display, these ...
user avatar
  • 165
0 votes
0 answers
970 views

I can't select the Enroll MOK for secure boot on ubuntu

I just did a fresh installation of Ubuntu 20.04 on a Lenovo Legion5. I checked for installing third party software and it prompt me for a password for Secure Boot, which I did. After installation was ...
user avatar
0 votes
1 answer
25 views

Enabling propriety driver doesn't work

When I enable a proprietary driver (NVidia), I'm asked to enter a password for UEFI Secure Boot that it say I will needed to enter again on reboot, but when I reboot it doesn't ask for anything and I ...
user avatar
  • 101
0 votes
0 answers
125 views

Failed to set MokListXRT: Out of resources when booting Ubuntu 21.04

I just installed ubuntu 21.04 on a brand new msi b650M mortar wifi motherboard, and I am getting two messages before the system boots: Failed to set MokListXRT: Out of resources Could not create ...
user avatar
1 vote
0 answers
135 views

Re enable Secure Boot, Screen Goes Blank After Installing NVidia Driver

I had installed NVIDIA Drivers 465.27 on my Ubuntu 20.04 using software updater. That time, I could not sign the kernel modules via installer as mentioned here, rather I disabled the secure boot ...
user avatar
  • 63
0 votes
0 answers
479 views

UEFI without secure boot

I'm not new to Ubuntu (have been running linux since the 90's) but now that I'll upgrade my computer to a new one again I'm wondering a bit about UEFI and Legacy boot. On the whole, it seems that it ...
user avatar
  • 21
1 vote
0 answers
362 views

Is it safe to delete "/crypto_keyfile.bin"?

I use Lubuntu 20.04 with full-disk encryption. # lsb_release -a Distributor ID: Ubuntu Description: Ubuntu 20.04.2 LTS Release: 20.04 Codename: focal Each time I boot, there is a one ...
user avatar
  • 41
0 votes
0 answers
213 views

how to disable secure boot in crouton

I am having problems with ubuntu focal fossal XFCE enviorment, more specific Crouton. And if you don't know what a crouton is it makes a chroot inside chrome os. So i am basicly running a chroot ...
user avatar
1 vote
0 answers
162 views

VirtualBox giving Secure Boot error - Despite the fact it's not installed? [duplicate]

My /var/log/syslog file kept getting tremendously big, I checked the last few lines with tail and I found this Jun 16 19:21:18 Freedom-MAX-G0101 vboxdrv.sh[7974]: The Secure Boot key you've entered is ...
user avatar
  • 11
2 votes
1 answer
2k views

Installing Ubuntu 20.04 LTS with third-party software and Secure Boot is confusing

I've installed Ubuntu several times in computers without UEFI thus without Secure Boot, but this time I am confused. I install Ubuntu 20.04 LTS in HP Envy 15, dual-boot with the existing Wind***. I've ...
user avatar
  • 1,175
0 votes
0 answers
871 views

How to disable mok or mok management?

First, i need to say that i was trying to study with virtual box in ubuntu, but i use the same machine for my job, so it will be very hard to make another installation of ubuntu. So, because of the &...
user avatar
0 votes
0 answers
251 views

System boot order not found. Initializing defaults

I've installed Ubuntu 20.04 LTS with a USB stick. Earlier I booted the USB stick in GPT partition scheme, and in my bios, boot option is set to UEFI without CSM. My installation was successful. Then ...
user avatar
2 votes
3 answers
965 views

Why does shim/mokmanager allow to circumvent _ALL_ protections of SecureBoot? And how to fix it?

Here is what I have done: Generated my own SSL keys (db, KEK, PK) x (cer, key) Removed existing signatures from kernel, GRUB, shim (and all other EFI binaries in /boot) and signed them with my own ...
user avatar
  • 161

1
2 3 4 5
7