Carlos E. R. schrieb:
On 2014-09-01 18:38, Neil Rickert wrote:
On Mon, 01 Sep 2014 09:52:02 +0200 Ludwig Nussel <> wrote:
If we don't want to wait for MS, a machine with secure boot enabled may not boot Factory. One has to either disable secure boot or import the openSUSE CA into the UEFI firmware. So we can take a conscious decision here and define a policy.
I would consider importing the opensuse CA into the firmware, if I knew how. I cannot find a place to do that in the BIOS settings on either of my UEFI boxes.
I found some references:
https://en.opensuse.org/openSUSE:UEFI
which mentions that is is done with something called "mokutil".
mokutil is useful if you want to have secure boot with only the MS root CA enabled and want to boot a custom custom kernel. It's of no help in the case where the firmware doesn't even load shim. cu Ludwig -- (o_ Ludwig Nussel //\ V_/_ http://www.suse.de/ SUSE LINUX Products GmbH, GF: Jeff Hawn, Jennifer Guild, Felix Imendörffer, HRB 16746 (AG Nürnberg) -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org