How to Install NVIDIA Driver Online in Red Hat Enterprise Linux with Secure Boot Enabled

Summary: This article is showing an example of installing NVIDIA Driver on Red Hat Enterprise Linux 8 with Secure Boot Enabled.

This article applies to This article does not apply to This article is not tied to any specific product. Not all product versions are identified in this article.

Instructions

This article is an example of installing NVIDIA Driver on Red Hat Enterprise Linux 8 with Secure Boot Enabled. This example is for Red Hat Enterprise Linux 8.9.
 

  1. Get the NVIDIA Compute Unified Device Architecture (CUDA) repository.
[root@pe7525-rhel89 ~]# curl https://developer.download.nvidia.com/compute/cuda/repos/rhel8/x86_64/cuda-rhel8.repo -o /etc/yum.repos.d/cuda-rhel8.repo

Note:

 

  1. Check the current kernel version on the server and find the corresponding NVIDIA driver version pre-compiled by NVIDIA. (Skip this step if the server already has a Red Hat Subscription and are ready to install the latest kernel for the NVIDIA driver. In the other words, installing the latest NVIDIA driver requires installing the corresponding kernel together because the driver is pre-compiled with that kernel)
In this example, the kernel is "4.18.0-513.5.1.el8_9.x86_64," but there are NVIDIA driver versions 545, 535, 525, 470 available for this kernel version. 
[root@pe7525-rhel89 ~]# uname -r
4.18.0-513.5.1.el8_9.x86_64
[root@pe7525-rhel89 ~]# yum list kmod-nvidia* --showduplicates | grep "4.18.0-513.5.1"
kmod-nvidia-545.23.08-4.18.0-513.5.1.x86_64   3:545.23.08-3.el8_9  @cuda-rhel8-x86_64
kmod-nvidia-470.223.02-4.18.0-513.5.1.x86_64  3:470.223.02-3.el8_9 cuda-rhel8-x86_64
kmod-nvidia-525.147.05-4.18.0-513.5.1.x86_64  3:525.147.05-3.el8_9 cuda-rhel8-x86_64
kmod-nvidia-535.129.03-4.18.0-513.5.1.x86_64  3:535.129.03-3.el8_9 cuda-rhel8-x86_64
kmod-nvidia-545.23.08-4.18.0-513.5.1.x86_64   3:545.23.08-3.el8_9  cuda-rhel8-x86_64
[root@pe7525-rhel89 ~]#
  1. List available versions and then install the required version. Version 545 was chosen for this example.
[root@pe7525-rhel89 ~]# dnf module list nvidia-driver
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 0:02:56 ago on Wed 15 May 2024 02:29:49 PM +08.
cuda-rhel8-x86_64
Name                     Stream                     Profiles                           Summary
nvidia-driver            latest                     default [d], fm, ks, src           Nvidia driver for latest branch
nvidia-driver            latest-dkms [d]            default [d], fm, ks                Nvidia driver for latest-dkms branch
nvidia-driver            open-dkms                  default [d], fm, ks, src           Nvidia driver for open-dkms branch
nvidia-driver            418                        default [d], fm, ks, src           Nvidia driver for 418 branch
nvidia-driver            418-dkms                   default [d], fm, ks                Nvidia driver for 418-dkms branch
nvidia-driver            440                        default [d], fm, ks, src           Nvidia driver for 440 branch
nvidia-driver            440-dkms                   default [d], fm, ks                Nvidia driver for 440-dkms branch
nvidia-driver            450                        default [d], fm, ks, src           Nvidia driver for 450 branch
nvidia-driver            450-dkms                   default [d], fm, ks                Nvidia driver for 450-dkms branch
nvidia-driver            455                        default [d], fm, ks, src           Nvidia driver for 455 branch
nvidia-driver            455-dkms                   default [d], fm, ks                Nvidia driver for 455-dkms branch
