Reset bazzite mok key
While trying to get secure boot with refind working I accidentally messed up and deleted all my secure boot keys and now it won't boot grub with secure boot.
Trying the enroll keys ujust fails to register the key as it thinks it's already registered.
Solution:Jump to solution
yup there was a
mokutil --reset didnt see that :mrpgSighFacePalm: that fixed it for me3 Replies
Have a look here - https://github.com/ublue-os/bazzite/blob/main/README.md#secure-boot
GitHub
bazzite/README.md at main · ublue-os/bazzite
Bazzite is a cloud native image built upon Fedora Atomic Desktops that brings the best of Linux gaming to all of your devices - including your favorite handheld. - ublue-os/bazzite
The public key link is there and some instructions for a different method after rebasing. I'd expect you can also import the public key file from a USB directly in the BIOS.
You can also run mokutil directly. mokutil --help gives a list of options.
Having a look at it I'm not sure on that importing via BIOS... trying to wrap my head around how all this works :/
Turns out I didn't have SB enabled. After a bit of wrestling with mokutil --delete I did get my Bazzite to refuse to boot. Turned off SB, did "sudo mokutil --import secure_boot.der", enrolled the key at boto and enabled SB again.
Could not find something in the BIOS I was willing to press to directly import the DER...
Solution
yup there was a
mokutil --reset didnt see that :mrpgSighFacePalm: that fixed it for me