Windows/ubuntu/secure boot


M

man00

Well-known member
Member
Local time
5:06 AM
Posts
327
OS
windows 11
ubuntu will not boot with secure boot turned on, if I disable secure boot
boot into ubuntu and update the keys using (sudo apt install shim-signed)
does that change any keys in the bios or just within Ubuntu?
 

My Computer My Computer

At a glance

windows 11Intel i5-10600kf32gb corsair vengerance proAMD RX 6500XT
OS
windows 11
Computer type
PC/Desktop
Manufacturer/Model
Antec/Case
CPU
Intel i5-10600kf
Motherboard
GIGABYTE Z590 UD AC
Memory
32gb corsair vengerance pro
Graphics Card(s)
AMD RX 6500XT
Sound Card
onboard
Monitor(s) Displays
40" Hisense
Hard Drives
Samsung 850
Samsung 870
Seagate 2TB
PSU
EVGA GQ 750
man00 said:
ubuntu will not boot with secure boot turned on, if I disable secure boot
boot into ubuntu and update the keys using (sudo apt install shim-signed)
does that change any keys in the bios or just within Ubuntu?
Click to expand...
Probably better to ask here ... Ubuntu Community Hub
 

My Computers My Computers

System One System Two

  • At a glance

    Win11 25H2 26200.7623Intel XEON W-2245 8c/16t128GB DDR4-2933 ECCNvidia Quadro K4200
    OS
    Win11 25H2 26200.7623
    Computer type
    PC/Desktop
    Manufacturer/Model
    Lenovo P520
    CPU
    Intel XEON W-2245 8c/16t
    Memory
    128GB DDR4-2933 ECC
    Graphics Card(s)
    Nvidia Quadro K4200
    Sound Card
    Bultin
    Monitor(s) Displays
    LCD 24in
    Screen Resolution
    1920x1200
    Hard Drives
    1TB SSD system, 16TB data 3.5in HDD, 16TB backup 3.5in HDD
    PSU
    900W
    Cooling
    Air
    Internet Speed
    1Gb
    Browser
    Firefox & Chrome
    Antivirus
    MalwareBytes

  • At a glance

    Win10 22H2Intel Core i7-3520m16GBintegrated CPU graphics
    Operating System
    Win10 22H2
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo T530
    CPU
    Intel Core i7-3520m
    Memory
    16GB
    Graphics card(s)
    integrated CPU graphics
    Hard Drives
    1TB SSD
    Internet Speed
    1Gb
    Browser
    Fiefox & Chrome
    Antivirus
    Malwarebytes
UEFI Secure Boot certs are shared for the PC, regardless of which OS is used. If you have made any UEFI changes on either the Windows or Linux side, then you probably need to update the respective boot files for the other OS.

One or more DB signing certs may be valid at this time. Ubuntu should be booting off a signed boot loader which is currently listed as trusted in the UEFI. If that's not the case, them you're forced to temporarily disable Secure Boot until the problem is fixed.
 

My Computer My Computer

At a glance

Windows 7
OS
Windows 7
man00 said:
ubuntu will not boot with secure boot turned on, if I disable secure boot
boot into ubuntu and update the keys using (sudo apt install shim-signed)
does that change any keys in the bios or just within Ubuntu?
Click to expand...

Ubuntu shim adds a virtual signed shim to EFI/Boot partition
which will then allow Ubuntu to boot when secure boot is abled
it only affects the Ubuntu install and has no affect on any Windows install.

Q.
when you made the Ubuntu bootable USB you should have been given the choice
to burn that Ubuntu ISO with the ability to use secure boot

i would consider using Rufus to burn the Ubuntu ISO to USB
as that will enable Ubuntu to use secure boot without the need for the Ubuntu shim.

best of luck Steve ..
 

