Secure boot appears enabled in kernel log but not with mokutil

From	Aitor Fraile Azcue <aitorfraile@mykolab.com>
Newsgroups	linux.debian.user
Subject	Secure boot appears enabled in kernel log but not with mokutil
Date	2019-07-22 14:20 +0200
Message-ID	<ymFsl-7tj-5@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

Hi,

I have a Intel NUC DE3815TYBE system and I have updated it without
problems from Stretch to Buster (thanks to the developers!).

To activate Secure Boot[1], I have followed these steps[2]:

 * Confirm that shim-signed, grub-efi-amd64-signed and
   linux-image-4.19.0-5-amd64 packages are intalled
 * Reboot and enable Secure Boot (Standar mode) in BIOS
 * Reboot and check if Secure Boot is enabled

In the kernel log appears as enabled:

 [...]
 kernel: secureboot: Secure boot enabled
 kernel: Kernel is locked down from EFI secure boot; see
 https://wiki.debian.org/SecureBoot
 [...]

But mokutil says there's no support for Secure Boot:

 # mokutil --sb-state
 This system doesn't support Secure Boot

Also with bootctl:

 # bootctl status | grep -i 'secure boot'
 Secure Boot: disabled

I would like to know if I have enabled Secure Boot correctly or if I
have made a mistake. 

Thank you in advance.


[1]:
https://www.debian.org/releases/buster/amd64/release-notes/ch-whats-new.en.html#secure-boot
[2]:
https://wiki.debian.org/SecureBoot/Testing#Test_procedure_on_an_existing_installation

-- 
Aitor Fraile Azcue
OpenPGP fpr: 0293 006F E971 3A90 57D0  2DA7 88E9 394E 763C C3E6

Back to linux.debian.user | Previous | Next | Find similar | Unroll thread

Thread

Secure boot appears enabled in kernel log but not with mokutil Aitor Fraile Azcue <aitorfraile@mykolab.com> - 2019-07-22 14:20 +0200

csiph-web