On Thu, Sep 28, 2023 at 10:12 AM cagsm
On Thu, Sep 28, 2023 at 8:52 AM Andrei Borzenkov
wrote: Most likely you simply did not pay attention. The MokManager screen is shown for a short time (I think 10 - 15 seconds) and it is easy to miss it.
can i un-enroll this opensuse secureboot key (remove) and uninstall virtualbox package and maybe even this openSUSE-signkey-cert package?
Yes, of course. mokutil --delete /etc/uefi/certs/1F673297-kmp.crt and reboot.
so the installation of virtualbox package should have MOK-enrolled the key from that signkey-cert package, right?
No. As I already said, there is no dependency between the virtualbox package and openSUSE-signkey-cert. The openSUSE-signkey-cert package is simply assumed to be always present.
but when removing the virtualbox packages, the opensuse secureboot key from MOK and starting all over should be the test of these procedures, right?
Yes.