My Computers My Computers

System One System Two

  • At a glance

    Debian 13 KDE .. Windows 11 HomeRyzen 7 5825u64GB DDR4 3200Ryzen 7 5825u
    OS
    Debian 13 KDE .. Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP 24" AiO
    CPU
    Ryzen 7 5825u
    Motherboard
    HP
    Memory
    64GB DDR4 3200
    Graphics Card(s)
    Ryzen 7 5825u
    Sound Card
    RealTek
    Monitor(s) Displays
    24" HP AiO
    Screen Resolution
    1920 x 1080 @60 Hz
    Hard Drives
    1TB WD Blue SN580 M2 SSD Partitioned.
    2x 1TB USB HDD External Backup/Storage.
    PSU
    90W external power brick
    Case
    24" All in One
    Cooling
    Default Air Cooling
    Keyboard
    HP WiFi UK extended
    Mouse
    HP WiFi 3 Button
    Internet Speed
    1GB full fibre
    Browser
    Edge & Firefox
    Antivirus
    AVG Internet Security/Windows Defender
    Other Info
    Mainly Open Source Software

  • At a glance

    Ubuntu 22.04.5 LTSi5 7200u16GB DDR4Intel
    Operating System
    Ubuntu 22.04.5 LTS
    Computer type
    Laptop
    Manufacturer/Model
    Dell 13" Latitude 2017
    CPU
    i5 7200u
    Motherboard
    Dell
    Memory
    16GB DDR4
    Graphics card(s)
    Intel
    Sound Card
    Intel
    Monitor(s) Displays
    13" Dell Laptop
    Hard Drives
    250GB Crucial 2.5" SSD
    Mouse
    Generic WiFi 3 button
    Internet Speed
    WiFi only
    Browser
    Firefox
    Antivirus
    ClamAV TK
    Other Info
    Mainly Open Source Software
XxXxX said:
Ubuntu shim adds a virtual signed shim to EFI/Boot partition
which will then allow Ubuntu to boot when secure boot is abled
it only affects the Ubuntu install and has no affect on any Windows install.

Q.
when you made the Ubuntu bootable USB you should have been given the choice
to burn that Ubuntu ISO with the ability to use secure boot

i would consider using Rufus to burn the Ubuntu ISO to USB
as that will enable Ubuntu to use secure boot without the need for the Ubuntu shim.

best of luck Steve ..
Click to expand...
Will try that
thanks
 

My Computer My Computer

At a glance

windows 11Intel i5-10600kf32gb corsair vengerance proAMD RX 6500XT
OS
windows 11
Computer type
PC/Desktop
Manufacturer/Model
Antec/Case
CPU
Intel i5-10600kf
Motherboard
GIGABYTE Z590 UD AC
Memory
32gb corsair vengerance pro
Graphics Card(s)
AMD RX 6500XT
Sound Card
onboard
Monitor(s) Displays
40" Hisense
Hard Drives
Samsung 850
Samsung 870
Seagate 2TB
PSU
EVGA GQ 750
XxXxX said:
Ubuntu shim adds a virtual signed shim to EFI/Boot partition
which will then allow Ubuntu to boot when secure boot is abled
it only affects the Ubuntu install and has no affect on any Windows install.

Q.
when you made the Ubuntu bootable USB you should have been given the choice
to burn that Ubuntu ISO with the ability to use secure boot

i would consider using Rufus to burn the Ubuntu ISO to USB
as that will enable Ubuntu to use secure boot without the need for the Ubuntu shim.

best of luck Steve ..
Click to expand...
I tried it but found no option in my rufus to do so, maybe I have old ver
 

My Computer My Computer

At a glance

windows 11Intel i5-10600kf32gb corsair vengerance proAMD RX 6500XT
OS
windows 11
Computer type
PC/Desktop
Manufacturer/Model
Antec/Case
CPU
Intel i5-10600kf
Motherboard
GIGABYTE Z590 UD AC
Memory
32gb corsair vengerance pro
Graphics Card(s)
AMD RX 6500XT
Sound Card
onboard
Monitor(s) Displays
40" Hisense
Hard Drives
Samsung 850
Samsung 870
Seagate 2TB
PSU
EVGA GQ 750
man00 said:
I tried it but found no option in my rufus to do so, maybe I have old ver
Click to expand...

when using Rufus to burn the Ubuntu ISO set Rufus partition scheme as GPT
and target system as BIOS or UEFI

Rufus will then do the rest.
best of luck Steve ..
 

