Arch Linux

GauravGhosh

Member

Registered: 2022-06-05

Posts: 16

unable to use grub in secure boot

see i updated windows 11 after that my grub boot loader was missing from uefi boot menu and i did the following:
- i used arch boot and mounted the root and esp
- then ran this `find /boot -iname "*.efi"` and this `efibootmgr -v`
- then checked if efi files are signed or not using :
```
ls -la /boot/EFI/grub_uefi/grubx64.efi /boot/EFI/GRUB/grubx64.efi
sbverify --list /boot/EFI/grub_uefi/grubx64.efi 2>/dev/null || sbverify --list /boot/EFI/GRUB/grubx64.efi 2>/dev/null
```
- then i recreate the NVRAM entry:
```
efibootmgr --create --disk /dev/nvme1n1 --part 1 \
  --label "Arch Linux" \
  --loader '\EFI\grub_uefi\grubx64.efi'
```
- then:
```
efibootmgr -v
efibootmgr -o 0003,0004,2003,2002,2001
exit
umount -R /mnt
reboot
```

after which i can't get grub working with the secure boot which sends me to grub rescue mode and says prohibited by secure boot policy

i have tried re-signing the boodloader but nothing happens since it is already signed it says by i also deleted the all signed key and going to setup mode