Questions tagged [secure-boot]

Secure Boot is an UEFI feature that blocks unsigned drivers and operating systems from running. Use this tag if you have questions about Ubuntu on a secure-boot enabled system.

Filter by
Sorted by
Tagged with
0 votes
1 answer
56 views

Migrating Ubuntu-20.04 boot disk from old laptop to new laptop with secure-boot enabled

I have an laptop running 20.04 (no secure-boot, title it old). I wanted to move the boot disk to a new laptop (titled new) which has secure-boot enabled. I do not want to disable secure boot on new, ...
Samveen's user avatar
  • 180
0 votes
1 answer
136 views

Benefit of using secure boot with MOK over disabling secure boot

Following this guide, I was able to enroll a Machine Owner Key (MOK) to sign my NVIDIA (proprietary) driver. It is fairly easy to set up and it works fine. So far I am happy with it. I had to enter a ...
Stéphane Tréboux's user avatar
1 vote
0 answers
37 views

Auto disable secure boot when switching to ubuntu 22.04 [duplicate]

Currently, my laptop is set up with dual-boot for Windows 11 and Ubuntu 22.04. However, when using a external adapters in Ubuntu, I need to disable Secure Boot. Unfortunately, I don't want to disable ...
Việt Trương's user avatar
0 votes
1 answer
423 views

Get VirtualBox runnning with SecureBoot

I try to get VirtualBox running on my Ubuntu 23.10 with Secure Boot enabled. When starting any Virtual Mache in VirtualBox the error is shown: Kernel driver not installed (rc=-1908) The VirtualBox ...
exaveal's user avatar
  • 57
0 votes
0 answers
155 views

Getting "This computer currently has no detected operating systems." while installing Ubuntu 23.10 alongside Windows 10

After carefully reviewing answers to these similar questions: "This computer currently has no detected operating systems."- Ubuntu 14.04 install Windows 8.1 "Install alongside" ...
Shahriar.M's user avatar
0 votes
0 answers
71 views

how to change bios mode from legacyto UEFI mode?

Currently, my operating system is windows 10. I want to dual boot ubuntu and windows 10. Since the current drive didn’t have enough space I added another ssd drive. When I was installing ubuntu, I ...
hamid kavianathar's user avatar
1 vote
0 answers
467 views

Mok Management steps to take?

After the first rebook I get to Mok Management blue screen. My issue is that I don't have the same choices as any other forum/video that I have seen. My choices are:   Continue boot   Reset Mok   ...
Dan Kupritz's user avatar
0 votes
0 answers
171 views

DBX firmware update and corrupted bios

everyone, Last week, I updated the DBX firmware to 371 from Ubuntu on Aspire A515-43. So, when I updated the dbx, my laptop froze (Ubuntu OS), which led me to perform a forced shutdown via the power ...
Maher_2000's user avatar
0 votes
0 answers
81 views

DBX Secure boot keys and windows time boot

Last week, i installed DBX Firmware update through ubuntu 23.10 update, but after that, i still face problem with restart windows os which take long time to boot. So, is the dbx have relation to this ...
Maher_2000's user avatar
4 votes
2 answers
3k views

Secure Boot dbx Configuration Update 77 - 371 Ubuntu 23.10

I've a message starting popping up after the upgrade to 23.10 from 23.04, that I've got some updates. Turned out that this is that in the sub. Tried to update and it fails. This is what I've got ...
foxy123's user avatar
  • 417
1 vote
0 answers
225 views

Can't do anything with apt without an error caused by shim-signed

Suppose I type, sudo apt-get install SOME_PACKAGE Regardless of what package I'm installing, I end up with the following error: Setting up shim-signed (1.51.3+15.7-0ubuntu1) ... /var/lib/dpkg/...
Michael Mastroianni's user avatar
0 votes
0 answers
377 views

