Questions tagged [secure-boot]
Questions for UEFI Secure-Boot, Secure-Boot Key Signing and Management
123 questions
1 vote
0 answers
54 views
Why is my unsigned BOOTX64.EFI able to boot with Secure Boot enabled?
I am trying to understand Secure Boot and what it is doing on my system. I am using systemd-boot as my bootloader, not shim or GRUB, and Secure Boot is reported as enabled: running mokutil --sb-state ...
- 11
0 votes
0 answers
188 views
How to secure boot raspberry pi4 with u-boot yocto image
The goal is to sign the mender yocto image and run it on secure boot enabled raspberry pi. I have raspberrypi-4 and the yocto image from mender (open source OTA platform). To give a quick try here is ...
- 1
0 votes
1 answer
85 views
Can DPDK Work With UEFI SecureBoot Enabled - Kernel Lockdown Mode?
Apologies in advance if I have incorrect assumptions in the post. I'm still getting the hang of DPDK. Basically, I am trying to utilize DPDK on a Generation 2 Hyper-V VM that has Secure Boot enabled. ...
- 1
0 votes
1 answer
133 views
Debian FAI live system can't boot with secure boot enabled
I made a custom live system using the Debian FAI service. I can't boot it with secure boot as my laptop is not recognizing the signature somehow. But I can still boot my currently installed Debian ...
- 831
2 votes
1 answer
244 views
Shim boot loader: System is compromised when using certificate, but not with hash
I am trying to boot a Linux kernel with efi stub enabled using Red Hat's Shim https://github.com/rhboot/shim. I can boot the system if I enroll the hash of my efi stub (selecting GRUBX64.EFI), but ...
- 131
1 vote
1 answer
2k views
About Secure Boot, MOK and NVRAM
Good evening, after searching on google I didn't find the answer to my question. When installing a distribution such as Ubuntu with secure boot activated, the installer creates a MOK key in the NVRAM ...
user611925
0 votes
0 answers
111 views
Mass install linux by dd to drive directly?
I need to install an custom OS to many similar/identical laptops. Would it work to live boot a laptop and dd the disk from a template laptop to the new one? Is it possible to trigger secure boot key ...
- 61
0 votes
3 answers
1k views
How and when is `/sys/kernel/security/tpm0/binary_bios_measurements` exposed?
Currently, I try to understand how a measured boot is working and what components log what in which pcr of a tpm2. I have a test-setup with uefi-secure boot enabled and a tpm2 attached in a kvm ...
- 101