Cannot apply the Secure Boot dbx Configuration Update

Ask Fedora
, , ,
1

Hello, I am new here and also kind of a noob so please keep that in mind.

I cannot install the Secure Boot dbx Configuration Update.

image

The button doesn’t do anything. I tried waiting for the fwupd update as suggested in another thread but it didn’t help.

I ran some of the recommended commands from that thread.

sudo fwupdmgr refresh ; sudo fwupdmgr get-updates gives me this output:

WARNING: UEFI ESP partition not detected or configured
See PluginFlag:esp not found · fwupd/fwupd Wiki · GitHub for more information.
Firmware metadata last refresh: 23 minutes ago. Use --force to refresh again.
WARNING: UEFI ESP partition not detected or configured
See PluginFlag:esp not found · fwupd/fwupd Wiki · GitHub for more information.
Devices with no available firmware updates:
• System Firmware
• WD Blue SN570 1TB

Devices that were not updated correctly:

• UEFI dbx (77 → 217)

I also ran sudo /usr/bin/fwupdtool esp-list --verbose and got this:

18:30:01:0709 FuDebug Verbose debugging enabled (on console 1)
18:30:01:0713 FuVolume device /org/freedesktop/UDisks2/block_devices/nvme0n1p2, type: 0x83, internal: 1, fs: ext4
18:30:01:0714 FuVolume device /org/freedesktop/UDisks2/block_devices/nvme0n1p3, type: 0x83, internal: 1, fs: btrfs
18:30:01:0715 FuVolume device /org/freedesktop/UDisks2/block_devices/nvme0n1p1, type: 0x0c, internal: 1, fs: vfat
18:30:01:0715 FuContext no volumes of type c12a7328-f81f-11d2-ba4b-00a0c93ec93b
18:30:01:0718 FuVolume device /org/freedesktop/UDisks2/block_devices/nvme0n1p2, type: 0x83, internal: 1, fs: ext4
18:30:01:0719 FuVolume device /org/freedesktop/UDisks2/block_devices/nvme0n1p3, type: 0x83, internal: 1, fs: btrfs
18:30:01:0720 FuVolume device /org/freedesktop/UDisks2/block_devices/nvme0n1p1, type: 0x0c, internal: 1, fs: vfat
18:30:01:0720 FuContext no volumes of type ebd0a0a2-b9e5-4433-87c0-68b6b72699c7
No ESP or BDP found

I would appreciate any advice from more experienced users.

2

I was able to solve my problem using recommendations from this reddit thread that I also created:

In short:

Edit the file /etc/fwupd/uefi.conf

add OverrideESPMountPoint=/boot/efi

I was able to apply the update after editing the UEFI config file…

Another recommendation:

  1. Save all your data.
  2. Convert the disk to gpt (it deletes all the partitions and data)
  3. Reinstall fedora in UEFI mode.
1 Like