About Device Security Errors in Fedora Workstation 41

Dear valued community members and development team,

I’ve been trying to upload a screenshot, but I think there’s an issue with the forum as the images aren’t loading. In the device security section, I’m getting the following errors:

  1. Hardware-based security checks failed.
  2. Secure boot issue.

What can I do about these errors?

Thank you.

Can you copy-n-paste these messages are text?
If a GUI is it able to create a text report you can copy-n-paste here?

Where are see you this “device security section”?

Assuming this is Fedora Workstation:
gnome settings → Device Security

You should be able to click in the left box and copy technical report

You can doublecheck secure boot with mokutil --sb-state

1 Like

Hello, thank you for your interest. I will send you messages in detail.

Hello, thank you for your interest. The screenshot you sent is the screen where I receive the error messages. Is the command you sent the solution to this problem?

No it will provide additional information about the problem. Thanks.

1 Like

Thank you again. I will transfer this additional information here and hopefully I will not have any problems with the screenshot. I will send it as soon as possible.

You should be able to copy and paste the text.

1 Like

Yes, I will do this during the day.

It was finally possible to upload the screenshots.

I do not know the language that the screen shots are in.

  1. Security Checks Failed: The hardware failed the checks. This means that you are not protected against common hardware security issues. Hardware security issues can be resolved by updating the firmware or changing the device configuration options. However, failures can be caused by the physical hardware itself and may not be fixable.

  2. Secure Boot Problem: Secure boot prevents malware from loading when the device boots up. It’s currently powered on, but it won’t work because it has an invalid key.

Secure boot issues can often be resolved through your device’s UEFI firmware settings (BIOS). Your hardware manufacturer can provide information on how to do this.

Contact your hardware manufacturer or IT support for assistance.

First confirm that secure boot is disabled from the terminal.

$ mokutil --sb-state
SecureBoot enabled

You can normally enable secure boot in your machines BIOS.
Please try doing that if you want secure-boot enabled.

Edit: Fix mokutil example.

Can you please write it correctly?

I fixed the mokutil command sorry for the typo.

1 Like

Unfortunately, I don’t see anything other than the command not found error.

It is a convention to show the $ prompt when showing example commands.
You seem to have pasted all the text I posted, including the output.

This is the command.

mokutil --sb-state

Yes, it is more understandable now. In general, commands are provided in raw form in many distributions, I am not familiar with this, so I will try the command you sent. Will this be a solution for both?

If you run

export LC_ALL=C.utf8

before running any other commands, the result will be shown in English which is understood by a wider audience. This is only temporary so nothing is changed permanently.

2 Likes

I’ve sent a detailed report on this to relnotes@fedoraproject.org. I hope they can help with a device support update or whatever is needed.