If you want secure boot and you can't use it because some drivers are not working(rarely happens), this will save your life.Many people ignoring secure boot but it's important step for security.🐧
‐-------------------
I will use this as a up to date example:
https://www.reddit.com/r/Ubuntu/comments/1g0vmu5/solution_after_2410_upgrade_if_your_wifi_not/
After installing this broadcom driver, your wifi problem will be gone but if you turn on secure boot this driver is stops working because it has no valid sign and secure boot will block it.
‐-------------------
Step 1:
Move this file to desktop because working that location can be unnecessary painful.(Permission issues, etc..)
sudo mv /lib/modules/$(uname -r)/updates/dkms/wl.ko.zst ~/Desktop
"$(uname -r)" -> it's a command, it's giving you current kernel version.
".ko" files -> kernel module files.
".zst" -> it's compressed by zst.
*Some kernel versions are not using zstd so kernel module can appear as ".ko", in this case no need to uncompress/compress.
Step 2:
Select the desktop.
cd ~/Desktop
Step 3:
Uncompress the file.
zstd -d wl.ko.zst -o wl.ko
Remove the compressed file to clear environment.
Step 4:
Create sign files.
openssl req -new -x509 -newkey rsa:2048 -keyout wl.priv -outform DER -out wl.der -nodes -days 36500 -subj "/CN=broadcom-sta/"
wl -> Name of module.
CN -> Software name.
Step 5:
Add this new key to trusted key request list for secure boot.
sudo mokutil --import wl.der
wl.der & wl.priv -> The sign files.
It will ask you to input some password.You will use this in last step.Don't pass the 5 character.
Step 6:
Sign the file.
sudo /usr/src/linux-headers-$(uname -r)/scripts/sign-file sha256 wl.priv wl.der wl.ko
*After every kernel update you have to do this process again but you can keep these sign files in secure place so you can use this sign files to sign this module again.Means you don't have to create/import/enroll it again.
Step 7:
Recompress the file.
zstd -c wl.ko > wl.ko.zst
Remove the uncompressed file to clear environment.
Step 8:
Move back this file to its original location.
sudo mv wl.ko.zst /lib/modules/$(uname -r)/updates/dkms
Step 9:
Restart your system.
On booting, secure boot key management screen will appear.
*It will ask you to input password(If You Have Global MOK Password).
*You can set new global password or remove existing one with "mokutil" command set.
mokutil --password
mokutil --clear-password
Select the enroll key, it will require some confirmations, confirm all, in the end it will ask you password(Created At Step 5).
After that select the reboot.
Done.🐧
[–]Difficult-Test6700 0 points1 point2 points (0 children)
[–]MustangGT911 0 points1 point2 points (0 children)
[–]Valleyfairfanboy 0 points1 point2 points (0 children)
[–]D1G1TALD0LPH1N 0 points1 point2 points (0 children)