![]() If all goes well, you'll be asked to press a key to begin MOK management, then asked for a password - enter the new one you gave mokutil. Note that sudo may ask for your account password then mokutil will ask for a new password, and confirmation thereof. You begin by passing the MOK.cer file to mokutil: sudo mokutil -i MOK.cer ![]() This can be done in various ways, but the easiest is likely to be to use mokutil. Install this MOK in your computer's NVRAM. Openssl x509 -in MOK.crt -out MOK.cer -outform DER This is done by issuing two commands: openssl req -new -x509 -newkey rsa:2048 -keyout MOK.key -out MOK.crt -nodes -days 3650 -subj "/CN=Your Name/" Using a shell (Terminal program or text-mode login), create and change into a temporary directory.Ĭreate a MOK. To do this, you must have both openssl and mokutil programs installed (from the openssl and mokutil packages, respectively). Second, to answer your question, you must first have a Secure Boot Machine Owner Key (MOK) or Secure Boot db key installed in your computer. I mention this because, if you can edit your question's title, doing so would be helpful to others. Secure Boot can be enabled or disabled and isn't even present on some (mostly older) EFI/UEFI implementations. ![]() ![]() First, the issue isn't with EFI it's with Secure Boot, which is just one specific UEFI feature. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |