3

Yesterday (aug. 13) I updated Windows 10 on my 8 year old MSI laptop. After a reboot I was presented with a black screen with a very tiny text saying:

"Verifying shim SBAT data failed: Security Policy Violation Something has gone serously wrong: SBAT self-check failed: Security Policy Violation" Note the wrong spelling (seriously) was in the message, not me!

The only way to resort this was to disable secure boot. Is there a way to fix this without reinstalling my Ubuntu system and enable secure boot?

Note: Windows and Ubuntu are on separate SSD:s. I've seen some answers on the web, but I did not understand how to go further. I'm 74 years old with two strokes behind me so any explanations have to be simple. If it's possible :-)

3 Answers3

3

Happened to me today after the windows update. Ubuntu starts by default after restart and was stuck with security policy error message.

quick solution - disable the secure boot. Then should work as before

3

Disable secureboot, boot into ubuntu and run:

mokutil --list-sbat-revocations
 sbat,1,2024010900
 shim,2
 grub,3

Something like this will show, so sbat it's blocking shim and grub. Then run:

mokutil --set-sbat-policy delete

Reboot whitout secure boot again and check:

mokutil --list-sbat-revocations
 sbat,1,2021030218

Now nothing it's blocked, reboot, enable secureboot and all should be fine.

0

dual-boot: Ubuntu: 22.04.3 LTS windows: 10

I had the same issue after updating win10 and fixed with michael's solution.

Ubuntu 18.04/20.04 secure boot

I didn't used ubuntu 18.0

just turning off secure boot run the mokito command (with sudo) and enable grub interface if needed

(How to get to the GRUB menu at boot-time?)

reboot on ubuntu -> once in the grub interface restart -> enable secure boot and it's done.

bk3
  • 11