Arch Linux

ahmedde99

Member

Registered: 2022-01-07

Posts: 5

My PC keeps enabling secure boot, making Arch unavailable for boot

Dual boot Arch setup here with Windows 11. GRUB is the 1st boot priority.
This doesn't happen with every boot but when I restart or shut down from Windows, I occasionaly get this message from my BIOS:
https://i.imgur.com/LI3LSgD.jpg
"Secure Boot Violation - Invalid signature detected. Check Secure Book Policy in Setup".

When I login to BIOS I indeed find secure boot is automatically enabled back.
I can't trace which party automatically keeps enabling secure boot and hence making me unable to reach GRUB. Any idea if this is a hardware malfunction in my motherboard or my windows is being a jerk?

-

PC Specs:
Processor: Intel(R) Core(TM) i7-10700 CPU @ 2.90GHz (bundled with Intel's stock cooler).
GPU: Palit RTX 3060 Dual OC.
RAM: Patriot 8.0 x 2 GB 3200 MHz viper steel SDRAM DDR4.
MB: H510M-S2H REV 3
SSD: XPG GAMMIX 256GB S11 Pro M.2.
HDD: WD Blue 1TB SATA 6 Gb/s 7200 RPM 64MB Cache 3.5 Inch Desktop Hard Drive
PSU: DEEPCOOL DA600 80 PLUS Bronze.
OS: Dual Boot Arch Linux + Windows 11 Latest Build.

Mod Edit - Replaced oversized image with link.
CoC - Pasting pictures and code

Last edited by Slithery (2022-04-11 13:00:57)

ewaller

Administrator

From: Pasadena, CA

Registered: 2009-07-13

Posts: 20,612

Re: My PC keeps enabling secure boot, making Arch unavailable for boot

I've not heard of Windows doing that, but I've seen a stupid Windows tricks I'd not expected.  This only happens when you boot to Windows?  But it does not happen every time?

Things that come to mind: 

Is this system, when it is booted to Windows part of a Domain?  Who controls the policy of that domain?  Are they pushing policy downstream? 

Was Windows installed by an OEM that includes Bloatware to 'help' manage your system and phones home for software updates? (HP is notorious for this on their low end systems)

Have you 'Updated' Windows of late?  (Did it change from 10 --> 11 ?)

Edit:  Any chance your system has a replaceable Lithium cell that maintains SRAM for your BIOS?  Have you ever replaced it?

Last edited by ewaller (2022-04-11 14:32:36)

---

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way