nvidia-driver            460                        default [d], fm, ks, src           Nvidia driver for 460 branch
nvidia-driver            460-dkms                   default [d], fm, ks                Nvidia driver for 460-dkms branch
nvidia-driver            465                        default [d], fm, ks, src           Nvidia driver for 465 branch
nvidia-driver            465-dkms                   default [d], fm, ks                Nvidia driver for 465-dkms branch
nvidia-driver            470                        default [d], fm, ks, src           Nvidia driver for 470 branch
nvidia-driver            470-dkms                   default [d], fm, ks                Nvidia driver for 470-dkms branch
nvidia-driver            495                        default [d], fm, ks, src           Nvidia driver for 495 branch
nvidia-driver            495-dkms                   default [d], fm, ks                Nvidia driver for 495-dkms branch
nvidia-driver            510                        default [d], fm, ks, src           Nvidia driver for 510 branch
nvidia-driver            510-dkms                   default [d], fm, ks                Nvidia driver for 510-dkms branch
nvidia-driver            515                        default [d], fm, ks, src           Nvidia driver for 515 branch
nvidia-driver            515-dkms                   default [d], fm, ks                Nvidia driver for 515-dkms branch
nvidia-driver            515-open                   default [d], fm, ks, src           Nvidia driver for 515-open branch
nvidia-driver            520                        default [d], fm, ks, src           Nvidia driver for 520 branch
nvidia-driver            520-dkms                   default [d], fm, ks                Nvidia driver for 520-dkms branch
nvidia-driver            520-open                   default [d], fm, ks, src           Nvidia driver for 520-open branch
nvidia-driver            525                        default [d], fm, ks, src           Nvidia driver for 525 branch
nvidia-driver            525-dkms                   default [d], fm, ks                Nvidia driver for 525-dkms branch
nvidia-driver            525-open                   default [d], fm, ks, src           Nvidia driver for 525-open branch
nvidia-driver            530                        default [d], fm, ks, src           Nvidia driver for 530 branch
nvidia-driver            530-dkms                   default [d], fm, ks                Nvidia driver for 530-dkms branch
nvidia-driver            530-open                   default [d], fm, ks, src           Nvidia driver for 530-open branch
nvidia-driver            535                        default [d], fm, ks, src           Nvidia driver for 535 branch
nvidia-driver            535-dkms                   default [d], fm, ks                Nvidia driver for 535-dkms branch
nvidia-driver            535-open                   default [d], fm, ks, src           Nvidia driver for 535-open branch
nvidia-driver            545                        default [d], fm, ks, src           Nvidia driver for 545 branch
nvidia-driver            545-dkms                   default [d], fm, ks                Nvidia driver for 545-dkms branch
nvidia-driver            545-open                   default [d], fm, ks, src           Nvidia driver for 545-open branch
nvidia-driver            550                        default [d], fm, ks, src           Nvidia driver for 550 branch
nvidia-driver            550-dkms                   default [d], fm, ks                Nvidia driver for 550-dkms branch
nvidia-driver            550-open                   default [d], fm, ks, src           Nvidia driver for 550-open branch

