vmlinuz-4.18.0 has invalid signature & secured boot
vmlinuz-4.18.0 has invalid signature & secured boot
Hello,
I have some strange behavior with centos8 which I did not have with centos7...
when I compiled same kernel and installed it it worked perfectly.
After some resets I made some new configuration in kernel and on the new install I got:
"
error: ../../grub-core/loader/i386/efi/linux.c:208(hd0,gpt2)/vmlinuz-4.18.0-51.el8.x86_64 has invalid signature.
error: ../../grub-core/loader/i386/efi/linux.c:93:you need to load the kernel first.
Press any key to continue...
"
I checked BIOS and "secured boot" entry in BIOS is DISABLED !
What is going on ? Why it still give this error ? Why does it think there is a signature error ?
I can't remove this error, and boot.
I also see that this issue is "on progress" in rhel issues of centos8:
https://access.redhat.com/solutions/3771941
Please help,
ranran
I have some strange behavior with centos8 which I did not have with centos7...
when I compiled same kernel and installed it it worked perfectly.
After some resets I made some new configuration in kernel and on the new install I got:
"
error: ../../grub-core/loader/i386/efi/linux.c:208(hd0,gpt2)/vmlinuz-4.18.0-51.el8.x86_64 has invalid signature.
error: ../../grub-core/loader/i386/efi/linux.c:93:you need to load the kernel first.
Press any key to continue...
"
I checked BIOS and "secured boot" entry in BIOS is DISABLED !
What is going on ? Why it still give this error ? Why does it think there is a signature error ?
I can't remove this error, and boot.
I also see that this issue is "on progress" in rhel issues of centos8:
https://access.redhat.com/solutions/3771941
Please help,
ranran
Last edited by ranshalit on 2019/11/05 16:07:31, edited 2 times in total.
Re: vmlinuz-4.18.0 has invalid signature.
Once the kernel is modified, it is no more centos, so nobody but yous knows what you did to this kernel which modifies the signature.
Member of centos-FR forum
Re: vmlinuz-4.18.0 has invalid signature.
That's understood.
I just want to add that this issue is "on progress" in rhel issues of centos8:
https://access.redhat.com/solutions/3771941
Are you familiar with a way to disable UEFI secured boot ?
Thanks
I just want to add that this issue is "on progress" in rhel issues of centos8:
https://access.redhat.com/solutions/3771941
Are you familiar with a way to disable UEFI secured boot ?
Thanks
Re: vmlinuz-4.18.0 has invalid signature & secured boot
Mayve you should open another topic for this.Are you familiar with a way to disable UEFI secured boot ?
Member of centos-FR forum
-
- Posts: 1521
- Joined: 2014/05/21 20:16:00
- Location: Central New York, USA
Re: vmlinuz-4.18.0 has invalid signature & secured boot
on my laptop - secure boot is enabled/disabled in the BIOS.
Re: vmlinuz-4.18.0 has invalid signature & secured boot
Hi,
Yes, also in my BIOS there is secured boot option and it is shows DISABLED !
So, why does grub still check kernel signature ?
I also compiled the custom kernel just as I did before (make, make install).
Any idea what else I can do ?
Thanks
Yes, also in my BIOS there is secured boot option and it is shows DISABLED !
So, why does grub still check kernel signature ?
I also compiled the custom kernel just as I did before (make, make install).
Any idea what else I can do ?
Thanks
Disabling secured boot in grub ?
Hello,
How can we disable secured boot with UEFI ?
In BIOS I see secured boot "DISABLED", but grub still check signature of kernel.
Is there a way to disable grub checking ?
Thanks,
ranran
How can we disable secured boot with UEFI ?
In BIOS I see secured boot "DISABLED", but grub still check signature of kernel.
Is there a way to disable grub checking ?
Thanks,
ranran
Re: vmlinuz-4.18.0 has invalid signature & secured boot
Please don't make duplicate posts, merged into your existing thread.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke
Re: vmlinuz-4.18.0 has invalid signature & secured boot
OK, I opened another thread just because someone above suggested to open a new post for how to disable secured boot...
Thanks
Thanks
-
- Posts: 107
- Joined: 2016/01/12 23:27:04
- Location: Vista California
Re: vmlinuz-4.18.0 has invalid signature & secured boot
I made it work to comment out followings in .config file and build the kernel.
#CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
#CONFIG_SYSTEM_TRUSTED_KEYRING=y
#CONFIG_SYSTEM_TRUSTED_KEYS=""
#CONFIG_MODULE_SIG_ALL=y
#CONFIG_MODULE_SIG_KEY="certs/signing_key.pem"
#CONFIG_SYSTEM_TRUSTED_KEYRING=y
#CONFIG_SYSTEM_TRUSTED_KEYS=""
#CONFIG_MODULE_SIG_ALL=y