0
How do I use shim with Fedora 20? I have the KDE version, if you need to know that. Running kernel 3.11, with secure boot enabled. At boot, this message is shown:
EFI: Problem loading in-kernel x.509 certificate (-129)
How do I get rid of this message using shim? I already have shim.efi in my /boot/efi/EFI/fedora/ directory.
Thanks for your help.
user267685
Posted 2014-06-13T05:42:18.820
Reputation: 101
1
If you're using a standard Fedora kernel, that message should not appear, since the standard kernel is signed. If you're using a locally-compiled kernel, you should be able to sign it with your own key and enroll that key as a Machine Owner Key (MOK) so that Shim will give it the thumbs-up. For more on this topic, see my page on Secure Boot or various other pages that describe the same topic but that I don't happen to have bookmarked.
If you're booting a standard kernel and seeing that message, then that suggests a bug somewhere along the line. The most reliable way to bypass it is to disable Secure Boot in your firmware. The details of how to do this depend greatly on your EFI implementation, so I can't be very specific about it.
Rod Smith
Posted 2014-06-13T05:42:18.820
Reputation: 18 427
Nobody??? I'm still clueless here. – user267685 – 2014-06-28T07:53:13.210
You say it "hangs for 5 seconds." That implies it then proceeds normally. If so, then the problem is solved, although a 5-second delay might constitute another problem. Also, concerning your original post, you haven't really identified a problem -- just a message that you don't want to see. Are you experiencing any actual functional problems, aside from that message? – Rod Smith – 2014-06-29T14:01:41.377
No, not really, although the wireless does not work...
modprobe wlreturnsmodprobe: ERROR: could not insert 'wl': Required key not availablewhich probably has something to do with SB. – user267685 – 2014-07-06T06:59:56.223I recommend you start a new question about your WiFi problem. It may well be related to Secure Boot, but the way your question is phrased now does not make it clear what the real problem is. It's been long enough that re-phrasing your current question will not attract new eyeballs to it. – Rod Smith – 2014-07-06T13:58:42.870
Ok, sigh. Will start new post – user267685 – 2014-07-09T04:09:41.677
Thanks for the reply, however, I am not very tech-savvy, and I am just starting to learn Linux. I have seen your page on SB before, but I do not know how to follow the instructions. I have shim.efi already, I just don't know how to add it to GRUB2 configuration. – user267685 – 2014-06-15T09:31:46.133
PS: I am using the standard F20 3.11 kernel. – user267685 – 2014-06-15T09:32:25.583
I know how to disable SB, but don't want to for this reason: After I do, it gives me a delay during boot saying
Booting in insecure modeThen, it hangs for 5 seconds. :( – user267685 – 2014-06-15T09:33:19.683Any ideas??? Sorry for being a noob :D – user267685 – 2014-06-16T08:33:21.593