Unsolved
This post is more than 5 years old
5 Posts
0
3705
May 19th, 2019 13:00
Add USB (ubuntu) to secure boot -- what is the UEFI bios looking for?
Does anyone know what the UEFI BIOS setup is for adding a USB device to secure boot on an 17 R 3?
I have Ubuntu 18.04 installed on a USB drive. I know Canonical has it keys in the microsoft boot loader shim.
I can boot and use the system on the USB just fine, but I have to disable secure boot and use F12 to select the drive.
I would like to be able to do the same, but using secure boot and F12.
When I add the device to secure boot in the BIOS (F2 and add device) it sees the drive, but prompts me for something I don't have any idea about completing.
No Events found!
MrRiRL
5 Posts
0
May 19th, 2019 14:00
Here is link to what I see when I have booted into the BIOS.
jphughan
9 Legend
•
14K Posts
0
May 20th, 2019 07:00
My understanding is that newer versions of Ubuntu support Secure Boot without any modifications because they somehow got Microsoft to sign their bootloader. I just tested a Hyper-V Gen 2 VM with Secure Boot enabled in the default configuration, and I'm able to boot a Ubuntu ISO, install it onto the virtual hard drive, and then boot that.
When you try to boot with Secure Boot, do you get an error that specifically says that the bootloader failed the security validation check and recommending that you disable Secure Boot? If you see any other behavior, then the issue isn't Secure Boot itself, but there's another possible cause here. When you say you're disabling Secure Boot and using F12, you might be booting the flash drive in Legacy BIOS mode. Disabling Secure Boot can enable Legacy BIOS mode as well, which you don't want. So make sure the option you select in the F12 menu is listed under UEFI Options rather than Legacy Options. If you've been booting in Legacy mode while Secure Boot is off (and you don't see an option for your flash drive in the UEFI section of the list), then the reason you can't boot with Secure Boot enabled is probably that your flash drive isn't set up for UEFI booting, not because of Secure Boot specifically.