Enable secure boot on an already installed dual boot system

I am unable to enable secure boot on my system. Please help me enable it, without bricking my pc :) Pc info: HP laptop Dual boot Windows 11 (I bypassed secure-boot check to install it) Ubuntu ...
Rishabh Singh's user avatar
0 votes
1 answer
54 views

apt shim package

I noticed in the APT repo there is both shim and shim-signed. I'm wondering what the purpose of the shim package is? Can it be used to insert a db certificate into the boot process? I'm looking for an ...
Simon's user avatar
  • 61
2 votes
1 answer
393 views

grubx64.efi made with grub-mkstandalone fails to start under SecureBoot

Using Ubuntu 20.4 with GRUB2 2.04, Shim 15.7 (I think) I've been following the Simon Ruderich guide to "Secure Boot with GRUB 2 and signed Linux images and initrds" When booting with the ...
Simon's user avatar
  • 61
0 votes
1 answer
342 views

mkusb grub doesn't work with secure boot on (lubuntu live persistent usb)

I'd like to make a persistent-live-usb lubuntu 22.04 that works on systems with enabled Secure Boot (bios option). I've tried the dus-persistent method in mkusb, but I'm only able to access the grub (...
andrej's user avatar
  • 59
0 votes
1 answer
3k views

UEFI Secure Boot:- bad shim signature

Before proceeding I don't want to disable the Secure Boot option. I need a solution, not a workaround. I have a humble setup using dnsmasq and the dnsmasq built-in tftp to give me a PXE server. I am ...
Mubeen's user avatar
  • 21
0 votes
0 answers
133 views

Secure Boot Violation after moving my Ubuntu UEFI SSD into identical laptop

Recently my old laptop (about 8 years old) with Lubuntu installed on a UEFI SSD died. It just refused to start at all, the little led that normally lights when the mains is on also did not light up. I ...
plopper's user avatar
  • 129
0 votes
0 answers
118 views

How to install kernel from default ppa etc after manually installing it?

I had some issues with a kernel and had to manually install 6.2 (I'm on Ubuntu 22.04). Now whenever I boot I need to make sure that I disable secure boot and I suspect this is because I installed the ...
evan54's user avatar
  • 735
0 votes
0 answers
177 views

Secure boot, Switch my main SSD to another PC

My laptop needs to be sent for repair. I want to take out it's SSD (main, bootable) and plug it into another desktop machine in order to continue my work as as usual. In theory it should work, but ...
n0tis's user avatar
  • 197
0 votes
1 answer
232 views

Dual boot Ubuntu and Windows 11 on my organization managed school laptop

thanks for taking the time to read this. I want to dual boot ubuntu and windows 11 on my school laptop that is managed by my organization/school. I don't want this process to go wrong since I want ...
Olle's user avatar
  • 3
0 votes
0 answers
261 views

Can't enter BIOS on ACER laptop

I had installed the latest Lubuntu(22.04.2 LTS (Jammy Jellyfish)) on an old ACER laptop by deleting everything on it (chose the Erase all option) on the partitioning step of the installation, but ...
Sero Mirzakhanyan's user avatar
0 votes
2 answers
12k views

Error "shim_lock protocol not found" in GRUB while secure boot is enabled [closed]

I have a dual-boot system and the following error appears after selecting any OS in the GRUB menu: error: shim_lock protocol not found. error: you need to load the kernel first. Press any key to ...
Tedpac's user avatar
  • 133
2 votes
0 answers
451 views

Ubuntu secure boot installation problems

I've installed ubuntu 22.04 on my old laptop. Since there was secure boot enabled, in the installation I checked the "Install third-party software and drivers" and entered the password in ...
Arzybek's user avatar
  • 307
0 votes
0 answers
442 views

Out of the box signed GRUB2 for secure boot

I’m trying to create a tool which replaces Windows boot loader with GRUB2 and I’m using an UEFI computer that allowing Secure Boot (that I’m trying to keep). I tried to copy shimx64.efi and mmx64.efi ...
eeee25's user avatar
  • 1
0 votes
1 answer
105 views

Is it okay to use the same pw for root and secure boot?

