Arch Linux

xii69

Member

Registered: 2024-08-20

Posts: 20

Help with Dual Boot Using Secure Boot

I've been trying to set up dual boot with Windows 11 and Arch Linux using Secure Boot, but no matter how much I read—wikis, forums, guides—I can't get it to work. I've attempted countless solutions, and either they don't work or are overly complex and confusing.

Here’s the problem:

    I want only one bootloader (preferably GRUB) working with Secure Boot, so I can boot into Windows 11 or Arch Linux easily.
    Every time I try, I encounter errors:
        A black screen that prevents even entering BIOS (forcing me to reset CMOS).
        An error from my MSI B450M PRO-VDH MAX motherboard that says something like "... is invalid."
        The error: prohibited by Secure Boot policy from grub rescue.

I just want to remove all unnecessary bootloaders (except Windows boot loader, of course), set up GRUB or the appropriate bootloader for Secure Boot, and have it actually work.

Can someone please walk me through the process of doing this, clearly and simply? I need a way to just make this work without running into these errors.

Thanks in advance!

-thc

Member

Registered: 2017-03-15

Posts: 1,144

Re: Help with Dual Boot Using Secure Boot

I'm running this exact setup for years now.

Are you aware that - in contrast to Windows 11 - no Arch boot components are signed with valid "Secure Boot" signatures?

You either have to create your own "Secure Boot" keys, add the Microsoft keys and sign GRUB and the kernel image with your own keys or use one of the "Shim" methods to make the unsigned "grubx64.efi" bootable.

xii69

Member

Registered: 2024-08-20

Posts: 20

Re: Help with Dual Boot Using Secure Boot

No I didn't know about that, thanks for explaining what is the cause of that error and what should I do