Trouble enabling Secure Boot after updating Proxmox from 8.0 to 8.1

[ExtremeDude]

I have updated my Proxmox system (Dell Precision 7820) in hopes of enabling Secure Boot (I technically do not need this, but it is something that I would like to have and can do a clean install for if I must). I'm fairly new to Linux, but am not afraid of CLI. I have tried following this guide ( Host System Administration (proxmox.com ), but have not had any luck getting it add the shim to my boot manager. I was using systemd previously and have successfully switched over to Grub.

I have installed the following packages:

• shim-signed (shim bootloader signed by Microsoft)
• shim-helpers-amd64-signed (fallback bootloader and MOKManager, signed by Proxmox)
• grub-efi-amd64-signed (Grub EFI bootloader, signed by Proxmox)
• proxmox-kernel-6.X.Y-Z-pve-signed (Kernel image, signed by Proxmox)

However there is no shimx64.efi in "\EFI\proxmox\", only grubx64.efi. I was able to find the shim installed to a different folder and attempted to copy it over, but it gave me a security error (https://i.imgur.com/lkvSIMn.jpg) so I'm almost certain that I must have some sort of configuration problem.

My efibootmgr -v output looks like this:

"BootOrder: 0001,0000,0002,0009,000A,0004,0005,0006,0007

Boot0000* proxmox HD(2,GPT,79d57820-94f2-472f-915c-2034064337db,0x800,0x200000)/File(\EFI\proxmox\grubx64.efi)

Boot0001 proxmox_secure PciRoot(0x3)/Pci(0x2,0x0)/Pci(0x0,0x0)/NVMe(0x1,00-1B-44-8B-4A-88-49-D0)/HD(2,GPT,79d57820-94f2-472f-915c-2034064337db,0x800,0x200000)/File(\EFI\proxmox\shimx64.efi)

Boot0002* UEFI: WD Red SN700 2000GB HD(2,GPT,79d57820-94f2-472f-915c-2034064337db,0x800,0x200000)/File(EFI\boot\bootx64.efi)..BO"

+ some network adaptors. The second entry is one that I created manually and was unsuccessful.

Any help would be appreciated.

 

[Maximiliano]

Hello,

I would personally advice to do a clean install with the 8.1 ISO, that is a clean way to enjoy the benefits of secure boot.

By manually enabling secure boot it is possible to get in tricky situations, but it is certainly not impossible. You can find more info at [1].

[1] https://pve.proxmox.com/wiki/Secure_Boot_Setup#Setup_instructions_for_shim_.2B_MOK_variant

 

[ExtremeDude]

Hello,

I would personally advice to do a clean install with the 8.1 ISO, that is a clean way to enjoy the benefits of secure boot.

By manually enabling secure it is possible to get in tricky situations, but it is certainly not impossible. You can find more info at [1].

[1] https://pve.proxmox.com/wiki/Secure_Boot_Setup#Setup_instructions_for_shim_.2B_MOK_variant

Thank you for your advice, I will probably do a reinstall in the future.

 

[xed]

Does this mean that the process to enable SB is undocumented/unsupported despite upgrading to 8.2?

 

[xed]

Oh: https://forum.proxmox.com/threads/proxmox-8-1-upgrade-and-secure-boot.136973/