What I am trying to do this on:
Dell Inspiron 7506 2in1 Black Edition with Kubuntu 21.04.
I have followed the instructions at https://www.rodsbooks.com/refind/secureboot.html#installation but most of them don't apply to me.
I have:
- Installed rEFInd by the repository
sudo apt-add-repository ppa:rodsmith/refind
sudo apt update
sudo apt install refind
This method does steps 1-6 of the linked page automatically and creates refind_local.crt/.cer/.key in /etc/refind.d/keys/ and also copies the .cer and .crt to /boot/efi/EFI/refind/keys
Enrolled refind_local.cer with mokmanager (mokutil -i refind_local.cer
) and enrolled the key upon rebooting.
Signed my kernel as suggested on the Arch Wiki with sbsign --cert /etc/refind.d/keys/refind_local.crt --key /etc/refind.d/keys/refind_local.key --output vmlinuz-5.11.0-25-generic vmlinuz-5.11.0-25-generic
Now the problem:
Whenever I try to boot with rEFInd I get the blue MOK screen which says ERROR Verification Failed: 0x1A security violation and the only option is to select OK. Upon selecting OK, I enter my MOK password and get taken to the MOK management screen with the options to continue or enroll a key or a hash. Continuing fails with an identical screen to the first and drops me at grub which boots fine.
Is there anything more I need to do to get refind to boot properly like grub does?