On 25.11.2021 18:21, Carlos E. R. wrote:
I can't boot freshly installed 15.3 system (with current updates as of today).
I get (hand copied):
error: bad shim signature. error: you need to load the kernel first. Press any key to continue.
Details:
It is a new external hard disk, via USB3 (tried also USB2) on a laptop that has internally Leap 15.2 and Windows, both booting normally. On this external hard disk I installed 15.3 (UEFI mode).
The UEFI boot menu does not display this disk at all.
How do you boot it then? ...
So, instead I boot 15.2 (with current updates as of yesterday), start yast boot manager, and tell it to probe the disk for other systems. It does find 15.3, and the error I posted above is precissely what happens when using that probed entry.
Do you intentionally start backwards so that nobody can understand where error message comes from? shim from 15.2 embeds openSUSE certificate and kernel from 15.3 is signed by SUSE key. You need to enroll SUSE key if you are using openSUSE shim. You should have seen MokManager request after installing 15.3.