[elrepo] Importing keys to run kmod-nvidia with UEFI

[Nicolas Brack]

I followed the link and entered the command to uninstall the centos mokutil and install the elrepo ones instead. Right after I rebooted.  But now the ASUS BIOS will plain refuse to boot on CentOS...
I can save my data with a live session, so I don't mind reinstalling centos in time. However is there a way to install centos with the signed elrepo nvidia driver and without having to fickle with mokutil afterwards (and without having to touch my windows partition) ?

Thank you!

> Date: Tue, 31 Oct 2017 12:56:17 -0700
> From: Akemi Yagi <amyagi at gmail.com>
> To: EL Repo General Mailing List <elrepo at lists.elrepo.org>
> Subject: Re: [elrepo] Importing keys to run kmod-nvidia with UEFI
> Message-ID:
> 	<CABA31DqeszEegw8D-BzaG_KxZCFNeqNWPn+535crUrWomtCXdA at mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
> 
> On Tue, Oct 31, 2017 at 10:33 AM, Akemi Yagi <amyagi at gmail.com> wrote:
> 
> > On Mon, Oct 30, 2017 at 11:47 PM, Nicolas Brack <nicolas.brack at mail.be>
> > wrote:
> >
> >> Hello, having repeated crashes with Qt5 and the nouveau driver, I'm
> >> trying to install from ELRepo the kmod-nvidia driver/module.  However I
> >> installed linux with uefi which prevents me to load the non-signed driver.
> >>
> >> Following the help from the IRC channel and this page's advice :
> >> https://www.elrepo.org/tiki/SecureBootKey , I run the command
> >>
> >>     mokutil --import /etc/pki/elrepo/SECURE-BOOT-KEY-elrepo.org.der
> >>
> >> However at bootup, I cannot see the "Shim UEFI Key management" screen.
> >> Instead I drop on grub immediately after the bios bootup screen.  Now the
> >> key is already enrolled as trying to adding it again result in :
> >>
> >>     /etc/pki/elrepo/SECURE-BOOT-KEY-elrepo.org.der is already in the
> >> enrolment request
> >>
> >> I cannot see the key in mokutil --list-enrolled but I can see it in
> >> mokutil --list-new.  See their output in the attached text files.  What
> >> might be the issue ?  What can I do ?  Any help is welcome.  Until then,
> >> I'll have to work on windows (T_T)
> >>
> >
> > ?This is quite puzzling. When there is a new key, next reboot should
> > automatically start the Mokmanager program. I assume your computer runs
> > with UEFI Secure Boot enabled. Can you confirm this by going into the UEFI
> > setup utility?
> >
> 
> ?Maybe you were hit buy this bug:
> 
> ?
> https://bugs.centos.org/view.php?id=14050
> 
> ?"?
>  Failed to Enter Shim UEFI key management screen while rebooting on CentOS7
> if upgrade to 7-4.1708
> ?"
> 
> (Thanks to TrevorH for providing a pointer.)
> 
> Akemi?
> -------------- next part --------------
> An HTML attachment was scrubbed...
> URL: <http://lists.elrepo.org/pipermail/elrepo/attachments/20171031/e6ba2a05/attachment-0001.html>
> 
> ------------------------------
>