If I install with secure boot enabled I’m asked to set a pw which I’m told I won’t need often. Is it safe to use the same pw as for root?
H3R3T1K's user avatar
  • 2,391
-1 votes
2 answers
306 views

Secure boot & 'Device Security'

about 3 days ago I bought a brand new system and did a clean install of 23.04. I did not have secure boot enabled. I then spent the next 3 days installing software to get my system up to a fully ...
Worn-out_home-tech's user avatar
0 votes
0 answers
93 views

How to setup secure boot on customized Ubuntu Server ISO?

I have an Ubuntu Server 20.04 but I want it to support secure boot automatically just like how the official Ubuntu Desktop does.
TechVio's user avatar
0 votes
0 answers
120 views

firmware question during install + no wifi

When installing ubuntu 22.04 LTS on a low-end Lenovo, it asked me about installing third-party firmware/software for wifi etc. I of course said yes, and entered in a password for secureboot where ...
Lucky's user avatar
  • 111
0 votes
0 answers
997 views

PXE and UEFI SecureBoot

I am trying to PXE boot with SecureBoot enabled. My PXE does boot with UEFI enabled, however when enabling SecureBoot I get the error “Boot failed. EFI Network. Failed Secure Boot Verification.” My ...
Scott's user avatar
  • 31
1 vote
1 answer
196 views

Apparmor full system implementation help

I am trying to implement Apparmor full system implementation on Ubuntu Bionic in AWS EC2 instances. https://gitlab.com/apparmor/apparmor/-/wikis/FullSystemPolicy#distribution My goal is employ a deny-...
user596374's user avatar
0 votes
1 answer
5k views

How to install Virtualbox with signed kernel modules

I have read Signing Virtualbox modules with EFI Secure Boot enabled. The procedure described there does not work as described with the --reinstall step. There is no detailed prompt. Note that VMware ...
Yasha Karant's user avatar
2 votes
0 answers
65 views

Issue with secure boot and official kernel 5.15.0-56

I got a new ThinkPad L13 and I decided to install Ubuntu on it. Installation went fine until I had to install the kernel 5.15.0-56, which is a requirement for an application. 5.15.0-56 installs ...
mariop's user avatar
  • 121
3 votes
1 answer
979 views

Ubuntu's dkms v3.0.6 breaks drivers with enabled SecureBoot

What happened I upgraded my system yesterday and it updated dkms to the latest version for Ubuntu 22.10: dmks3.0.6-2ubuntu1. At the same time, apt upgraded me to the latest kernel version. Since then, ...
YSC's user avatar
  • 121
7 votes
2 answers
10k views

Signing Virtualbox modules with EFI Secure Boot enabled

I have a system (22.04.1 LTS) with an Nvidia card and with EFI secure boot enabled. Virtualbox refuses to run a VM and claims that if the system has EFI Secure Boot enabled you may also need to sign ...
Adriano Peluso's user avatar
0 votes
1 answer
274 views

Unable to Download Latest Version of DBX

I'm running 22.04.2 LTS, and I have a message in the Software Update tool it says I have a firmware upgrade to install: "Secure Boot dbx Configuration Update" (Version 77 -> 217). ...
jdnmchn's user avatar
-1 votes
1 answer
201 views

Black screen in Ubuntu 22.04.1

I have an ASUS Prime b350m-a motherboard with BIOS version 6042, a Nvidia 710 video card and a ryzen 3 1300x processor. I tried to install Ubuntu 22.04.1 LTS and everything is correct but when I turn ...
GenGL's user avatar
  • 1
0 votes
1 answer
435 views

Enrolling MOK when installing VirtualBox 7 on 22.04

When I try to install VirtualBox 7 on 22.04, it is asking to add MOK to the firmware while reboot. Is it safe to do so? I have an HP laptop with Secure Boot enabled. Will it change the firmware ...
user227495's user avatar
  • 4,069
0 votes
2 answers
34 views

I got an error with a dkms file

So I was trying to fix my obs studio and had a snap version installed from the store and tried installing it from the website simultaneously. When i installed its prerequisite, it started throwing and ...
Habibi Gaju's user avatar
0 votes
0 answers
29 views

