Secure Boot Violation

Hello, I try install Fedora 41. Create boot disk with dd command. But when I change boot order and choose my boot disk I get “Secure Boot Violation/ Invalid signature detected”. I have Lenovo L15 with latest BIOS.

Have you used Windows 11 before? I had the same problem (about month ago)…

Windows 10, it is dual boot. I have two same notebooks on desk. First works without problems. Now I have second and not boot.
Now I compared the BIOSes and found that the first one has an older BIOS version and there are differences in Secure Boot Key Management.
Hmm it looks like I found a “bug”

I’m not a profi but as far as I understand, the UEFI revocation database was updated by Microsoft in December/January and the F41 signing key is no longer valid.

In my case, I switched completely to Fedora and chose the right path - I reflashed the BIOS (+reset TPM module, +secure erase my SSD’s) from scratch and then successfully installed Fedora, and then update UEFI DB via fwupdmgr to actual state. (<-upd here)

If you not have a plan to use dual boot as me you can follow my steps …