My Computers My Computers

System One System Two

  • At a glance

    Debian 13 KDE .. Windows 11 HomeRyzen 7 5825u64GB DDR4 3200Ryzen 7 5825u
    OS
    Debian 13 KDE .. Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP 24" AiO
    CPU
    Ryzen 7 5825u
    Motherboard
    HP
    Memory
    64GB DDR4 3200
    Graphics Card(s)
    Ryzen 7 5825u
    Sound Card
    RealTek
    Monitor(s) Displays
    24" HP AiO
    Screen Resolution
    1920 x 1080 @60 Hz
    Hard Drives
    1TB WD Blue SN580 M2 SSD Partitioned.
    2x 1TB USB HDD External Backup/Storage.
    PSU
    90W external power brick
    Case
    24" All in One
    Cooling
    Default Air Cooling
    Keyboard
    HP WiFi UK extended
    Mouse
    HP WiFi 3 Button
    Internet Speed
    1GB full fibre
    Browser
    Edge & Firefox
    Antivirus
    AVG Internet Security/Windows Defender
    Other Info
    Mainly Open Source Software

  • At a glance

    Ubuntu 22.04.5 LTSi5 7200u16GB DDR4Intel
    Operating System
    Ubuntu 22.04.5 LTS
    Computer type
    Laptop
    Manufacturer/Model
    Dell 13" Latitude 2017
    CPU
    i5 7200u
    Motherboard
    Dell
    Memory
    16GB DDR4
    Graphics card(s)
    Intel
    Sound Card
    Intel
    Monitor(s) Displays
    13" Dell Laptop
    Hard Drives
    250GB Crucial 2.5" SSD
    Mouse
    Generic WiFi 3 button
    Internet Speed
    WiFi only
    Browser
    Firefox
    Antivirus
    ClamAV TK
    Other Info
    Mainly Open Source Software
The UEFI secure boot system is designed for only 1 OS. It doesn't support any more. If you try, you will end up with corrupt boot.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
Asus
ultrajv said:
The UEFI secure boot system is designed for only 1 OS. It doesn't support any more. If you try, you will end up with corrupt boot.
Click to expand...
I don't if this was meant for me or not, I followed XxXxX instructions and all my drives (3 boots fine)

​

 

My Computer My Computer

At a glance

windows 11Intel i5-10600kf32gb corsair vengerance proAMD RX 6500XT
OS
windows 11
Computer type
PC/Desktop
Manufacturer/Model
Antec/Case
CPU
Intel i5-10600kf
Motherboard
GIGABYTE Z590 UD AC
Memory
32gb corsair vengerance pro
Graphics Card(s)
AMD RX 6500XT
Sound Card
onboard
Monitor(s) Displays
40" Hisense
Hard Drives
Samsung 850
Samsung 870
Seagate 2TB
PSU
EVGA GQ 750
man00 said:
I don't if this was meant for me or not, I followed XxXxX instructions and all my drives (3 boots fine)

​

Click to expand...
Yes they will appear fine for a while then updates will cause corruption and boot failure. Most people use virtual machines for multi os for this reason
 
Last edited:

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
Asus
ultrajv said:
Yes they will appear fine for a while then updates will cause corruption and boot failure. Most people use virtual machines for multi os for this reason
Click to expand...
the EFI boot partition will only be corrupted if Windows in installed again on that drive.
as Windows takes over the entire EFI boot partition.

but that will only occur if and when a clean install of Windows is done
otherwise both boot loaders for Windows and Linux will remain intact and untroubled.

best of luck Steve ..
 

My Computers My Computers

System One System Two

  • At a glance

    Debian 13 KDE .. Windows 11 HomeRyzen 7 5825u64GB DDR4 3200Ryzen 7 5825u
    OS
    Debian 13 KDE .. Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP 24" AiO
    CPU
    Ryzen 7 5825u
    Motherboard
    HP
    Memory
    64GB DDR4 3200
    Graphics Card(s)
    Ryzen 7 5825u
    Sound Card
    RealTek
    Monitor(s) Displays
    24" HP AiO
    Screen Resolution
    1920 x 1080 @60 Hz
    Hard Drives
    1TB WD Blue SN580 M2 SSD Partitioned.
    2x 1TB USB HDD External Backup/Storage.
    PSU
    90W external power brick
    Case
    24" All in One
    Cooling
    Default Air Cooling
    Keyboard
    HP WiFi UK extended
    Mouse
    HP WiFi 3 Button
    Internet Speed
    1GB full fibre
    Browser
    Edge & Firefox
    Antivirus
    AVG Internet Security/Windows Defender
    Other Info
    Mainly Open Source Software

