Arch Linux

arizonajoe

Member

Registered: 2022-02-22

Posts: 18

[SOLVED]Linux Firmware Vendor Service (LFVS) UEFI.dbx file update

I've been using Arch/KDE for many years and just installed the Discover application, which I have avoided over the years.  I prefer to update my system at the command line anyway.  I noticed in Discover's settings an entry for LFVS  "Firmware Updates" that was checked automatically as part of the app's installation.  It provided updates available for the system that neither "sudo pacman -Syu" nor AUR updates provided, but one that generated a message:

"UEFI dbx
77 > 220""

"Error: The input is not of cabinet format"

On further inspection, this appears to be a "recommended" update to the UEFI, wherein this message appears:

Version 220

"Insecure versions of software from Trend Micro, vmware, CPSD, Eurosoft, and New Hortizon Datasys Inc. were added to the list of forbidden signatures due to discovered security problems  This updates the dbx to the latest release from Microsoft."

Is this an important signature database file revision for Linux users who do not dual boot?  (BTW, I do not use Windows)
Is it related to the vagaries of Microsoft's Secure Boot requirement for their Window's software?
Or should I redouble my efforts to try to perform this update?  I haven't found a HOWTO anywhere online and not within the Arch Wiki either. When it comes to updating low-level UEFI code, I am indeed a "newbie."  I'd like not to trash or brick my system with an improperly done update that may also be unnecessary.  Incidentally, I just upgraded my motherboard to an Intel Raptor Lake chipset-based board (ASUS ROG Strix) and did a clean Arch install for this machine.  Fastboot is naturally OFF.  And I toggled SECURE BOOT in the BIOS which had no effect on the appearance of the UEFI dbx message in Discover.

Any criticisms or direction is welcome. 

Thanks.

Last edited by arizonajoe (2023-04-18 00:38:59)

papavlos

Member

Registered: 2017-09-23

Posts: 67

Re: [SOLVED]Linux Firmware Vendor Service (LFVS) UEFI.dbx file update

I had the same issue.
Try manual updating with fwupdmgr - see here. Most probably you have it already installed in your system.

arizonajoe

Member

Registered: 2022-02-22

Posts: 18

Re: [SOLVED]Linux Firmware Vendor Service (LFVS) UEFI.dbx file update

Thank you for the reference.
Yes, I do have it on my system and didn't know it.
Much appreciated.

arizonajoe

Member

Registered: 2022-02-22

Posts: 18

Re: [SOLVED]Linux Firmware Vendor Service (LFVS) UEFI.dbx file update

NOTE: The UEFI dbx file appeared today in the Discover app even with the lvfs - Linux Vendor Firmware Service "unchecked" in settings . I crossed my fingers and ran the install. The reboot went without error.  I am hoping that the UEFI code was updated and will not require intervention.

Last edited by arizonajoe (2023-04-24 23:45:16)