Secure Boot on Dell 5590 UEFI - failed signature verification

[Claudio Chinicz]

Hi,

I have Qubes running on this machine. It boots UEFI from disk.

On the boot menu I've checked the Secure Boot and it was unchecked (never changed before). I've checked the box and reboot. So it failed signature verification and I had to uncheck it and continue without secure boot.

Is there a way to change it and use secure boot? I mean, considering "I trust" what I have now on disk and I want to define the current state as trusted.

Thanks to all

[awokd]

Claudio Chinicz:

The OS also needs to support Secure Boot, but Qubes is not one of those.
See https://github.com/QubesOS/qubes-issues/issues/4371 for a longer
discussion.

--
- don't top post
Mailing list etiquette:
- trim quoted reply to only relevant portions
- when possible, copy and paste text instead of screenshots

[Claudio Chinicz]

Hi, thanks for answering.

I had read that post before and understood it is possible and in the plans for the future (by then) and decided to give it a try and see if someone made progress.

Regarding Anti Evil Made I think it is not necessary because I set my boot config to boot from disk only and the setup is password protected.

In the event someone removes the disk and tampers with the boot partition I'd like to rely on Secure Boot to check on it's integrity before proceeding.

I'm not a high profile or a targeted individual. All I am is a curious person, another Joe.

Cheers