Secure boot with GRUB in dual boot environment is not working with sbctl | Arch Linux Community | Page 1

unkempt kettle Mar 1, 2024, 4:52 AM

#

I have MSI Pro Z790 A motherboard. I have installed dual boot WINDOWS 11 with Arch Linux and my secure boot is disabled but in user mode. I want to go to setup mode so that I can secure boot my GRUB installation on arch linux. when I clear all the keys in BIOS it shows setup mode but when I save and restart and boot into arch linux the setup mode is not available and I can see preinstalled keys which I just cleared. How do I keep setup mode without auto populating keys on restart in BIOS? I don't know if this some kind of bug in the MSI Bios or not.

icy hornet Mar 1, 2024, 4:54 AM

#

@unkempt kettle why use secure boot?

#

riot?

unkempt kettle Mar 1, 2024, 5:27 AM

#

Yeah

icy hornet Mar 1, 2024, 5:37 AM

#

@unkempt kettle install sbctl, then follow the upstream instructions https://github.com/Foxboron/sbctl?tab=readme-ov-file#key-creation-and-enrollment to enable it, then re enable it in your bios.

calm coyote Mar 1, 2024, 5:41 AM

#

so that is why there is a lot of people asking about secure boot

#Secure boot with GRUB in dual boot environment is not working with sbctl