Questions tagged [secure-boot]

Questions for UEFI Secure-Boot, Secure-Boot Key Signing and Management

0
votes
0answers
27 views

Can't boot Manjaro from Live USB

I'm currently running Ubuntu 18.04 on Surface Pro 3 and I'm trying to install Manjaro on my machine through a live USB that I've created with this command: sudo dd bs=4M if=/path/to/manjaro.iso of=/...
2
votes
0answers
57 views

Can't boot Ubuntu 19.04 or Ubuntu19.04 LiveUSB after enrolling MOK [closed]

(I've asked this question on AskUbuntu with no response after 4 days.) Before showing GRUB, it shows Unable to trigger tcg2 final events table: Invalid Parameter Something has gone seriously ...
3
votes
2answers
173 views

Disabling secure boot and third party drivers

Whilst installing linux mint 19.1 cinnamon i checked the "I want third party drivers box". However, upon checking that box i was prompted to create a password in order to disable secure boot. Thus, ...
0
votes
0answers
113 views

Secure boot and linux mint 19.1 cinnamon

I am currently planning on installing linux mint 19.1 cinnamon on a new SSD, after completely removing the w10 SSD, which was previously in use, from my PC. Now, is it still recommended to disable ...
1
vote
1answer
190 views

Signing a key via mokutil

After successfully installing Linux Mint 19.1 Cinnamon for the first time, I went through the recommended steps to take after the installation. Here I also upgraded my system (after checking for and ...
1
vote
1answer
510 views

Neon installation - Secure Boot vs third party drivers

I try to install KDE Neon 18.04 on my Dell Laptop (from USB drive). The installer asks me if I want to use third party software/drivers. Yes, I want to use them (when available). Directly below that ...
1
vote
1answer
159 views

Shim only works in non-Secure Boot mode

I'm trying to get my dual boot (Arch+Win10) to work with Secure Boot. I followed the Arch Wiki, with the following steps. sudo mount /dev/sda1 /boot/efi sudo mv /boot/efi/EFI/Boot/bootx64.efi /boot/...
1
vote
1answer
375 views

Build Archiso with proper UEFI SecureBoot signing

I'm building an Archiso live USB. My goal is to make it SecureBoot compatible (users with SecureBoot enabled should be able to boot it). It seems like this has been asked before (How to boot Arch ...
0
votes
1answer
102 views

My (slightly) customised Slax 9.4 distro doesn't load properly

Even though I have USB Storage set as the default boot item in my Surface UEFI, I cannot seem to boot from my USB. I have tried swiping left on the USB Storage option to immediately boot, but that ...
1
vote
1answer
180 views

adding grub to secure boot signature bricked my pc

I have a bought a new pc with a ryzen 7 1700 from MEDION. The PC works well under Windows and Linux with Secure Boot disabled. But the problem came when I wanted to enable grub with secure boot. As I ...
1
vote
0answers
69 views

Cannot find UEFI secure boot option

I have a Lenovo Ideapad y510p. I have been trying to install CUDA for GPU computing, but I've been unsuccessful so far. One common instruction is to disable the UEFI secure boot. The option simply ...
2
votes
0answers
348 views

Signing a compressed kernel module for use with Secure Boot

I'm having a little trouble signing my zfs module in Fedora 27 using UEFI/Secure Boot and I hoped someone here might be able to help. As a quick explanation for how I would normally do this, I sign ...
1
vote
1answer
2k views

Debian Install on an Intel Apollo Lake CPU

I am encountering issues with the installation of Debian on this CPU. The pc is an Awow Lone Ultrabook tablet, with an Apollo Lake N3450 CPU, see here for further comments. Reading Debian's ...
0
votes
1answer
94 views

UEFI Secure Boot keeps turning back on

I'm running Mint 18 on an Acer laptop. I disabled UEFI Secure Boot when installing nvidia drivers, rebooted, typed in my password and selected disable secure boot. However, as I'm tinkering and ...
0
votes
3answers
1k views

Is there an open source alternative to UEFI's Secure Boot? [closed]

From what I know UEFI and its Secure Boot are deeply problematic and certainly not the way forward. See: https://en.wikipedia.org/wiki/Unified_Extensible_Firmware_Interface#Criticism Also here it ...
3
votes
1answer
331 views

UEFI Secure boot key restrictions?

Following the instructions here: Secure Boot - ArchWiki worked great last year (2016). However, any keys created since the start of 2017 are refused by my Dell Optiplex 7440's UEFI firmware. I can ...
2
votes
1answer
675 views

Latest Ubuntu and Secure Boot

Can anyone tell me whether it is necessary, or even recommended to disable Secure Boot in UEFI before doing a fresh Ubuntu installation? Ditto for CSM or Legacy Boot(BIOS) mode. I leave both ...
1
vote
1answer
974 views

how do I scan the windows partition for malware?

Hopefully, not too broad of a question. For Windows 10, I was considering dual booting at least for the purposes of malware detection and removal. While AVG, and probably others, offer live rescue ...
2
votes
1answer
4k views

How to boot Arch Linux installation medium with Secure Boot enabled?