Hint: [d]efault, [e]nabled, [x]disabled, [i]nstalled
[root@pe7525-rhel89 ~]# dnf module install nvidia-driver:545
Updating Subscription Management repositories.
Unable to read consumer identity

This system is not registered with an entitlement server. You can use subscription-manager to register.

Last metadata expiration check: 0:08:36 ago on Wed 15 May 2024 02:29:49 PM +08.
Dependencies resolved.
=====================================================================================================================================
 Package                                  Arch       Version                                      Repository                    Size
=====================================================================================================================================
Installing group/module packages:
 cuda-drivers                             x86_64     545.23.08-1                                  cuda-rhel8-x86_64            8.1 k
 nvidia-driver                            x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64            143 M
 nvidia-driver-NVML                       x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64            576 k
 nvidia-driver-NvFBCOpenGL                x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64             56 k
 nvidia-driver-cuda                       x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64            410 k
 nvidia-driver-cuda-libs                  x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64             56 M
 nvidia-driver-devel                      x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64             13 k
 nvidia-driver-libs                       x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64            150 M
 nvidia-kmod-common                       noarch     3:545.23.08-1.el8                            cuda-rhel8-x86_64             13 k
 nvidia-libXNVCtrl                        x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64             26 k
 nvidia-libXNVCtrl-devel                  x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64             56 k
 nvidia-modprobe                          x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64             39 k
 nvidia-persistenced                      x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64             45 k
 nvidia-settings                          x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64            840 k
 nvidia-xconfig                           x86_64     3:545.23.08-1.el8                            cuda-rhel8-x86_64            107 k
Installing dependencies:
 adwaita-cursor-theme                     noarch     3.28.0-3.el8                                 my-rhel-89-AppStream-iso     647 k
 adwaita-icon-theme                       noarch     3.28.0-3.el8                                 my-rhel-89-AppStream-iso      11 M
 at-spi2-atk                              x86_64     2.26.2-1.el8                                 my-rhel-89-AppStream-iso      89 k
 at-spi2-core                             x86_64     2.28.0-1.el8                                 my-rhel-89-AppStream-iso     169 k
 cairo-gobject                            x86_64     1.15.12-6.el8                                my-rhel-89-AppStream-iso      33 k
 colord-libs                              x86_64     1.4.2-1.el8                                  my-rhel-89-AppStream-iso     236 k
 dejavu-fonts-common                      noarch     2.35-7.el8                                   my-rhel-89-BaseOS-iso         74 k
 dnf-plugin-nvidia                        noarch     2.0-1.el8                                    cuda-rhel8-x86_64             12 k
 egl-wayland                              x86_64     1.1.9-3.el8                                  my-rhel-89-AppStream-iso      40 k
 glib-networking                          x86_64     2.56.1-1.1.el8                               my-rhel-89-BaseOS-iso        155 k
 gsettings-desktop-schemas                x86_64     3.32.0-6.el8                                 my-rhel-89-BaseOS-iso        633 k
 gtk3                                     x86_64     3.22.30-11.el8                               my-rhel-89-AppStream-iso     4.5 M
 kmod-nvidia-545.23.08-4.18.0-513.5.1     x86_64     3:545.23.08-3.el8_9                          cuda-rhel8-x86_64             43 M
 libX11-devel                             x86_64     1.6.8-6.el8                                  my-rhel-89-AppStream-iso     977 k
 libX11-xcb                               x86_64     1.6.8-6.el8                                  my-rhel-89-AppStream-iso      14 k
 libXau-devel                             x86_64     1.0.9-3.el8                                  my-rhel-89-AppStream-iso      21 k
 libXdmcp                                 x86_64     1.1.3-1.el8                                  my-rhel-89-AppStream-iso      41 k
 libXfont2                                x86_64     2.0.3-2.el8                                  my-rhel-89-AppStream-iso     149 k
 libXtst                                  x86_64     1.2.3-7.el8                                  my-rhel-89-AppStream-iso      22 k
 libepoxy                                 x86_64     1.5.8-1.el8                                  my-rhel-89-AppStream-iso     225 k
 libevdev                                 x86_64     1.10.0-1.el8                                 my-rhel-89-AppStream-iso      44 k
