Questions tagged [secure-boot]

Questions for UEFI Secure-Boot, Secure-Boot Key Signing and Management

13 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3
votes
0answers
5k views

Sign GRUB2 bootloader to enable UEFI secure boot

Following preliminaries: Linux 4.2.3-gentoo GRUB2 UEFI, Secure Boot off Now, I want to mess with the secure boot so I'm able to turn it on. More or less following this guide, I have: backed up the ...
3
votes
1answer
2k views

How do I use custom-signed shim for secure boot (Fedora)?

I'm not sure whether there's a guide for this but I'd like to know the detailed steps (step-by-step guide perhaps?) involved in achieving the following: Re-sign shim with a custom CA private key, but ...
3
votes
1answer
828 views

Protecting file system contents with TPM and Encrypted File System

I have been assured that this is possible, but have so far not found any reference that will clue me as to how to do it. I need to deploy an "appliance" with software and data that the user is ...
2
votes
0answers
364 views

Signing a compressed kernel module for use with Secure Boot

I'm having a little trouble signing my zfs module in Fedora 27 using UEFI/Secure Boot and I hoped someone here might be able to help. As a quick explanation for how I would normally do this, I sign ...
1
vote
0answers
12 views

Load rootfs from fit image and signature verification

I am new to fit image and secure boot. I created fit image using mkimage command and added kernel dtb and rootfs into it. Goals: Need to boot up from fit image kernel rootfs and dtb. I am able ...
1
vote
1answer
171 views

Shim only works in non-Secure Boot mode

I'm trying to get my dual boot (Arch+Win10) to work with Secure Boot. I followed the Arch Wiki, with the following steps. sudo mount /dev/sda1 /boot/efi sudo mv /boot/efi/EFI/Boot/bootx64.efi /boot/...
1
vote
0answers
74 views

Cannot find UEFI secure boot option

I have a Lenovo Ideapad y510p. I have been trying to install CUDA for GPU computing, but I've been unsuccessful so far. One common instruction is to disable the UEFI secure boot. The option simply ...
1
vote
0answers
1k views

building a uefi-secure boot debian-USB

Target: Debian with secure boot on USB Some Links I base my progress on rodsbooks efi-bootloaders installation rodsbooks efi-bootloaders secureboot https://wiki.ubuntu.com/SecurityTeam/SecureBoot ...
0
votes
0answers
35 views

Can't boot Manjaro from Live USB

I'm currently running Ubuntu 18.04 on Surface Pro 3 and I'm trying to install Manjaro on my machine through a live USB that I've created with this command: sudo dd bs=4M if=/path/to/manjaro.iso of=/...
0
votes
0answers
149 views

Secure boot and linux mint 19.1 cinnamon

I am currently planning on installing linux mint 19.1 cinnamon on a new SSD, after completely removing the w10 SSD, which was previously in use, from my PC. Now, is it still recommended to disable ...
0
votes
1answer
103 views

My (slightly) customised Slax 9.4 distro doesn't load properly

Even though I have USB Storage set as the default boot item in my Surface UEFI, I cannot seem to boot from my USB. I have tried swiping left on the USB Storage option to immediately boot, but that ...
0
votes
1answer
96 views

UEFI Secure Boot keeps turning back on

I'm running Mint 18 on an Acer laptop. I disabled UEFI Secure Boot when installing nvidia drivers, rebooted, typed in my password and selected disable secure boot. However, as I'm tinkering and ...
0
votes
0answers
2k views

New Fedora Install Hangs on Initrd Default Target

I am attempting to install Fedora 19 on a brand new system. Here is my HW. Intel Core i5-6500 6M Skylake GIGABYTE G1 Gaming GA-Z170X-Gaming 3 (rev. 1.0) LGA 1151 Intel Z170 HDMI SATA 6Gb/s USB 3.1 ...