You are not logged in.

#1 2023-10-10 09:44:25

gwitz
Member
Registered: 2023-05-28
Posts: 2

Setting up Secure Boot with GRUB

I have a working multi-boot system with Arch Linux and Windows without Secure Boot support, which I now I would like and have attempted some steps, but it is still not working. I am using a recent Gigabyte Aorus motherboard.

Steps done:

sudo -i
sbctl status (made sure sbctl is not installed, Setup Mode is enabled, and Secure Boot is disabled)
sbctl create-keys
sbctl enroll-keys -m
sbctl verfiy
sbctl sign -s /boot/vmlinuz-linux
sbctl sign -s /boot/grub/x86_64-efi/core.efi
sbctl sign -s /boot/grub/x86_64-efi/grub.efi
sbctl sign -s /boot/EFI/grub/grubx64.efi
sbctl sign -s -o /usr/lib/systemd/boot/efi/systemd-bootx64.efi.signed /usr/lib/systemd/boot/efi/systemd-bootx64.efi
grub-install --target=x86_64-efi --efi-directory=/boot --bootloader-id=grub --modules="tpm" --disable-shim-lock

At first when I had restarted and turned on Secure Boot, my computer was booting extremely slowly, unable to boot into Arch Linux, making random beeping noises I had not heard before, and I was unable to save changes, like turning Secure Boot off, in my motherboard firmware settings. I have let my computer rest now is able to make firmware changes and boot into Arch Linux with Secure Boot disabled.
Pages referenced:
https://wiki.archlinux.org/title/GRUB#CA_Keys
https://wiki.archlinux.org/title/Unifie … _variables

Offline

Board footer

Powered by FluxBB