Secure Boot - Doesn't work (Specific issue)

Ramalama

Well-Known Member
Dec 26, 2020
863
199
53
35
Proxmox 8.2.2/Kernel 6.8.4-3

Hi, i run into the issue, that i enabled secure boot afterwards on one Genoa-Server.
And the issue is, seems to me like a bios bug, i can't deactivate it. Disabling/Clearing Keys/whatever, reset bios to defaults (default is disabled) saving changes and reboot and secure boot is getting enabled again...

The Server was installed with Proxmox 8.2, so shim packages etc are there and the root/boot partition is a zfs-mirror on 2x PM9a3.
So nothing special, i have a lot of other Servers, where secure boot is working perfectly.

But on all other Servers, where Secure Boot is working i have an entry:
Code:
Boot0014* proxmox       HD(2,GPT,52dc79b2-6acc-45ee-87e3-33ad5c9174f4,0x800,0x200000)/File(\EFI\proxmox\shimx64.efi)

On the genoa Server, i don't have the shimx64.efi entry, only this ones:
Code:
Boot0000* Linux Boot Manager    HD(2,GPT,c6c0a538-2238-4f22-be65-28fe18607480,0x800,0x200000)/File(\EFI\systemd\systemd-bootx64.efi)
Boot0002* Linux Boot Manager    HD(2,GPT,77ab7237-b426-46c0-bced-2cf283a338b2,0x800,0x200000)/File(\EFI\systemd\systemd-bootx64.efi)
Boot0003* UEFI OS       HD(2,GPT,77ab7237-b426-46c0-bced-2cf283a338b2,0x800,0x200000)/File(\EFI\BOOT\BOOTX64.EFI)..BO
Boot0004* UEFI OS       HD(2,GPT,c6c0a538-2238-4f22-be65-28fe18607480,0x800,0x200000)/File(\EFI\BOOT\BOOTX64.EFI)..BO

So it makes absolutely sense why it cannot boot. But the shim packages are installed, its weird. Secure booting on a ZFS-mirror should work either as far as i know.
However, im fu... since i cannot disable Secure Boot in Bios (never seen that one too, but definitively some sort of Bug or Genoa limitation)

Anyone has a clue what my options are?
 
I reflashed the Bios xD
That disabled secure boot, glad god and i can boot again.

However, the question still remains, there is no shim entry and i don't have a clue why the proxmox-boot-tool doesn't generate it.
 

About

The Proxmox community has been around for many years and offers help and support for Proxmox VE, Proxmox Backup Server, and Proxmox Mail Gateway.
We think our community is one of the best thanks to people like you!

Get your subscription!

The Proxmox team works very hard to make sure you are running the best software and getting stable updates and security enhancements, as well as quick enterprise support. Tens of thousands of happy customers have a Proxmox subscription. Get yours easily in our online shop.

Buy now!