Secure Boot - Doesn't work (Specific issue)

Ramalama

Renowned Member
Dec 26, 2020
921
248
68
36
Proxmox 8.2.2/Kernel 6.8.4-3

Hi, i run into the issue, that i enabled secure boot afterwards on one Genoa-Server.
And the issue is, seems to me like a bios bug, i can't deactivate it. Disabling/Clearing Keys/whatever, reset bios to defaults (default is disabled) saving changes and reboot and secure boot is getting enabled again...

The Server was installed with Proxmox 8.2, so shim packages etc are there and the root/boot partition is a zfs-mirror on 2x PM9a3.
So nothing special, i have a lot of other Servers, where secure boot is working perfectly.

But on all other Servers, where Secure Boot is working i have an entry:
Code:
Boot0014* proxmox       HD(2,GPT,52dc79b2-6acc-45ee-87e3-33ad5c9174f4,0x800,0x200000)/File(\EFI\proxmox\shimx64.efi)

On the genoa Server, i don't have the shimx64.efi entry, only this ones:
Code:
Boot0000* Linux Boot Manager    HD(2,GPT,c6c0a538-2238-4f22-be65-28fe18607480,0x800,0x200000)/File(\EFI\systemd\systemd-bootx64.efi)
Boot0002* Linux Boot Manager    HD(2,GPT,77ab7237-b426-46c0-bced-2cf283a338b2,0x800,0x200000)/File(\EFI\systemd\systemd-bootx64.efi)
Boot0003* UEFI OS       HD(2,GPT,77ab7237-b426-46c0-bced-2cf283a338b2,0x800,0x200000)/File(\EFI\BOOT\BOOTX64.EFI)..BO
Boot0004* UEFI OS       HD(2,GPT,c6c0a538-2238-4f22-be65-28fe18607480,0x800,0x200000)/File(\EFI\BOOT\BOOTX64.EFI)..BO

So it makes absolutely sense why it cannot boot. But the shim packages are installed, its weird. Secure booting on a ZFS-mirror should work either as far as i know.
However, im fu... since i cannot disable Secure Boot in Bios (never seen that one too, but definitively some sort of Bug or Genoa limitation)

Anyone has a clue what my options are?
 
I reflashed the Bios xD
That disabled secure boot, glad god and i can boot again.

However, the question still remains, there is no shim entry and i don't have a clue why the proxmox-boot-tool doesn't generate it.