Stream9 Bad Shim Signature

I updated to 5.14.0-176.e19.x86_64 Stream 9 from I updated to 5.14.0-168.e19.x86_64 Stream 9. On load I get the error(s):

error: …/…/grub-core/kern/efi/sb.c:183:bad shim signature
error: …/…/grub-core/loader/i386/efi/linux.c:259:you need to load the kernal first

I can still boot into 5.14.0-168.e19.x86_64 Stream 9 without disabling secure boot. I do not want to disable secure boot. What has changed to affect this and/or is there a fix for this?

I too am having the same issue. Update downloaded both 176 and 171. Neither will boot. Had to regress to 163.

Is there any resolution to this? I ma having the same issue with a VM.

The last kernel I can boot is 168.

From the bug report, this looks to be resolved as of kernel-5.14.0-183.el9, which I can see published in the repos already.

I installed kernel-5.14.0-183.el9 and now it hangs on startup - I get the “circle of death.” Essentially before the login screen it just hangs ‘forever’ – at least it is a slight improvement, but without any error messages I cannot debug or share more info than this.

I updated to kernel-5.14.0-191.el9 and it hangs on startup — same as above.

Hi Brian, I assume that you have LVM configured. I had the same problem.

Try to delete (its safe to delete or put it aside) following file and boot again with the newer kernel.


The cause seems to be a regression / updated code that handle that content …


Your solution did indeed work. I deleted /etc/lvm/devices/system.devices using 168 and then successfully booted into 191.