[elrepo] Importing keys to run kmod-nvidia with UEFI

[Akemi Yagi]

On Tue, Oct 31, 2017 at 10:33 AM, Akemi Yagi <amyagi at gmail.com> wrote:

> On Mon, Oct 30, 2017 at 11:47 PM, Nicolas Brack <nicolas.brack at mail.be>
> wrote:
>
>> Hello, having repeated crashes with Qt5 and the nouveau driver, I'm
>> trying to install from ELRepo the kmod-nvidia driver/module.  However I
>> installed linux with uefi which prevents me to load the non-signed driver.
>>
>> Following the help from the IRC channel and this page's advice :
>> https://www.elrepo.org/tiki/SecureBootKey , I run the command
>>
>>     mokutil --import /etc/pki/elrepo/SECURE-BOOT-KEY-elrepo.org.der
>>
>> However at bootup, I cannot see the "Shim UEFI Key management" screen.
>> Instead I drop on grub immediately after the bios bootup screen.  Now the
>> key is already enrolled as trying to adding it again result in :
>>
>>     /etc/pki/elrepo/SECURE-BOOT-KEY-elrepo.org.der is already in the
>> enrolment request
>>
>> I cannot see the key in mokutil --list-enrolled but I can see it in
>> mokutil --list-new.  See their output in the attached text files.  What
>> might be the issue ?  What can I do ?  Any help is welcome.  Until then,
>> I'll have to work on windows (T_T)
>>
>
> ​This is quite puzzling. When there is a new key, next reboot should
> automatically start the Mokmanager program. I assume your computer runs
> with UEFI Secure Boot enabled. Can you confirm this by going into the UEFI
> setup utility?
>

​Maybe you were hit buy this bug:

​
https://bugs.centos.org/view.php?id=14050

​"​
 Failed to Enter Shim UEFI key management screen while rebooting on CentOS7
if upgrade to 7-4.1708
​"

(Thanks to TrevorH for providing a pointer.)

Akemi​
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.elrepo.org/pipermail/elrepo/attachments/20171031/e6ba2a05/attachment.html>