Skip to content

Secure Boot issues: Key was rejected by service #3

Description

@red-black-bonsai

Hi and thanks a LOT for the package, you really helped me out! :-)

I ran into issues with Secure Boot rejecting the module and it took me a while to figure out what was going on, so I wrote it up. Maybe you want to add this to the docs?

Module works fine now, thanks again! :-)

Issues with Secure Boot

Error when trying to load the module with modprobe:

modprobe: ERROR: could not insert 'r8126': Key was rejected by service

Problem:

DKMS signed the r8126 module with a MOK key that isn't enrolled correctly and Secure Boot rejects it.

Which MOK key DKMS is using to sign the module is configured in /etc/dkms/framework.conf with mok_signing_key - by default it's /var/lib/dkms/mok.key.

Solution:

Enroll the key

TLDR:

mokutil --import /var/lib/shim-signed/mok/MOK.der

Set a password when prompted. Reboot and go through MOK enrolment.
Type in the password set with mokutil. Continue reboot. Rejoice.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions