Arch Linux

TheNullPlayer

Member

From: Canada

Registered: 2020-06-05

Posts: 4

Website

Trying to restore default PK, KEK, db, and dbx.

Trying to restore default PK, KEK, db, and dbx from esl backup referenced in the secure boot arch wiki page.

I used the command

efi-updatevar -e -f dbx.esl dbx

which worked but then the next command

efi-updatevar -e -f db.esl db

failed with the error

Failed to update db: Operation not permitted

It seems the uefi bios went into user mode with out a PK.

Any ideas on how to get all the esl files in to the right vars would be appreciated.

Oh and there is currently an admin password on the uefi bios.

---

TheNullPlayer.com

walkingrobot

Member

Registered: 2015-03-26

Posts: 15

Re: Trying to restore default PK, KEK, db, and dbx.

Have you looked for a restore default or factory keys in the EFI? Some have it and some don't. Look for it in secure boot settings.