[SOLVED] Import secure boot certificate used by Proxmox

Apr 28, 2024
1
0
1
Hello, for some reason the mainboard I'm using is not shipping any secure boot certificates by default.
There is an option to install them but unfortunately is not doing anything.
This was working in the past but bricked with the latest bios update.
As a result Proxmox is not booting when secure boot is enabled.
The UEFI setup provides the option to manually import certificates so I'm wondering where to get the correct one used by Proxmox.
Thank you.

Solved:
Microsoft certificates are available at https://github.com/microsoft/secureboot_objects
Go to the release section and download the platform certificates, eg. edk2-x64-secureboot-binaries.zip.
Follow the procedure of your mainboard to install the certificates:
  • DefaultPk.bin - Microsoft Platform Key (PK)
  • DefaultKek.bin - Microsoft Key Exchange Key (KEK)
  • Default3PDb.bin - Microsoft and Third Party Signature Database (DB)
  • DefaultDbx.bin - Forbidden Signatures Database (DBX)
Proxmox with secure boot is now working for me.
 
Last edited:

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!