Secure boot inconsistent behavior

I have two systems with 20.04 LTS. Secure boot is enabled on both. The behavior of the two systems is different, and I have not idea why. System 1: Asks for a new secure boot password on each kernel ...
MZ_Guy's user avatar
  • 1
0 votes
0 answers
126 views

Unable to update "Secure Boot dbx" : no volumes of type ... (It's a different problem here)

I've got a secure boot dbx update (78->217) waiting in my Ubuntu Software app. When I try to install it, I get this error message : " Blocked executable in the ESP, ensure that grub and shim ...
dilwynlala's user avatar
2 votes
1 answer
2k views

"Secure Boot dbx Configuration Update" resulting in error on 2018 Razer Blade 15

I get this error message when clicking update: Unable to update "Secure Boot dbx Configuration Update": Message recipient disconnected from message bus without replying What do I need to ...
PositivelyNegative's user avatar
0 votes
0 answers
2k views

Boot errors (error: out of memory)

I’m trying to go back to Linux from windows after some viruses. I was able to download and use the live cd of Ubuntu with no problems (a few messages popped up, but I got no errors once up and running)...
mikatao's user avatar
1 vote
0 answers
91 views

is it normal that i didn't encounter any thing related to the mokutil during the process of installing nvidia driver on ubuntu 22.10 with secureboot?

i installed ubuntu 22.10 with secure boot and nvidia drivers. I know about the dkms bug steps to reproduce 1-during installation i didn't install third party drivers 2-i updated the system then ...
Hesham Khalil's user avatar
1 vote
0 answers
2k views

I can't install Kubuntu 22.04 while Secure Boot is On

I installed Ubuntu 22.04 LTS Desktop while Secure Boot is enabled, and so far, it works. Now, I'm trying to install Kubuntu 22.04 LTS Desktop on my Hyper-V to see if it will work while Secure Boot is ...
Linux Kid Inside's user avatar
4 votes
1 answer
2k views

What do I need to update Secure boot for?

There is update of Secure Boot, DBX - from 77 to 217. It cannot be installed because grub is old. I have switched Secure Boot off in bios. What is DBX update? I am not going to install it. Ubuntu 22....
Mahler's user avatar
  • 611
0 votes
1 answer
9k views

GPU driver not loaded when secure boot is enabled

I had installed Ubuntu 22.04 (with secure boot on), but I upgraded to 22.10 with secure boot off. I went to enable secure boot, but the GPU driver (nvidia proprietary) wasn't loaded. Do I need some ...
Marios Koni's user avatar
3 votes
1 answer
2k views

signed kernel module not accepted

I signed a kernel module with MOK using: $ sudo kmodsign sha512 \ /var/lib/shim-signed/mok/MOK.priv \ /var/lib/shim-signed/mok/MOK.der \ ./ipu6-drivers/0.0.0/5.19.0-23-generic/x86_64/module/...
Bram's user avatar
  • 2,449
-1 votes
2 answers
383 views

security risk? why ubuntu apply strange permissions in /boot/initrd* and /boot/vmlinuz*?

the initrd.img are all 644, the vmlinuz in another hand is 600. This is reversed on many other distros if not all. I think other distros actually do it correctly. the content in vlinuz is all public ...
Wang's user avatar
  • 635
0 votes
0 answers
121 views

BootHoleDetection script claims Ubuntu 22 signed-shim is vulnerable to BootHole problem

https://eclypsium.com/2020/07/29/theres-a-hole-in-the-boot/ Description of BootHole vulnerability from July, 2020. The check script is from eclypsium, https://github.com/eclypsium/BootHole the folks ...
Lloyd Kvam's user avatar
24 votes
6 answers
31k views

Impossible to update UEFI dbx

My Ubuntu (20.04) Software is prompting a new firmware available: UEFI dbx 77--> 217 (?), but when I try to update I receive the following error message: Impossible to update UEFI dbx. Blocked ...
Py-ser's user avatar
  • 677

1
2 3 4 5
8