 libglvnd                                 x86_64     1:1.3.4-1.el8                                my-rhel-89-AppStream-iso     128 k
 libglvnd-egl                             x86_64     1:1.3.4-1.el8                                my-rhel-89-AppStream-iso      49 k
 libglvnd-gles                            x86_64     1:1.3.4-1.el8                                my-rhel-89-AppStream-iso      40 k
 libglvnd-glx                             x86_64     1:1.3.4-1.el8                                my-rhel-89-AppStream-iso     137 k
 libglvnd-opengl                          x86_64     1:1.3.4-1.el8                                my-rhel-89-AppStream-iso      47 k
 libinput                                 x86_64     1.16.3-3.el8_6                               my-rhel-89-AppStream-iso     217 k
 libmodman                                x86_64     2.0.1-17.el8                                 my-rhel-89-BaseOS-iso         36 k
 libproxy                                 x86_64     0.4.15-5.2.el8                               my-rhel-89-BaseOS-iso         74 k
 libsoup                                  x86_64     2.62.3-4.el8                                 my-rhel-89-BaseOS-iso        425 k
 libvdpau                                 x86_64     1.4-2.el8                                    my-rhel-89-AppStream-iso      41 k
 libwacom                                 x86_64     1.6-3.el8                                    my-rhel-89-AppStream-iso      42 k
 libwacom-data                            noarch     1.6-3.el8                                    my-rhel-89-AppStream-iso     104 k
 libwayland-client                        x86_64     1.21.0-1.el8                                 my-rhel-89-AppStream-iso      41 k
 libwayland-cursor                        x86_64     1.21.0-1.el8                                 my-rhel-89-AppStream-iso      26 k
 libwayland-egl                           x86_64     1.21.0-1.el8                                 my-rhel-89-AppStream-iso      20 k
 libwayland-server                        x86_64     1.21.0-1.el8                                 my-rhel-89-AppStream-iso      49 k
 libxcb-devel                             x86_64     1.13.1-1.el8                                 my-rhel-89-AppStream-iso     1.1 M
 libxkbfile                               x86_64     1.1.0-1.el8                                  my-rhel-89-AppStream-iso      88 k
 libxshmfence                             x86_64     1.3-2.el8                                    my-rhel-89-AppStream-iso      13 k
 llvm-libs                                x86_64     16.0.6-3.module+el8.9.0+19571+4f9fba7b       my-rhel-89-AppStream-iso      28 M
 mesa-libEGL                              x86_64     23.1.4-1.el8                                 my-rhel-89-AppStream-iso     149 k
 mesa-libGL                               x86_64     23.1.4-1.el8                                 my-rhel-89-AppStream-iso     188 k
 mesa-libgbm                              x86_64     23.1.4-1.el8                                 my-rhel-89-AppStream-iso      60 k
 mesa-libglapi                            x86_64     23.1.4-1.el8                                 my-rhel-89-AppStream-iso      67 k
 mesa-vulkan-drivers                      x86_64     23.1.4-1.el8                                 my-rhel-89-AppStream-iso     9.8 M
 mtdev                                    x86_64     1.1.5-12.el8                                 my-rhel-89-AppStream-iso      24 k
 ocl-icd                                  x86_64     2.2.12-1.el8                                 my-rhel-89-AppStream-iso      51 k
 opencl-filesystem                        noarch     1.0-6.el8                                    my-rhel-89-AppStream-iso     8.5 k
 rest                                     x86_64     0.8.1-2.el8                                  my-rhel-89-AppStream-iso      71 k
 vulkan-loader                            x86_64     1.3.250.1-1.el8                              my-rhel-89-AppStream-iso     141 k
 xorg-x11-drv-fbdev                       x86_64     0.5.0-2.el8                                  my-rhel-89-AppStream-iso      27 k
 xorg-x11-drv-libinput                    x86_64     0.29.0-1.el8                                 my-rhel-89-AppStream-iso      50 k
 xorg-x11-drv-vesa                        x86_64     2.4.0-3.el8                                  my-rhel-89-AppStream-iso      31 k
 xorg-x11-proto-devel                     noarch     2020.1-3.el8                                 my-rhel-89-AppStream-iso     280 k
 xorg-x11-server-Xorg                     x86_64     1.20.11-17.el8                               my-rhel-89-AppStream-iso     1.5 M
 xorg-x11-server-common                   x86_64     1.20.11-17.el8                               my-rhel-89-AppStream-iso      44 k
 xorg-x11-xkb-utils                       x86_64     7.7-28.el8                                   my-rhel-89-AppStream-iso     114 k
Installing weak dependencies:
 abattis-cantarell-fonts                  noarch     0.0.25-6.el8                                 my-rhel-89-AppStream-iso     156 k
 dconf                                    x86_64     0.28.0-4.el8                                 my-rhel-89-AppStream-iso     108 k
 dejavu-sans-mono-fonts                   noarch     2.35-7.el8                                   my-rhel-89-BaseOS-iso        447 k
Installing module profiles:
 nvidia-driver/default
Enabling module streams:
 llvm-toolset                                        rhel8
 nvidia-driver                                       545

