Secure Boot With Shim Help

[fathom crane]

Hello, so I’m trying to setup secure boot as I have a dual boot system, I have installed shim-signed and mokutil and copied the files to the respective destinations of grub in ESP, I have also made an efibootmgr entry, but I can’t seem to setup the secure boot properly, the way I’m setting up secure boot is not convenient so as well, as I have disabled secure boot validation, secure boot is only for windows and arch is without secure boot so you don’t need to sign grub to the kernel, you only need .sbat with grub which I have setup.

The stage I’m at right now is booting into shim and it giving me the blue coloured selector, I don’t know how to proceed with this I’m I don’t have to make hash’s for grub because I’m not using secure boot on that, this is basically to bypass secure boot for grub and linux so windows can be fine with secure boot.

Wiki @ 3.2.2: https://wiki.archlinux.org/title/Unified_Extensible_Firmware_Interface/Secure_Boot

Windows is in its own EFI directory and even more than that it’s in its own partition so it’s fs being chain loaded

[tribal latch]

if you need secure boot just boot to bios enable it and move on? when you don't need secure bot go to bios and disable it.

You can also boot to EFI windows from bios no need for grub. And leave grub for linux distros.. I have dual OS setup That's what I do. But I have no problem in grub windows shows up and works for my hardware.

[fathom crane]

Windows works as well on insecure boot but I would prefer being able to do everything on grub, I don’t want to go to firmware every time I need secure boot

[tribal latch]

I don't know how to set this up because I don't have a problem with this in my grub. So can't help you. Also I don't really reboot that often or need to switch OS that often most the time is on linux. So no need to hit that f12 or go to bios that often.

[fathom crane]

Ok