#LOOPCAD INVALID SIGNATURE HOW TO#

Openssl x509 -in MOK.der -inform DER -outform PEM -out MOK.pem

Convert the key also to PEM format (mokutil needs DER, sbsign needs PEM):.

Create the public and private key for signing the kernel:.

NsComment = 'OpenSSL Generated Certificate' # This definition stops the following lines failing if HOME isn'tДistinguished_name = req_distinguished_nameДЄuthorityKeyIdentifier = keyid:always,issuerД®xtendedKeyUsage = codeSigning,1.3.6.1.4.1.311.10.3.6

Create the config to create the signing key, save as mokconfig.cnf:.

Instructions adapted from the Ubuntu Blog.Д«efore following, please backup your /boot/EFI directory, so you can restore everything. Since option two and three are not really viable, these are the steps to sign the kernel yourself.

You use a signed, generic kernel of your distro.

Thus you have three options to solve this problem: Upgrade of the grub-efi package, that this kernel is not signed and the upgrade will abort. Users of Ubuntu 18.04 will be notified during Kernels anymore, as long as Secure Boot is enabled. Since the most recent GRUB2 update (2.02+dfsg1-5ubuntu1) in Ubuntu, GRUB2 does not load unsigned

#LOOPCAD INVALID SIGNATURE HOW TO#

Please inform yourself on how to install it correctly, so you do not mess up your bootloader. The ubuntu package for shim is called shim-signed, but HashTool instead of MokUtil for LF Preloader) Should be similar steps to complete the signing (e.g. Instructions are for ubuntu, but should work similar for other distros, if they are using shimДЄnd grub as bootloader. The instructions are reproduced in full as follows: Signing a custom kernel for Secure Boot

Has more specific instructions on kernel signing (adapted from the same tutorial linked in the accepted answer).

Loopcad invalid signature