Transaction Summary
=====================================================================================================================================
Install  76 Packages

Total download size: 458 M
Installed size: 1.0 G
Is this ok [y/N]: y
Downloading Packages:
(1/76): cuda-drivers-545.23.08-1.x86_64.rpm                                                          1.6 MB/s | 8.1 kB     ......
(76/76): nvidia-driver-libs-545.23.08-1.el8.x86_64.rpm                                                34 MB/s | 150 MB     00:04
-------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                 82 MB/s | 458 MB     00:05
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
.......
Installed products updated.

Installed:
  abattis-cantarell-fonts-0.0.25-6.el8.noarch                             adwaita-cursor-theme-3.28.0-3.el8.noarch
  adwaita-icon-theme-3.28.0-3.el8.noarch                                  at-spi2-atk-2.26.2-1.el8.x86_64
  at-spi2-core-2.28.0-1.el8.x86_64                                        cairo-gobject-1.15.12-6.el8.x86_64
  colord-libs-1.4.2-1.el8.x86_64                                          cuda-drivers-545.23.08-1.x86_64
  dconf-0.28.0-4.el8.x86_64                                               dejavu-fonts-common-2.35-7.el8.noarch
  dejavu-sans-mono-fonts-2.35-7.el8.noarch                                dnf-plugin-nvidia-2.0-1.el8.noarch
  egl-wayland-1.1.9-3.el8.x86_64                                          glib-networking-2.56.1-1.1.el8.x86_64
  gsettings-desktop-schemas-3.32.0-6.el8.x86_64                           gtk3-3.22.30-11.el8.x86_64
  kmod-nvidia-545.23.08-4.18.0-513.5.1-3:545.23.08-3.el8_9.x86_64         libX11-devel-1.6.8-6.el8.x86_64
  libX11-xcb-1.6.8-6.el8.x86_64                                           libXau-devel-1.0.9-3.el8.x86_64
  libXdmcp-1.1.3-1.el8.x86_64                                             libXfont2-2.0.3-2.el8.x86_64
  libXtst-1.2.3-7.el8.x86_64                                              libepoxy-1.5.8-1.el8.x86_64
  libevdev-1.10.0-1.el8.x86_64                                            libglvnd-1:1.3.4-1.el8.x86_64
  libglvnd-egl-1:1.3.4-1.el8.x86_64                                       libglvnd-gles-1:1.3.4-1.el8.x86_64
  libglvnd-glx-1:1.3.4-1.el8.x86_64                                       libglvnd-opengl-1:1.3.4-1.el8.x86_64
  libinput-1.16.3-3.el8_6.x86_64                                          libmodman-2.0.1-17.el8.x86_64
  libproxy-0.4.15-5.2.el8.x86_64                                          libsoup-2.62.3-4.el8.x86_64
  libvdpau-1.4-2.el8.x86_64                                               libwacom-1.6-3.el8.x86_64
  libwacom-data-1.6-3.el8.noarch                                          libwayland-client-1.21.0-1.el8.x86_64
  libwayland-cursor-1.21.0-1.el8.x86_64                                   libwayland-egl-1.21.0-1.el8.x86_64
  libwayland-server-1.21.0-1.el8.x86_64                                   libxcb-devel-1.13.1-1.el8.x86_64
  libxkbfile-1.1.0-1.el8.x86_64                                           libxshmfence-1.3-2.el8.x86_64
  llvm-libs-16.0.6-3.module+el8.9.0+19571+4f9fba7b.x86_64                 mesa-libEGL-23.1.4-1.el8.x86_64
  mesa-libGL-23.1.4-1.el8.x86_64                                          mesa-libgbm-23.1.4-1.el8.x86_64
  mesa-libglapi-23.1.4-1.el8.x86_64                                       mesa-vulkan-drivers-23.1.4-1.el8.x86_64
  mtdev-1.1.5-12.el8.x86_64                                               nvidia-driver-3:545.23.08-1.el8.x86_64
  nvidia-driver-NVML-3:545.23.08-1.el8.x86_64                             nvidia-driver-NvFBCOpenGL-3:545.23.08-1.el8.x86_64
  nvidia-driver-cuda-3:545.23.08-1.el8.x86_64                             nvidia-driver-cuda-libs-3:545.23.08-1.el8.x86_64
  nvidia-driver-devel-3:545.23.08-1.el8.x86_64                            nvidia-driver-libs-3:545.23.08-1.el8.x86_64
  nvidia-kmod-common-3:545.23.08-1.el8.noarch                             nvidia-libXNVCtrl-3:545.23.08-1.el8.x86_64
  nvidia-libXNVCtrl-devel-3:545.23.08-1.el8.x86_64                        nvidia-modprobe-3:545.23.08-1.el8.x86_64
  nvidia-persistenced-3:545.23.08-1.el8.x86_64                            nvidia-settings-3:545.23.08-1.el8.x86_64
  nvidia-xconfig-3:545.23.08-1.el8.x86_64                                 ocl-icd-2.2.12-1.el8.x86_64
  opencl-filesystem-1.0-6.el8.noarch                                      rest-0.8.1-2.el8.x86_64
  vulkan-loader-1.3.250.1-1.el8.x86_64                                    xorg-x11-drv-fbdev-0.5.0-2.el8.x86_64
  xorg-x11-drv-libinput-0.29.0-1.el8.x86_64                               xorg-x11-drv-vesa-2.4.0-3.el8.x86_64
  xorg-x11-proto-devel-2020.1-3.el8.noarch                                xorg-x11-server-Xorg-1.20.11-17.el8.x86_64
  xorg-x11-server-common-1.20.11-17.el8.x86_64                            xorg-x11-xkb-utils-7.7-28.el8.x86_64

