http://bugzilla.opensuse.org/show_bug.cgi?id=1194184 http://bugzilla.opensuse.org/show_bug.cgi?id=1194184#c2 Ulrich Windl changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(Ulrich.Windl@rz.u | |ni-regensburg.de) | --- Comment #2 from Ulrich Windl --- Part of the problem migh be that an Internet search for "Leap 15.3 release notes" shows all kind of hits, but not the Release Notes I was looking for. So I gave up using Yast->Support to display the Release Notes... Unfortunately you cannot search there, so I copied all into a Writer document. Even there I had no match for "signkey". My local version of release notes is release-notes-openSUSE-15.3.20210129-lp153.1.91.noarch (Install Date: Do 30 Dez 2021 00:21:47 CET) Well, I have nothing against concrete instructions! To make things harder for the user, the link https://doc.opensuse.org/release-notes redirects to https://doc.opensuse.org/, leaving the user at a selection of even more guides. In https://doc.opensuse.org/documentation/leap/reference/single-html/book-refer... I only found "24.6.1.2 Creating a self-signed certificate". In https://doc.opensuse.org/documentation/leap/security/single-html/book-securi... I found nothing. In https://doc.opensuse.org/release-notes/x86_64/openSUSE/Leap/15.3/index.html I only found: "4.1 Secure Boot: SUSE Linux Enterprise kernel and openSUSE signed Kernel Module Packages" No honestly: Do you really think it's the users fault not to find the information you are talking about? -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1194184 http://bugzilla.opensuse.org/show_bug.cgi?id=1194184#c4 --- Comment #4 from Ulrich Windl --- I wonder: Could it be related to bug 1194152? -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1194184 http://bugzilla.opensuse.org/show_bug.cgi?id=1194184#c6 --- Comment #6 from Ulrich Windl --- I tried to explain in comment 3 that I'm lacking instructions for what you are talking about. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1194184 http://bugzilla.opensuse.org/show_bug.cgi?id=1194184#c8 Ulrich Windl changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(Ulrich.Windl@rz.u | |ni-regensburg.de) | --- Comment #8 from Ulrich Windl --- (In reply to Takashi Iwai from comment #7)

When you install openSUSE-signkey-cert package and reboot, GRUB will ask you whether to enroll the new cert key or not. (...)

# LANG= zypper install openSUSE-signkey-cert Loading repository data... Reading installed packages... 'openSUSE-signkey-cert' is already installed. No update candidate for 'openSUSE-signkey-cert-20210302-lp153.1.1.x86_64'. The highest available version is already installed. Resolving package dependencies... Nothing to do. So obviously this is not the solution. The original upgrade had output this: (1211/5706) Installing: openSUSE-signkey-cert-20210302-lp153.1.1.x86_64 .....[done] Additional rpm output: EFI variables are not supported on this system Failed to import /etc/uefi/certs/BDD31A9E-kmp.crt (From comment #3)

AFAIK I'm not using Secure Boot, so does that apply?

I'm booting from MBR with no EFI partition involved. -- You are receiving this mail because: You are on the CC list for the bug.

http://bugzilla.opensuse.org/show_bug.cgi?id=1194184 http://bugzilla.opensuse.org/show_bug.cgi?id=1194184#c10 --- Comment #10 from Ulrich Windl --- (In reply to Takashi Iwai from comment #9)

But you can retry and check again: uninstall openSUSE-signkey-cert package once. Then install it again, check whether the error persists. Then reboot and check whether you can enroll it.

# rpm -ve openSUSE-signkey-cert Preparing packages... openSUSE-signkey-cert-20210302-lp153.1.1.x86_64 EFI variables are not supported on this system Failed to delete /etc/uefi/certs/BDD31A9E-kmp.crt.del # zypper install openSUSE-signkey-cert [...] �berpr�fung auf Dateikonflikte l�uft: .....[fertig] (1/1) Installieren: openSUSE-signkey-cert-20210302-lp153.1.1.x86_64 .....[fertig] Zus�tzliche rpm-Ausgabe: EFI variables are not supported on this system Failed to import /etc/uefi/certs/BDD31A9E-kmp.crt # ll /etc/uefi/certs/ insgesamt 12 -rw-r--r-- 1 root root 1288 24. Nov 07:14 4AAA0B54.crt -rw-r--r-- 1 root root 1257 16. Jul 10:59 BCA4E38E-shim.crt -rw-r--r-- 1 root root 1177 3. Mai 2021 BDD31A9E-kmp.crt -- You are receiving this mail because: You are on the CC list for the bug.