You are not logged in.
Hi there,
I am attempting to set up secure boot on a new Arch installation. I have chosen systemd-boot with PreLoader for this. However, when attempting to boot into HashTool in order to enrol the hashes of the bootloader/kernel, I am met with nothing but a black screen. I have checked my systemd-boot timeout and preloader boot order to be correct. I have even created a new boot entry for HashTool.efi in order to try and launch it directly, but the same black screen still occurs. Is there anything else I could try?
Offline
I never tried to boot directly into HashTool because it's an interactive EFI executable and IMHO meant to be used via EFI shell.
Either your UEFI firmware has a built-in EFI shell and you can activate it or you need to install the package "edk2-shell", copy the correct EFI binary to the EFI partition and add a boot option for it.
Once inside the shell you can execute HashTool.
Offline
I never tried to boot directly into HashTool because it's an interactive EFI executable and IMHO meant to be used via EFI shell.
Either your UEFI firmware has a built-in EFI shell and you can activate it or you need to install the package "edk2-shell", copy the correct EFI binary to the EFI partition and add a boot option for it.
Once inside the shell you can execute HashTool.
Attempting to load this way results in the EFI shell freezing.
Offline
I've just checked it with the unsigned "HashTool.efi" from the "efitools" package (secure boot disabled) in the internal EFI shell and with a signed "HashTool.efi" (secure boot enabled) in the "edk2" EFI shell. Works both times.
Last edited by -thc (2023-10-12 16:57:10)
Offline