Hello,
I have a dual-boot computer running Fedora 41 and Windows 11 with Secure Boot enabled.
The computer specifications are as follows: GPU Nvidia 4080 Super and CPU AMD Ryzen 7 9750X3D.
I successfully installed the Nvidia drivers using the official installer from the manufacturer (not the ones provided by Fedora’s repositories) by blacklisting the Nouveau drivers in the kernel startup line, following the suggestions on this website: link. I want to clarify that this entire procedure was carried out with Secure Boot active.
During the first installation of the Nvidia drivers, I had the installer generate new certificates to sign the video drivers, which I then correctly appended to the original Windows certificates. Initially, the /lib/modules/<kernel>/extra/ directory contained all the uncompressed Nvidia driver files. However, after a kernel update, the video drivers failed to load.
I immediately noticed that the files in the mentioned directory had changed from .ko to .ko.xz. According to the kernel startup logs obtained via dmesg, the system could not recognize the drivers’ signature. I attempted to sign the drivers (removing the compression and then reapplying it using the xz and unxz commands without encountering errors) with the certificates previously generated by the Nvidia installer. Unfortunately, this did not resolve the issue, as the drivers still failed to load.
Did you follow the instructions in the rpmfusion nvidia docs that said to setup secure boot keys? If so the nvidia driver will have been signed when it was built by akmods.
If you set up the keys after building the driver then you will need to force akmods to rebuild it using sudo akmods --force --rebuild (i think thats the command).
Many users who follow the directions from INTTF seem to have problems.
As Barry suggested use the linked instructions and for some it even requires that they remove everything installed using the INTTF instructions and reinstall the drivers as shown at https://rpmfusion.org/Howto/NVIDIA?highlight=(\bCategoryHowto\b)
Hi, I had a similar problem. Same setup: dual boot with Fedora 41 and Win11 with secure boot enabled. Installed Nvidia drivers via the graphical Software tool. Everything appeared to have worked, including creation of the certificates in the UEFI db. However nvidia driver was not loading. I checked if the Nvidia kernel modules were signed. They were NOT signed.
Solution was to uninstall and reinstall the driver using again the Software tool. After this Nvidia modules were signed, were loaded into the kernel and everything worked fine.
Verify the key has been imported into bios using the instructions in the file /usr/share/doc/akmods/README.secureboot.
or
follow the instructions at https://rpmfusion.org/Howto/Secure%20Boot as linked above
Rebuild the drivers using the command sudo akmods --rebuild --force
The NVIDIA modules were loading, but they didn’t detect the graphics card. I checked multiple times with nvidia-smi. Secure Boot was not enabled, and the Nouveau drivers were blacklisted; in fact, I couldn’t see them with lsmod.
Thanks to everyone, I found the solution on my own by editing the file /etc/dkms/framework.conf and adding the signing keys generated by the NVIDIA installer with the following lines: mok_signing_key=/var/lib/dkms/mok.key mok_certificate=/var/lib/dkms/mok.pub
While performing system updates through Discovery, during the kernel update from 6.11.10 to 6.11.11.
Generally the suggestions here assume you have installed the drivers from the rpmfusion repo which uses akmods to build the modules. When installing from the nvidia.com source or the guide from inttf it uses dkms to build the drivers.
Signing the modules is managed differently by those two methods so it is always helpful to tell us the source of the drivers (which you did in the OP). The discussion has focused on the suggestions to remove the drivers you had already installed and reinstall from the rpmfusion repo.
Since it was not noted that you did not follow that suggestion, everything has been said assuming the switch of source for the drivers and thus was not an effective solution.
I doubt it. Such a discussion could quickly get into the weeds and sidetracked by personal opinions and preferences leading to disputes.
There is documentation at nvidia.com where you download the .run file for installation and INTTF has their own documentation.
Neither are fedora specific nor tweaked and tested to work properly with fedora.
The drivers installed from rpmfusion are specifically tested and tweaked to work on fedora and their documentation is specific to installation on fedora.
A problem with documentation needs to addressed by the people who provided the documentation. Fedora people can’t be responsible for 3rd party documentation.
I am aware that Fedora is not responsible for third-party documentation. However, my goal was to leave a trace for the more “tech-savvy” users on how I tackled the issue. I would also have warned that what I described might not work for everyone. It would be interesting to receive feedback on how to improve it, even though I don’t have particular expectations in this regard.