You are not logged in.

#1 2023-10-12 07:01:47

punio
Member
Registered: 2019-08-23
Posts: 26

Attempting to load HashTool (signed) results in black screen

Hi there,
I am attempting to set up secure boot on a new Arch installation. I have chosen systemd-boot with PreLoader for this. However, when attempting to boot into HashTool in order to enrol the hashes of the bootloader/kernel, I am met with nothing but a black screen. I have checked my systemd-boot timeout and preloader boot order to be correct. I have even created a new boot entry for HashTool.efi in order to try and launch it directly, but the same black screen still occurs. Is there anything else I could try?

Offline

#2 2023-10-12 07:32:29

-thc
Member
Registered: 2017-03-15
Posts: 739

Re: Attempting to load HashTool (signed) results in black screen

I never tried to boot directly into HashTool because it's an interactive EFI executable and IMHO meant to be used via EFI shell.

Either your UEFI firmware has a built-in EFI shell and you can activate it or you need to install the package "edk2-shell", copy the correct EFI binary to the EFI partition and add a boot option for it.

Once inside the shell you can execute HashTool.

Offline

#3 2023-10-12 16:19:16

punio
Member
Registered: 2019-08-23
Posts: 26

Re: Attempting to load HashTool (signed) results in black screen

-thc wrote:

I never tried to boot directly into HashTool because it's an interactive EFI executable and IMHO meant to be used via EFI shell.

Either your UEFI firmware has a built-in EFI shell and you can activate it or you need to install the package "edk2-shell", copy the correct EFI binary to the EFI partition and add a boot option for it.

Once inside the shell you can execute HashTool.

Attempting to load this way results in the EFI shell freezing.

Offline

#4 2023-10-12 16:56:45

-thc
Member
Registered: 2017-03-15
Posts: 739

Re: Attempting to load HashTool (signed) results in black screen

I've just checked it with the unsigned "HashTool.efi" from the "efitools" package (secure boot disabled) in the internal EFI shell and with a signed "HashTool.efi" (secure boot enabled) in the "edk2" EFI shell. Works both times.

Last edited by -thc (2023-10-12 16:57:10)

Offline

Board footer

Powered by FluxBB