Arch Linux

mrgiggums

Member

Registered: 2016-01-09

Posts: 13

Secure boot issue

Hello, I am trying to install arch on my Lenovo T550 Thinkpad alongside an installation of Windows 10. However I have encountered an issue getting Secure boot to work. After power on I receive: Image failed to verify with *ACCESS DENIED*. Then the systemd-boot menu loads and I receive the access denied error again before arch loads. I have tried following the following resources with no avail:

https://wiki.archlinux.org/index.php/Sy … figuration
https://wiki.archlinux.org/index.php/Un … led_system
https://bbs.archlinux.org/viewtopic.php … 2#p1514912
http://www.rodsbooks.com/efi-bootloader … eboot.html

And here are some relevant information

# bootctl status

System:
     Firmware: UEFI 2.31 (Lenovo 0.4208)
  Secure Boot: enabled
   Setup Mode: user

Loader:
      Product: systemd-boot 228
    Partition: /dev/disk/by-partuuid/2fa22f8d-1630-4e05-9f65-01061cff97aa
         File: └─/EFI/BOOT/loader.efi

Boot Loader Binaries:
          ESP: /dev/disk/by-partuuid/2fa22f8d-1630-4e05-9f65-01061cff97aa
         File: └─/EFI/systemd/PreLoader.efi
         File: └─/EFI/systemd/systemd-bootx664.efi (systemd-boot 228)
         File: └─/EFI/systemd/HashTool.efi
         File: └─/EFI/systemd/loader.efi (systemd-boot 228)
         File: └─/EFI/BOOT/bootx64.efi (systemd-boot 228)

Boot Loader Entries in EFI Variables:
        Title: PreLoader
           ID: 0x015
       Status: active, boot-order
    Partition: /dev/disk/by-partuuid/2fa22f8d-1630-4e05-9f65-01061cff97aa
         File: └─/EFI/systemd/PreLoader.efi

        Title: Linux Boot Manager
           ID: 0x014
       Status: active, boot-order
    Partition: /dev/disk/by-partuuid/2fa22f8d-1630-4e05-9f65-01061cff97aa
         File: └─/EFI/systemd/systemd-bootx64.efi

        Title: Windows Boot Manager
           ID: 0x013
       Status: active, boot-order
    Partition: /dev/disk/by-partuuid/2fa22f8d-1630-4e05-9f65-01061cff97aa
         File: └─/EFI/Microsoft/Boot/bootmgfw.efi

# efibootmgr

BootCurrent: 0015
Timeout: 0 seconds
BootOrder: 0015,0014,0013,0007,0008,0009,000A,000B,000C,000D
...
Boot0013* Windows Boot Manager
Boot0014* Linux Boot Manager
Boot0015* PreLoader

Last edited by mrgiggums (2016-01-09 04:53:09)

navi_se

Member

Registered: 2015-07-06

Posts: 135

Re: Secure boot issue

I believe it might be of help to post the output of lsblk -f as well.

mrgiggums

Member

Registered: 2016-01-09

Posts: 13

Re: Secure boot issue

# lsblk -f

NAME   FSTYPE LABEL       UUID                                 MOUNTPOINT
sda                                                            
├─sda1 ntfs   WINRE_DRV   681AFC241AFBECC6                     
├─sda2 vfat   SYSTEM_DRV  3EFC-A21E                            /boot
├─sda3                                                         
├─sda4 ntfs   Windows8_OS 10BAFE70BAFE51A8                     
└─sda5 ext4               9f781d24-9e5f-460c-bdcf-1c9ff01ea7fa /
sdb                                                            
└─sdb1                                                         
sdc                                                            
└─sdc1 vfat   ARCH_201601 5E3A-5821                            

Head_on_a_Stick

Member

From: London

Registered: 2014-02-20

Posts: 7,732

Website

Re: Secure boot issue

https://bbs.archlinux.org/viewtopic.php?id=207201
https://bbs.archlinux.org/viewtopic.php?id=202714

I think you may have to blame this on a crappy UEFI implementation.

---

Are you infected with Wetiko?

mrgiggums

Member

Registered: 2016-01-09

Posts: 13

Re: Secure boot issue

Thanks for the help. I'm probably going to resort to disabling secure boot.