1 line
1.8 KiB
Plaintext
1 line
1.8 KiB
Plaintext
<!-- SC_OFF --><div class="md"><p>I had decided to attempt to sign the bootloader and kernel with shim as it seemed the simplest to do.<br/> I followed the steps as outlined in the Arch Wiki, however since the bootloader was already named grubx64.efi, I had done the following instead.<br/> <code># cp /usr/share/shim-signed/shimx64.efi esp/EFI/GRUB/</code><br/> <code># cp /usr/share/shim-signed/mmx64.efi esp/EFI/GRUB/</code> </p> <p><code># efibootmgr --verbose --disk /dev/sdX --part Y --create --label "Shim" --loader /EFI/GRUB/shimx64.EFI</code> </p> <p>Once these were done, I enabled secure boot and into MokManager to sign both grubx64.efi and vmlinuz-linux with hash. But once complete MokManager would boot back up with the following error message.</p> <p><code>0x1A Security Violation</code></p> <p>Hopefully it would be possible to get secure boot up and running as Valorant does require it to be enabled on Win11 and I would like to not have to toggle it on and off when my group wants to play.</p> <p>​</p> <p>System Information: </p> <p>Windows 11 and Arch Linux dual boot. Attempted using Ubuntu before Arch but didn't like it and removed it, but there is still a lingering ubuntu boot entry that I'm unsure how to remove. Not sure if the ubuntu entry is messing with things as well. </p> <p>Linux usage information: </p> <p>Used Mint for a year before transitioning back to Windows. Am now pretty fresh on an Arch dual boot setup.</p> </div><!-- SC_ON -->   submitted by   <a href="https://www.reddit.com/user/Mihaynd"> /u/Mihaynd </a> <br/> <span><a href="https://www.reddit.com/r/archlinux/comments/qz1oz2/unable_to_sign_bootloader_and_kernel_with_shim/">[link]</a></span>   <span><a href="https://www.reddit.com/r/archlinux/comments/qz1oz2/unable_to_sign_bootloader_and_kernel_with_shim/">[comments]</a></span> |