#[SOLVED] I want secure boot!!
9 messages · Page 1 of 1 (latest)
.aw sbctl
You need to generate and register keys, and then the signing should happen automatically with pacman whenever there is a kernel upgrade
The problem was that I setup tpm to decrypt automatically on boot but when I put the secure boot in setup mode tpm wasn't giving keys to decrypt so I had to boot with secure boot disabled and then enroll a passphrase because I deleted/wiped the password slot (and yes I'm blaming wiki for that) then put setup mode on, reboot then enter the passphrase because tpm didn't worked in setup mode and then enroll secure boot keys and sign uki now I got secure boot figured out
The wipe slot command
They should suggest changing the priority order instead of wiping it entirely