[Bug 1153847] New: Unable to boot with SecureBoot enabled in BIOS
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847 Bug ID: 1153847 Summary: Unable to boot with SecureBoot enabled in BIOS Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Bootloader Assignee: jsrain@suse.com Reporter: imax@posteo.org QA Contact: jsrain@suse.com Found By: --- Blocker: --- I'm unable to do a fresh tumbleweed install with SecureBoot enabled. After selecting usb device in boot menu i get a black screen not responding anymore. Pushing Esc after some time leads to an error message with system freeze: Failed to load image: Security Policy Violation When i disable SecureBoot i can boot fine.To exclude possible mistakes: - USB installer created with SUSE ImageWriter - Checksums are all fine - selected right entry in boot menu to boot usb-stick in UEFI mode Other distro's (Ubuntu, Debian, Fedora) officially supporting SecureBoot are working fine out of the box with SecureBoot enabled. With Leap i get the same behavior as described above. Is there something wrong with the signatures? regards -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c2
--- Comment #2 from Ivo Lux
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c3
Neil Rickert
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c6
--- Comment #6 from Ivo Lux
Unfortunately, there appears to be newer hardware that also doesn't support multi-signed shim. We see that in forum posts.
Check https://en.opensuse.org/openSUSE:UEFI and scroll down to the heading "Booting the Machine that supports only one signature with vendor provided Keys"
It suggests a workaround. And you can use that workaround as a way of testing whether that is the problem.
I tried the suggested workaround. But nothing changed. Same behavior as before. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c7
--- Comment #7 from Ivo Lux
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c9
--- Comment #9 from Ivo Lux
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c10
--- Comment #10 from Ivo Lux
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c11
--- Comment #11 from Ivo Lux
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c13
--- Comment #13 from Ivo Lux
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c15
--- Comment #15 from Ivo Lux
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c16
--- Comment #16 from Ivo Lux
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c17
--- Comment #17 from Ivo Lux
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c20
--- Comment #20 from Ivo Lux
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c21
--- Comment #21 from Neil Rickert
is it a poor UEFI implementation or has it something to do with my not so common screen resolution (1440x900)?
I'm using 1440x900 resolution. I am not having any problems. Maybe your UEFI firmware cannot handle that resolution, but the problem is not the resolution alone. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847
http://bugzilla.opensuse.org/show_bug.cgi?id=1153847#c25
Arnav Singh
participants (2)
-
bugzilla_noreply@novell.com
-
bugzilla_noreply@suse.com