[SOLVED] UEFI systemd-boot did not authenticate, boot order

kox · 2015-09-12 11:18:21

I have just installed Arch linux on UEFI laptop, I've choosen systemd-boot for default bootloader. I installed it on the same partition as Windows. After restarting I got back to Windows 8.1 . There is linux entry visible in boot menu, but I don't know how could I make it load by default.

And there's second, bigger problem. When I try to load 'linux boot manager' from boot menu, it says: "Selected image did not Authenticate". So I booted archiso again and copied its HashTool.efi to the boot partition, put it in /boot/EFI/HashTool.efi, ran it and enrolled hash for /boot/EFI/systemd/systemd-bootx64.efi And it's still the same. Something doesn't work right. Also I tried to disable secure boot as a last resort, but whenever I disable it, it re-enables after exiting bios.

Laptop is HP Pavilion G6-2260sw

If it matters I installed intel-ucode and put this to the loader as suggested here: https://wiki.archlinux.org/index.php/Mi … de_updates
initrd /intel-ucode.img

But I doubt it could have any effect.

Last edited by kox (2015-09-13 09:10:09)

Head_on_a_Stick · 2015-09-12 11:30:41

Oh dear, sounds like you have a buggy firmware implementation.

The hash tool won't work in the installed system.

If you can't permanently disable Secure Boot from your firmware (is there an update available?) you will have to try generating your own keys, sign your kernel image & BOOTX*.EFI and enrol the keys into your firmware.

Guides here:
http://www.rodsbooks.com/efi-bootloader … eboot.html
http://kroah.com/log/blog/2013/09/02/bo … ux-kernel/

Good luck!

EDIT: If this doesn't work (I can't get my laptop to do this) you could install Arch in non-EFI mode and toggle "CSM"/"Legacy" mode to select between the two.

Last edited by Head_on_a_Stick (2015-09-12 11:32:35)

kox · 2015-09-12 11:56:37

Thankfully I managed to disable it. There was an option 'Clear all secure boot keys' which apart from removing keys, completely disabled secure boot (it's disabled now and grayed out). And I managed to boot into the fresh install. But why does the hash tool only work for archiso? What's even the point of it, if it can only enroll the installation media.

But what can I do to load systemd-boot automatically on boot, not Windows 8 loader?

Head_on_a_Stick · 2015-09-12 12:00:13

kox wrote:

But why does the hash tool only work for archiso? What's even the point of it, if it can only enroll the installation media.

I have no idea, sorry.

kox wrote:

But what can I do to load systemd-boot automatically on boot, not Windows 8 loader?

Please post the output of:

# efibootmgr -v

kox · 2015-09-12 12:44:58

It says command not found. Efivar also doesn't work. Have I missed something during the installation?

Head_on_a_Stick · 2015-09-12 19:21:26

kox wrote:

It says command not found.

Yeah, Arch is funny like that...

# pacman -S efibootmgr efivar

If it still won't work, post the output of:

[ -d /sys/firmware/efi ] && echo UEFI || echo not UEFI

kox · 2015-09-12 20:16:18

Thanks. Here it is:

BootCurrent: 0002
Timeout: 0 seconds
BootOrder: 3000,3002,2001,2002,2003
Boot0000* Windows Boot Manager	HD(2,GPT,a95aedcb-24c0-4086-8327-cf9a8ee41921,0xc8800,0x82000)/File(\EFI\Microsoft\Boot\bootmgfw.efi)WINDOWS.........x...B.C.D.O.B.J.E.C.T.=.{.9.d.e.a.8.6.2.c.-.5.c.d.d.-.4.e.7.0.-.a.c.c.1.-.f.3.2.b.3.4.4.d.4.7.9.5.}...e................
Boot0002* Linux Boot Manager	HD(2,GPT,a95aedcb-24c0-4086-8327-cf9a8ee41921,0xc8800,0x82000)/File(\EFI\systemd\systemd-bootx64.efi)
Boot2001* USB Drive (UEFI)	RC
Boot2002* Internal CD/DVD ROM Drive (UEFI)	RC
Boot3000* Internal Hard Disk	RC
Boot3001* Internal Hard Disk	RC
Boot3002* Internal Hard Disk	RC
Boot3003* Internal Hard Disk	RC

Head_on_a_Stick · 2015-09-12 20:19:09

Try this:

# efibootmgr -o 0002,0000

Then reboot.

If it doesn't work, is the `efibootmgr` output the same?

kox · 2015-09-12 21:52:33

It doesn't work unfortunately and the order is the same. I also set a timeout, but it has no effect. Itboots straight to Windows. As a last resort I could replace Windows entry https://wiki.archlinux.org/index.php/Un … boot_order but I hope there is a less hacky way.

Edit: I was wrong. The output changes. However it still doesn't work and it gets back to default on reboot. So I have this 'Windows changes boot order' problem?

Last edited by kox (2015-09-12 22:04:09)

Head_on_a_Stick · 2015-09-12 23:24:20

kox wrote:

As a last resort I could replace Windows entry https://wiki.archlinux.org/index.php/Un … boot_order but I hope there is a less hacky way.

I'm not sure about "less hacky", but there is an alternative:
https://bbs.archlinux.org/viewtopic.php … 2#p1514912

Last edited by Head_on_a_Stick (2015-09-12 23:24:34)

kox · 2015-09-13 09:09:16

Thank you. Your method worked.

Arch Linux

#1 2015-09-12 11:18:21

[SOLVED] UEFI systemd-boot did not authenticate, boot order

#2 2015-09-12 11:30:41

Re: [SOLVED] UEFI systemd-boot did not authenticate, boot order

#3 2015-09-12 11:56:37

Re: [SOLVED] UEFI systemd-boot did not authenticate, boot order

#4 2015-09-12 12:00:13

Re: [SOLVED] UEFI systemd-boot did not authenticate, boot order

#5 2015-09-12 12:44:58

Re: [SOLVED] UEFI systemd-boot did not authenticate, boot order

#6 2015-09-12 19:21:26

Re: [SOLVED] UEFI systemd-boot did not authenticate, boot order

#7 2015-09-12 20:16:18

Re: [SOLVED] UEFI systemd-boot did not authenticate, boot order

#8 2015-09-12 20:19:09

Re: [SOLVED] UEFI systemd-boot did not authenticate, boot order

#9 2015-09-12 21:52:33

Re: [SOLVED] UEFI systemd-boot did not authenticate, boot order

#10 2015-09-12 23:24:20

Re: [SOLVED] UEFI systemd-boot did not authenticate, boot order

#11 2015-09-13 09:09:16

Re: [SOLVED] UEFI systemd-boot did not authenticate, boot order

Board footer