  • At a glance

    Ubuntu 22.04.5 LTSi5 7200u16GB DDR4Intel
    Operating System
    Ubuntu 22.04.5 LTS
    Computer type
    Laptop
    Manufacturer/Model
    Dell 13" Latitude 2017
    CPU
    i5 7200u
    Motherboard
    Dell
    Memory
    16GB DDR4
    Graphics card(s)
    Intel
    Sound Card
    Intel
    Monitor(s) Displays
    13" Dell Laptop
    Hard Drives
    250GB Crucial 2.5" SSD
    Mouse
    Generic WiFi 3 button
    Internet Speed
    WiFi only
    Browser
    Firefox
    Antivirus
    ClamAV TK
    Other Info
    Mainly Open Source Software
XxXxX said:
the EFI boot partition will only be corrupted if Windows in installed again on that drive.
as Windows takes over the entire EFI boot partition.

but that will only occur if and when a clean install of Windows is done
otherwise both boot loaders for Windows and Linux will remain intact and untroubled.

best of luck Steve ..
Click to expand...
I have seen corrupt boot due to multi booting os. Also, some BIOS updates can't complete as secure boot or other os boot interferes. YMMV.
 

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
Computer type
PC/Desktop
Manufacturer/Model
Asus
Windows 11 and Ubuntu are on two different drives if that makes any difference or not with this setup
 

My Computer My Computer

At a glance

windows 11Intel i5-10600kf32gb corsair vengerance proAMD RX 6500XT
OS
windows 11
Computer type
PC/Desktop
Manufacturer/Model
Antec/Case
CPU
Intel i5-10600kf
Motherboard
GIGABYTE Z590 UD AC
Memory
32gb corsair vengerance pro
Graphics Card(s)
AMD RX 6500XT
Sound Card
onboard
Monitor(s) Displays
40" Hisense
Hard Drives
Samsung 850
Samsung 870
Seagate 2TB
PSU
EVGA GQ 750
if the Linux boot loader is on the Linux drive
and the Windows boot loader is on the Windows drive
then there wont be any problems.

best of luck Steve ..
 

My Computers My Computers

System One System Two

  • At a glance

    Debian 13 KDE .. Windows 11 HomeRyzen 7 5825u64GB DDR4 3200Ryzen 7 5825u
    OS
    Debian 13 KDE .. Windows 11 Home
    Computer type
    PC/Desktop
    Manufacturer/Model
    HP 24" AiO
    CPU
    Ryzen 7 5825u
    Motherboard
    HP
    Memory
    64GB DDR4 3200
    Graphics Card(s)
    Ryzen 7 5825u
    Sound Card
    RealTek
    Monitor(s) Displays
    24" HP AiO
    Screen Resolution
    1920 x 1080 @60 Hz
    Hard Drives
    1TB WD Blue SN580 M2 SSD Partitioned.
    2x 1TB USB HDD External Backup/Storage.
    PSU
    90W external power brick
    Case
    24" All in One
    Cooling
    Default Air Cooling
    Keyboard
    HP WiFi UK extended
    Mouse
    HP WiFi 3 Button
    Internet Speed
    1GB full fibre
    Browser
    Edge & Firefox
    Antivirus
    AVG Internet Security/Windows Defender
    Other Info
    Mainly Open Source Software

  • At a glance

    Ubuntu 22.04.5 LTSi5 7200u16GB DDR4Intel
    Operating System
    Ubuntu 22.04.5 LTS
    Computer type
    Laptop
    Manufacturer/Model
    Dell 13" Latitude 2017
    CPU
    i5 7200u
    Motherboard
    Dell
    Memory
    16GB DDR4
    Graphics card(s)
    Intel
    Sound Card
    Intel
    Monitor(s) Displays
    13" Dell Laptop
    Hard Drives
    250GB Crucial 2.5" SSD
    Mouse
    Generic WiFi 3 button
    Internet Speed
    WiFi only
    Browser
    Firefox
    Antivirus
    ClamAV TK
    Other Info
    Mainly Open Source Software
You must log in or register to reply here.

Similar threads

Solved Successful manual update of Secure Boot on Dell XPS8930 with older BIOS that will never update.
Replies
18
Views
520
trabel
T
Acer Secure Boot 2023 Certs
Replies
2
Views
249
betakernel
B
Secure Boot Problem.
2
Replies
34
Views
968
gunrunnerjohn
gunrunnerjohn
QUESTIONS regarding SECURE BOOT
Replies
12
Views
563
Lou
Lou
Secure boot violation after deleted the secure boot keys
Replies
10
Views
2K
Winback
W

Latest Support Threads

Latest Tutorials

Back
Top Bottom