跳至主要內容
  • 簡單快速地下訂單
  • 檢視訂單及追蹤商品運送狀態
  • 建立並存取您的產品清單
  • 使用「公司管理」來管理您的 Dell EMC 網站、產品和產品層級連絡人。

文章編號: 000118152


How to disable Secure Boot DKMS Signature Verification on Dell OEM Ubuntu 16.04

摘要: Disable the Secure Boot DKMS Signature verification on Dell computers with Dell OEM Ubuntu 16.04 installed.

文章內容


說明

This article provides the steps to disable the Secure Boot DKMS Signature verification on Dell OEM Ubuntu 16.04.


How to disable Secure Boot DKMS Signature Verification on Dell OEM Ubuntu 16.04

Sometimes OS drivers (Called DKMS modules on Linux) will not be compatible with Secure Boot enforcement policy and Secure Boot will need to be disabled. The following symptoms may occur due to this issue:

  • You cannot log in to your computer after updates are installed.
  • After entering your password, the computer appears to login but instead returns to the login screen.
  • WiFi networks are no longer available.

If the DKMS modules are not compatible with Secure Boot signature verification when the system boots, Secure Boot will tell Linux to block those modules and not load them. This will cause the hardware supported by the un-loaded module to not work. More information on this issue can be found at the following location: Ubuntu Wiki - DKMS do not work on systems with Secure Boot enabled.HOW12112_en_US__1iC_External_Link_BD_v1

The current option supported by Dell is to disable Secure Boot, which is shown in the steps below:

  1. Open a Terminal (Figure 1):
    • Click the Ubuntu Dash (aka menu) button.
    • Type in the word Terminal to search for the application.
    • Click on the result that says Terminal to open the application.

    HOW12112_en_US__2Open Terminal
    Figure 1: Open Terminal

  2. Type in the command sudo mokutil --disable-verification (Figure 2):

    HOW12112_en_US__3Type disable verification command
    Figure 2: Type disable verification command

  3. Set up a temporary pre-boot password (Figure 3):
    • Enter the user password to gain "root" privileges when prompted.
    • Input the temporary pre-boot validation password.
      HOW12112_en_US__4icon NOTE: It is recommended to use a simple password (for example "12345678"). This is a temporary password that will only last until a few more steps into this guide.
    • Re-input the password to confirm (again, use the recommended "12345678").

    HOW12112_en_US__5Pre-boot temporary password
    Figure 3: Pre-boot temporary password

  4. Power off the computer using the power menu in the top right of the screen.
  5. Power on the computer and repeatedly press F12 while it powers on to load the One-Time Boot Menu.
  6. Follow the steps below to change the boot mode settings to Boot mode set to: UEFI: Secure Boot: ON:
    • Using the down arrow key on your keyboard, select Change Boot Mode Settings(Figure 4):

      HOW12112_en_US__6Select Change Boot Mode Settings
      Figure 4: Select Change Boot Mode Settings

    • Use the down arrow key and select the option for UEFI Boot Mode, Secure Boot OFF (Figure 5):

      HOW12112_en_US__7Boot mode settings for UEFI and Secure Boot
      Figure 5: Boot mode settings for UEFI and Secure Boot

    • Use the down arrow key and select Yes to confirm (Figure 6):

      HOW12112_en_US__8Confirm boot mode change
      Figure 6: Confirm boot mode change

    • Confirm one more time with the Apply The Change option (Figure 7):

      HOW12112_en_US__9Apply the change confirmation
      Figure 7: Apply the change confirmation

    • The computer will automatically reboot.
    • When prompted on the blue Shim UEFI key management screen, press the spacebar or any key to launch the MOK Management.
    • At the next prompt, select Change Secure Boot state (Figure 8):

      HOW12112_en_US__10Change secure boot state selection
      Figure 8: Change Secure Boot State selection

    • Confirm by selecting Yes when prompted.
    • Select OK when prompted to reboot the system.
  7. When the computer reboots, secure boot should now be disabled.

文章屬性


上次發佈日期

21 二月 2021

版本

3

文章類型

How To