I have a fresh install of Debian 12, but every time I boot it prompts me for a MOK password (just the password, no other options). I know what the password should be, but entering it says it doesn't match. However, if I enter something invalid 3 times in a row, it says I've reached the limit and takes me to the standard GRUB menu listing all my boot options. From there, I can just boot into my system like normal, bypassing the MOK password prompt.
I don't recall installing MOK or SHIM or anything of the sort for this installation, though it was present for a previous installation (where I had the same issues, and hence the reinstall). I don't really care about having secureboot so disabling it altogether (along with the prompt) is acceptable, even preferable.
I have tried:
- Using QWERTY keyboard (my keyboard is already QWERTY, as are my input settings in the OS itself. I've also tried passwords with only numbers)
- Changing the password with mokutil (
sudo mokutil --password)
- Disabling secure boot (it is disabled in my UEFI already, and I confirmed it's disabled with
mokutil --sb-state. I also disabled it with
sudo mokutil --disable-validationfor good measure)
- Resetting MOK (
sudo mokutil --reset)
- Reinstalling Debian via live USB
- Reinstalling both Debian and GRUB (I have a windows dual boot setup, went into windows, deleted every UNIX partition and filesystem, then reinstalled Debian and GRUB with manual partitioning of the newly empty volumes and a live USB)
Worth mentioning is I haven't allowed windows to update in a long time (at least 6 months). So it's possible there's a missing firmware update that could fix this issue, but it's also possible (as has happened before) that updating my firmware could cause this issue another way. It's a surface device, so plausible that windows updates would also update firmware.
So my question is, how do I disable the MOK prompt on boot altogether, and just load straight into GRUB?