Unable to boot after importing key with mokutil

Ask Fedora
,
1

I am having problems with SELinux/tuned-ppd and somehow landed on the idea that enabling secure boot might be a good idea.

I am following the instructions on /usr/share/doc/akmods/README.secureboot.

At the point:

  • Ask MOK to enroll new keypair with certificate with the command
    mokutil --import /etc/pki/akmods/certs/public_key.der.
  • mokutil asks to generate a password to enroll the public key.
  • Rebooting the system is needed for MOK to enroll the new public key.

Rebooting the system causes

Failed to open \efi\boot\mmx64.efi - Not Found

and the laptop clicks off. The best solution I could find was then reinstalling grub (with shim) from Fedora Live.

Is the mistake I made in following the instructions obvious? Is there a set of instructions that won’t break my boot?

Thank you!

3

With a little bit of luck you can try to boot the live system iso. Otherwise it could become quite difficult because the mok update request is stored in the firmware memory.

If it works as I expect you would be prompted to complete the mok enroll process, and you should be able to boot normally after that. If that works, show us the result of the command sudo find /boot/efi.

1 Like
4

I was able to fix things (I think) by following these instructions:

My /boot/efi folder has both Fedora and Microsoft directories.

I may leave secure boot off in the near term. The hassle of MOK wrecking things is greater than whatever I think I’m doing wrong by unchecking that secure boot box.