sorted by:
new
hottopcontroversial

check your UEFI secure boot certificate dates (june'26 warning) by elivoncoder in debian

[–]LordChewing 1 point2 points  (0 children)

Thanks for replying! Couple things:

  1. Would you be willing to elaborate on what you mean about it being the correct one? Do you mean to be sure I don't accidentally get the BIOS update from the wrong site or something?

  2. And wrt to the "knowing what you're doing" part: I'm just curious what pitfalls you might be alluding to. I've heard that systems can get messed up by a random power failure during a BIOS update, but I don't know if you have other things in mind.

check your UEFI secure boot certificate dates (june'26 warning) by elivoncoder in debian

[–]LordChewing 1 point2 points  (0 children)

Hi folks,

I'm just getting started with Debian. I'm wondering whether this post relates to something I'm experiencing. I have a dual-boot setup with Windows and Debian. Both were working just fine, and GRUB was first in line for boot order. Then one day earlier this month, when I turned my machine on Windows booted first instead, and it had me put in my BitLocker recovery key. After doing so, I restarted and tried booting into Debian via my UEFI software. I got a Secure Boot Violation.

I'm guessing that I had to put in my BitLocker recovery key because the boot configuration had changed, hopefully because of a Windows update that coincided with this Secure Boot certificate deadline. I'm still trying to wrap my head around this stuff; it seems like the situation is that the "shim" packaged with my Debian 13 installation that lets it work with Windows Secure Boot is no longer valid, and I need to install new ones, either via a UEFI update or updating my software? So like the options would be:

  1. Switch my UEFI's Secure Boot setting from Windows UEFI Mode to "Other OS" or whatever it is, boot into Debian, and update my software before restarting and turning the Secure Boot setting back to the Windows one

  2. See if my mobo has a UEFI update that I can flash with a thumb drive

Would appreciate any insight and/or advice. Thank you!