You are not logged in.
Specifically I have the ASUS prime b550-plus motherboard.
I followed the instructions here: https://wiki.archlinux.org/title/Unifie … ecure_Boot to setup secure boot.
I have installed sbctl, created and signed they required keys, I am stuck at turning secure boot on in my UEFI firmware.
I found this link which I followed to see how to enable secure boot: https://www.asus.com/support/FAQ/1049829
And according to this table at the bottom of the above link:
Secure Boot State in BIOS OS Type Secure Boot Mode Key Management Secure Boot State in operating system
User Other OS Customer Default Off
User Other OS Standard N/A Off
Setup Other OS Customer Clear Secure Boot Keys Off
Setup Windows UEFI mode Customer Clear Secure Boot Keys Off
User Windows UEFI mode Customer Default On
User Windows UEFI mode Standard N/A On
If I am understanding this correctly does this mean I cannot enable secure boot on my motherboard with my own keys? Or any other OS besides Windows?
Edit: Solved my own issue. Simply switching the secure boot setting to Windows UEFI mode solves the issue (even though I’m not using windows). I have left Microsoft vendor keys in place as I didn’t want to accidentally brick anything.
Last edited by skreett (2023-09-10 03:06:49)
Offline
Hi! I know that the question is already a long time closed as solved. Nevertheless, maybe you could clarify what did you do -- did you use "OS Type -- Windows UEFI mode I believe", but what settings did you use for the Secure Boot Mode and Key Management. Did you "Clear Secure Boot Keys" or "Default"? So the created in sbctl keys are not set in the UEFI?
Offline
Yes I used OS Type -- Windows UEFI. Check the first link in my post I followed the instructions there exactly. Starting at backing up your keys. In the next step it does mention to clear the keys to enter setup mode. So I did do that. And yes once you clear the keys you boot back up and follow the steps to enroll your keys which all happens within your OS and not in the UEFI. Hope this helps and try to stick to following the directions in the wiki to avoid any issues.
Offline