After installation, do I still need to remember or protect the Secure Boot password?

Question

Or is it a temporary thing that exists only during the installation?

Btw, I'm guessing that using the password doesn't permanently turn off Secure Boot, but just lets something unsigned slip through, right?

Edit: Since it upon closer inspection doesn't seem to be about actually disabling Secure Boot, but rather run mokutil --disable-validation to tell the shim not to validate stuff (I don't know the details), perhaps it's more proper to install these things later and actually sign them first. Am I on the right track here?

Answer 1

It's going to completely turn off Secure Boot because, like it says, those third party programs will not work with it on. It's asking you for a password because, like it says, it's just going to make sure it's you disabling it when Ubuntu shows you how to do it. It's a temporary password.

You can't easily have Secure Boot turned on and also load kernel modules that aren't signed to work. There's not much benefit to Secure Boot, and many (probably most) Ubuntu/Linux users feel comfortable turning it off permanently.