Complete!
[root@pe7525-rhel89 ~]#
  1. Verify the driver and confirm that NVIDIA signed the driver.
[root@pe7525-rhel89 ~]# modinfo nvidia | head -n25
filename:       /lib/modules/4.18.0-513.5.1.el8_9.x86_64/extra/drivers/video/nvidia/nvidia.ko
alias:          char-major-195-*
version:        545.23.08
supported:      external
license:        NVIDIA
firmware:       nvidia/545.23.08/gsp_tu10x.bin
firmware:       nvidia/545.23.08/gsp_ga10x.bin
rhelversion:    8.9
srcversion:     427F3AB170CB5FB6F2DFAC8
alias:          pci:v000010DEd*sv*sd*bc06sc80i00*
alias:          pci:v000010DEd*sv*sd*bc03sc02i00*
alias:          pci:v000010DEd*sv*sd*bc03sc00i00*
depends:        drm
name:           nvidia
vermagic:       4.18.0-513.5.1.el8_9.x86_64 SMP mod_unload modversions
sig_id:         PKCS#7
signer:         NVIDIA
sig_key:        55:7C:FD:CC:D0:EA:36:2F:0C:09:BA:00:A1:6C:B1:B8:E6:C1:EB:AB
sig_hashalgo:   sha256
signature:      95:5E:E3:FC:52:9C:81:47:65:37:CA:06:38:64:32:49:9C:18:F6:FF:
                20:41:C6:1B:35:E2:F0:87:5F:74:B9:0A:A9:2D:1D:9A:84:F9:3D:77:
                09:63:24:9A:5E:B3:1F:FB:40:9C:40:46:05:09:86:77:E5:79:80:F1:
                4F:57:30:EB:31:11:89:3D:70:BE:7A:5D:F6:9A:4A:0C:63:E3:D5:D7:
                73:5E:53:2F:56:E9:1C:CE:9B:D1:14:49:77:8C:59:27:9B:76:87:1F:
                BD:C8:C2:0A:6C:B5:E9:6E:B4:D2:F3:91:7E:D8:44:BA:EA:2C:0B:1E:
[root@pe7525-rhel89 ~]#
  1. Check the Secure Boot status on the server.
[root@pe7525-rhel89 ~]# mokutil --sb-state
SecureBoot enabled
[root@pe7525-rhel89 ~]#
  1. If Secure Boot is disabled and you choose to keep it disabled, skip this step. If it is enabled, download an NVIDIA .der certificate and import it into the server for authentication. Otherwise, the driver fails to load with the "Required key not available" error.
Note: The certificate import is a one-time task. It is not required to re-import the certificate if the OS is reinstalled, or if the driver is reinstalled or updated with an NVIDIA signed driver.
 
[root@pe7525-rhel89 ~]# curl -O https://developer.download.nvidia.com/compute/cuda/repos/rhel8/x86_64/NVIDIA2019-public_key.der
[root@pe7525-rhel89 ~]# mokutil --list-enrolled | grep Issuer
        Issuer: O=Red Hat, Inc., CN=Red Hat Secure Boot CA 5/emailAddress=secalert@redhat.com
[root@pe7525-rhel89 ~]# mokutil --import NVIDIA2019-public_key.der
input password:           # remember the password that will be used later...
input password again:
[root@pe7525-rhel89 ~]# mokutil --list-new | grep Issuer
        Issuer: O=NVIDIA, CN=NVIDIA/emailAddress=sw-cuda-installer@nvidia.com
[root@pe7525-rhel89 ~]# mokutil --list-enrolled | grep Issuer
        Issuer: O=Red Hat, Inc., CN=Red Hat Secure Boot CA 5/emailAddress=secalert@redhat.com
[root@pe7525-rhel89 ~]#
[root@pe7525-rhel89 ~]# reboot
## after POST, will see blue screen for "Perform MOK management"
## Select "Enroll MOK" -> "Continue" -> "Yes" to Enroll the key. -> key in the password you inputted when you importing above -> "Reboot".  (If you missed this step, you have to re-import again)