I've got a new laptop with a Samsung BIOS (version P08AFD) and Aptio Setup Utility. When I try to boot a USB stick with Arch Linux 2016.10.01 it says that the signature is invalid. The documentation ...
1
vote
1answer
48 views

How can I replace the (unsigned) bootloader in Debian with the one from Ubuntu to make it bootable one a Secure Boot-enabled device?

Ubuntu 16.04 boots fine on my UEFI pc with secure boot turned ON Debian 8.6 doesn't because its bootloader isn't signed How can I replace the bootloader that is present in Debian with the one found ...
1
vote
0answers
1k views

building a uefi-secure boot debian-USB

Target: Debian with secure boot on USB Some Links I base my progress on rodsbooks efi-bootloaders installation rodsbooks efi-bootloaders secureboot https://wiki.ubuntu.com/SecurityTeam/SecureBoot ...
8
votes
3answers
4k views

Is there a way to enable secure boot in Linux?

Just like Windows has secure boot that prevents any external OS Loader code from running at boot, does Linux have any similar option for itself? I have looked around, but when I search, the only ...
7
votes
2answers
2k views

How can I secure the initrd and grub.cfg using secure boot?

I'm using the default ubuntu approach with shim and grub2, combined with my own platform key (self-signing shim with sbsign) and an encrypted root partition, to secure boot my ubuntu installation. But ...
2
votes
1answer
242 views

Verify integrity of EFI file before chainloading

Can I, in GRUB, configure it to verify if the EFI file it is going to chainload being signed (using the Secure Boot database) and refuse to boot if not signed? I had to disable secure boot for GRUB to ...
0
votes
0answers
2k views

New Fedora Install Hangs on Initrd Default Target

I am attempting to install Fedora 19 on a brand new system. Here is my HW. Intel Core i5-6500 6M Skylake GIGABYTE G1 Gaming GA-Z170X-Gaming 3 (rev. 1.0) LGA 1151 Intel Z170 HDMI SATA 6Gb/s USB 3.1 ...
1
vote
1answer
304 views

How can i secure boot any Linux grub loader?

To secure boot an Ubuntu installation i use shimx64.efi loader. Trie to copy-paste it to the boot directory of my Kali Linux (whose GRUB loader i am currently using), but it doesn't seem to work. How ...
3
votes
0answers
5k views

Sign GRUB2 bootloader to enable UEFI secure boot

Following preliminaries: Linux 4.2.3-gentoo GRUB2 UEFI, Secure Boot off Now, I want to mess with the secure boot so I'm able to turn it on. More or less following this guide, I have: backed up the ...
1
vote
1answer
117 views

How could this happen: Secure boot on my UEFI seems to work for Ubuntu but not Fedora or Debian?

I re-enabled secure boot on an existing system. It then refused to boot the installed Debian 7, or my boot disc for Fedora 20 Live. I'm sure Fedora Live passed secure boot on this system before. ...
2
votes
1answer
4k views

Can't load zfs kernel module on Fedora with Secure Boot - “Required key not available”

I'd like to use zfs with my Fedora 20 system. I've installed the ZFS on Linux Fedora repository and subsequently the kernel-devel and zfs package. As far as I can tell, everything was installed ...
1
vote
1answer
372 views

Ubuntu load and hang on live USB [closed]

I seem to have run into some difficulties trying to install Linux alongside my USB. I made a bootable USB stick and done all the UEFI firmware settings from which I disabled fast boot. Now when I run ...
3
votes
1answer
2k views

How do I use custom-signed shim for secure boot (Fedora)?

I'm not sure whether there's a guide for this but I'd like to know the detailed steps (step-by-step guide perhaps?) involved in achieving the following: Re-sign shim with a custom CA private key, but ...
1
vote
1answer
709 views

Why am I getting “no boot disk has been detected” after installing Linux?

After installing a Linux distro (Fedora 19, to be exact) on a Windows 8 machine I got the message: No boot disk has been detected or the disk has failed. What did I do wrong?
3
votes
3answers
8k views

Possible to dual boot Linux Mint on any Windows 8 laptop?

I'm searching for a new laptop, and I'm currently considering getting an ASUS N56VZRH71. Everything spec-wise looks good (except for the absence of an SSD), but I want to know if I'll be able to dual ...
3
votes
1answer
826 views

Protecting file system contents with TPM and Encrypted File System

I have been assured that this is possible, but have so far not found any reference that will clue me as to how to do it. I need to deploy an "appliance" with software and data that the user is ...
18
votes
2answers
2k views

The UEFI & SecureBoot impact, how severe?

I'm planning to buy a new laptop in the coming days, and I'm quite impressed with new, cool Ultrabooks. As a long-time GNU/Linux user, I'll of course install a distro of my choice on it. Chances are ...
3
votes
3answers
608 views

Linux Mint 14.1 not bootable because of “secure boot”

I'm trying to install Linux Mint 14.1 on my Lenovo B570, but when I try to boot the thumb drive, it displays a message: "Secure boot is not enabled" and then goes black screen. I read lots of posts on ...
2
votes
2answers
402 views

Can I safely resize my partition from its beginning?

Currently dual booting Windows 8 and Linux Mint 14, sooner or later I will give more space to my Linux system. Is resizing my Linux partition from the beginning a safe operation ? If yes, could you ...