On 03/05/2013 09:43 PM, Andrey Borzenkov wrote:

В Tue, 05 Mar 2013 16:52:06 -0500 Robert Schweikert пишет:

...

Hi,

Installing RC2 on Lenovo Carbon X1 results in:

Image failed to verify with *ACCESS DENIED*

when Secure Boot is enabled.

Booting from the stick to which I dumped the RC2 ISO image is not a problem. The issue occurs after the installation.

I setup a custom partitioning scheme

/dev/sda1 vfat mounted to /boot/efi /dev/sda2 swap /dev/sda3 xfs mounted as /

I think this should work for secure boot.

Turning secure boot off allows the installed image to boot and the installation process to continue, i.e. enter the configuration part of the installation process.

And bug report number?

807790

Please specify exactly which media you used (full DVD, Net, Live, 32 vs. 64 bit, build number etc).

openSUSE-12.3-DVD-Build0094-x86_64.iso Thanks, Robert -- Robert Schweikert MAY THE SOURCE BE WITH YOU SUSE-IBM Software Integration Center LINUX Tech Lead rjschwei@suse.com rschweik@ca.ibm.com 781-464-8147 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On 03/05/2013 09:50 PM, Gary Ching-Pang Lin wrote:

On Tue, Mar 05, 2013 at 04:52:06PM -0500, Robert Schweikert wrote:

...

Hi,

Installing RC2 on Lenovo Carbon X1 results in:

Image failed to verify with *ACCESS DENIED*

when Secure Boot is enabled.

Booting from the stick to which I dumped the RC2 ISO image is not a problem. The issue occurs after the installation.

I setup a custom partitioning scheme

/dev/sda1 vfat mounted to /boot/efi /dev/sda2 swap /dev/sda3 xfs mounted as /

I think this should work for secure boot.

Turning secure boot off allows the installed image to boot and the installation process to continue, i.e. enter the configuration part of the installation process.

Could you provide the result of "efibootmgr -v"?

BootCurrent: 0019 Timeout: 0 seconds BootOrder: 0019,0018,0000,0001,0002,0003,0007,0008,0009,000A,000B,000C,000D,000E,000F,0011,0010,0012 Boot0000 Setup Boot0001 Boot Menu Boot0002 Diagnostic Splash Screen Boot0003 Lenovo Diagnostics Boot0004 Startup Interrupt Menu Boot0005 ME Configuration Menu Boot0006 Rescue and Recovery Boot0007* USB CD 030a2400d23878bc820f604d8316c068ee79d25b86701296aa5a7848b66cd49dd3ba6a55 Boot0008* USB FDD 030a2400d23878bc820f604d8316c068ee79d25b6ff015a28830b543a8b8641009461e49 Boot0009* ATAPI CD0 030a2500d23878bc820f604d8316c068ee79d25baea2090adfde214e8b3a5e471856a35401 Boot000A* ATA HDD0 030a2500d23878bc820f604d8316c068ee79d25b91af625956449f41a7b91f4f892ab0f600 Boot000B* ATA HDD1 030a2500d23878bc820f604d8316c068ee79d25b91af625956449f41a7b91f4f892ab0f601 Boot000C* ATA HDD2 030a2500d23878bc820f604d8316c068ee79d25b91af625956449f41a7b91f4f892ab0f602 Boot000D* USB HDD 030a2400d23878bc820f604d8316c068ee79d25b33e821aaaf33bc4789bd419f88c50803 Boot000E* PCI LAN 030a2400d23878bc820f604d8316c068ee79d25b78a84aaf2b2afc4ea79cf5cc8f3d3803 Boot000F* ATAPI CD1 030a2500d23878bc820f604d8316c068ee79d25baea2090adfde214e8b3a5e471856a35404 Boot0010 Other CD 030a2500d23878bc820f604d8316c068ee79d25baea2090adfde214e8b3a5e471856a35406 Boot0011* ATA HDD3 030a2500d23878bc820f604d8316c068ee79d25b91af625956449f41a7b91f4f892ab0f604 Boot0012 Other HDD 030a2500d23878bc820f604d8316c068ee79d25b91af625956449f41a7b91f4f892ab0f606 Boot0013* IDER BOOT CDROM ACPI(a0341d0,0)PCI(16,2)ATAPI(0,1,0) Boot0014* IDER BOOT Floppy ACPI(a0341d0,0)PCI(16,2)ATAPI(0,0,0) Boot0015* ATA HDD 030a2400d23878bc820f604d8316c068ee79d25b91af625956449f41a7b91f4f892ab0f6 Boot0016* ATAPI CD: 030a2400d23878bc820f604d8316c068ee79d25baea2090adfde214e8b3a5e471856a354 Boot0017* PCI LAN 030a2400d23878bc820f604d8316c068ee79d25b78a84aaf2b2afc4ea79cf5cc8f3d3803 Boot0018* Windows Boot Manager HD(2,1f4800,82000,5f069c84-8668-4113-b1e5-478655ed6ab4)File(\EFI\Microsoft\Boot\bootmgfw.efi)WINDOWS.........x...B.C.D.O.B.J.E.C.T.=.{.9.d.e.a.8.6.2.c.-.5.c.d.d.-.4.e.7.0.-.a.c.c.1.-.f.3.2.b.3.4.4.d.4.7.9.5.}.................... Boot0019* opensuse HD(1,10fd800,4e800,686b4089-75a1-445c-96ba-3cef7f840ac9)File(\EFI\opensuse\grubx64.efi) -- Robert Schweikert MAY THE SOURCE BE WITH YOU SUSE-IBM Software Integration Center LINUX Tech Lead rjschwei@suse.com rschweik@ca.ibm.com 781-464-8147 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org

On 03/05/2013 10:22 PM, Michael Chang wrote:

2013/3/6 Robert Schweikert :

...

Hi,

Installing RC2 on Lenovo Carbon X1 results in:

Image failed to verify with *ACCESS DENIED*

Could you please help to confirm

1. Did you enable secure boot support in yast2 bootloader during installation ?

Hmm I do not recall seeing any option to enable secure boot during the installation.

2. Did you boot with "opensuse-secureboot" entry in your UEFI boot manager to the installed system ?

No, as I have no idea what that means.

And please file a bug if your checks are correct but still fail.

807790 Thanks, Robert -- Robert Schweikert MAY THE SOURCE BE WITH YOU SUSE-IBM Software Integration Center LINUX Tech Lead rjschwei@suse.com rschweik@ca.ibm.com 781-464-8147 -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org