## after rebooted, the NVIDIA issuer will be listed in enrolled.
[root@pe7525-rhel89 ~]# mokutil --list-enrolled | grep Issuer
        Issuer: O=Red Hat, Inc., CN=Red Hat Secure Boot CA 5/emailAddress=secalert@redhat.com
        Issuer: O=NVIDIA, CN=NVIDIA/emailAddress=sw-cuda-installer@nvidia.com
[root@pe7525-rhel89 ~]#
  1. After rebooting, verify that the NVIDIA driver is loaded successfully.
[root@pe7525-rhel89 ~]# lsmod | grep nvidia
nvidia_drm             86016  0
nvidia_modeset       1282048  1 nvidia_drm
nvidia_uvm           1425408  0
nvidia              55382016  2 nvidia_uvm,nvidia_modeset
video                  53248  1 nvidia_modeset
drm_kms_helper        180224  4 vmwgfx,nvidia_drm
drm                   598016  8 vmwgfx,drm_kms_helper,nvidia,drm_ttm_helper,nvidia_drm,ttm
[root@pe7525-rhel89 ~]# nvidia-smi
Wed May 15 16:29:14 2024
+---------------------------------------------------------------------------------------+
| NVIDIA-SMI 545.23.08              Driver Version: 545.23.08    CUDA Version: 12.3     |
|-----------------------------------------+----------------------+----------------------+
| GPU  Name                 Persistence-M | Bus-Id        Disp.A | Volatile Uncorr. ECC |
| Fan  Temp   Perf          Pwr:Usage/Cap |         Memory-Usage | GPU-Util  Compute M. |
|                                         |                      |               MIG M. |
|=========================================+======================+======================|
|   0  NVIDIA A100-PCIE-40GB          Off | 00000000:0B:00.0 Off |                    0 |
| N/A   34C    P0              38W / 250W |      4MiB / 40960MiB |     42%      Default |
|                                         |                      |             Disabled |
+-----------------------------------------+----------------------+----------------------+

+---------------------------------------------------------------------------------------+
| Processes:                                                                            |
|  GPU   GI   CI        PID   Type   Process name                            GPU Memory |
|        ID   ID                                                             Usage      |
|=======================================================================================|
|  No running processes found                                                           |
+---------------------------------------------------------------------------------------+
[root@pe7525-rhel89 ~]#

The above GPU utilization is 42% because it is running a background scrubbing. Enable persistent mode to address this. 
[root@pe7525-rhel89 ~]# systemctl enable --now nvidia-persistenced.service
Created symlink /etc/systemd/system/multi-user.target.wants/nvidia-persistenced.service; /usr/lib/systemd/system/nvidia-persistenced.service.
[root@pe7525-rhel89 ~]# nvidia-smi
Thu May 16 09:50:54 2024
NVIDIA-SMI 545.23.08              Driver Version: 545.23.08    CUDA Version: 12.3     |
|-----------------------------------------+----------------------+----------------------+
| GPU  Name                 Persistence-M | Bus-Id        Disp.A | Volatile Uncorr. ECC |
| Fan  Temp   Perf          Pwr:Usage/Cap |         Memory-Usage | GPU-Util  Compute M. |
|                                         |                      |               MIG M. |
|=========================================+======================+======================|
|   0  NVIDIA A100-PCIE-40GB          On  | 00000000:0B:00.0 Off |                    0 |
| N/A   31C    P0              36W / 250W |      4MiB / 40960MiB |      0%      Default |
|                                         |                      |             Disabled |
+-----------------------------------------+----------------------+----------------------+

+---------------------------------------------------------------------------------------+
| Processes:                                                                            |
|  GPU   GI   CI        PID   Type   Process name                            GPU Memory |
|        ID   ID                                                             Usage      |
|=======================================================================================|
|  No running processes found                                                           |
+---------------------------------------------------------------------------------------+
[root@pe7525-rhel89 ~]#

Affected Products

Red Hat Enterprise Linux Version 7, Red Hat Enterprise Linux Version 9, Red Hat Enterprise Linux Version 8
Article Properties
Article Number: 000225087
Article Type: How To
Last Modified: 19 Dec 2024
Version:  2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.