4

I have installed Ubuntu 16.10 on a machine (Dell Inspiron) with UEFI and Secure Boot enabled, but when I boot I get a message from the firmware saying "Invalid signature detected. Check secure boot policy in setup". Ubuntu and grub are installed in UEFI mode but I still get the error, how do I fix this without turning off secure boot?

sudo efibootmgr -v:

BootCurrent: 0000
Timeout: 0 seconds
BootOrder: 0008,0000,0005,0004
Boot0000* ubuntu    HD(1,GPT,24a5c7af-e4c8-42c8-888a-637a223cb97a,0x800,0x100000)/File(\EFI\UBUNTU\SHIMX64.EFI)
Boot0004* Onboard NIC(IPV4)     PciRoot(0x0)/Pci(0x1c,0x3)/Pci(0x0,0x0)/MAC(74e6e201e3ee,0)/IPv4(0.0.0.0:0<->0.0.0.0:0,0,0)..BO
Boot0005* Onboard NIC(IPV6) PciRoot(0x0)/Pci(0x1c,0x3)/Pci(0x0,0x0)/MAC(74e6e201e3ee,0)/IPv6([::]:<->[::]:,0,0)..BO
 Boot0008* ubuntu   HD(1,GPT,24a5c7af-e4c8-42c8-888a-637a223cb97a,0x800,0x100000)/File(\EFI\UBUNTU\GRUBX64.EFI)
nom
  • 199

1 Answers1

4

When secure boot is enabled, the bootloader to use is shimx64.efi, not gurbx64.efi. the BootOrder you posted has "0008" first in the order, which is the grub entry. Put "0000" first in the BootOrder, and secure boot should work.

ubfan1
  • 19,049