Skip to content

Monitors disabled after secure boot #506

Description

@ynot01

Commands run:
sudo /home/********/go/bin/sbctl create-keys
sudo /home/********/go/bin/sbctl setup --migrate
Rebooted and cleared old keys
sudo /home/********/go/bin/sbctl enroll-keys -m
Rebooted and enabled secure boot
sudo /home/********/go/bin/sbctl sign -s <each file>
Rebooted after this but monitors were still broken

Only primary monitor "works" with no info available from xrandr locked to 60hz

Disabling secure boot returns function to normal

Linux Mint/Cinnamon Display app Image
xrandr
~$ xrandr
Screen 0: minimum 320 x 200, current 1920 x 1080, maximum 4096 x 4096
None-1 connected primary 1920x1080+0+0 (normal left inverted right x axis y axis) 0mm x 0mm
   1920x1080     60.00*+

NVtop no longer reports the RTX 4070 as active, though it seems it's still detected in lshw. The AMD GPU does not list any processes, strangely

sudo lshw -C video
~$ sudo lshw -C video
  *-display                 
       description: VGA compatible controller
       product: AD104 [GeForce RTX 4070]
       vendor: NVIDIA Corporation
       physical id: 0
       bus info: pci@0000:01:00.0
       logical name: /dev/fb0
       version: a1
       width: 64 bits
       clock: 33MHz
       capabilities: pm msi pciexpress vga_controller cap_list fb
       configuration: depth=32 latency=0 mode=1920x1080 resolution=1920,1080 visual=truecolor xres=1920 yres=1080
       resources: iomemory:f80-f7f iomemory:fc0-fbf memory:fb000000-fbffffff memory:f800000000-fbffffffff memory:fc00000000-fc01ffffff ioport:f000(size=128) memory:fc000000-fc07ffff
  *-display
       description: VGA compatible controller
       product: Raphael
       vendor: Advanced Micro Devices, Inc. [AMD/ATI]
       physical id: 0
       bus info: pci@0000:0d:00.0
       version: c3
       width: 64 bits
       clock: 33MHz
       capabilities: pm pciexpress msi msix vga_controller bus_master cap_list
       configuration: driver=amdgpu latency=0
       resources: iomemory:fc0-fbf iomemory:fc0-fbf irq:60 memory:fc10000000-fc1fffffff memory:fc20000000-fc201fffff ioport:d000(size=256) memory:fca00000-fca7ffff
sbctl verify
~$ sudo /home/********/go/bin/sbctl verify
old configuration detected. Please use `sbctl setup --migrate`
Verifying file database and EFI images in /boot/efi...
✓ /boot/efi/EFI/Microsoft/Boot/qps-ploc/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sk-SK/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ja-JP/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/tr-TR/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/lv-LV/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/nb-NO/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/en-GB/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fi-FI/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/hr-HR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_8086.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/pl-PL/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-PT/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sv-SE/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-CN/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ko-KR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/lt-LT/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ro-RO/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-HK/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/et-EE/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ja-JP/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ko-KR/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/nl-NL/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sr-Latn-RS/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-TW/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/hu-HU/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/en-US/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Boot/bootx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/da-DK/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/en-US/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/es-ES/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/nb-NO/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sv-SE/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Boot/bkpbootx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/bootmgr.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/memtest.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/cs-CZ/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/bg-BG/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/de-DE/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/el-GR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_10df.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-BR/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/cs-CZ/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/it-IT/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sk-SK/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sr-Latn-RS/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/en-GB/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/Resources/bootres.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/es-MX/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/et-EE/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/es-MX/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fr-CA/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fr-FR/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/hu-HU/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/ubuntu/shimx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/el-GR/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/es-ES/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/nl-NL/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ru-RU/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/da-DK/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fr-CA/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_1414.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_15b3.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/uk-UA/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Boot/grubx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/cs-CZ/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/it-IT/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_07_1415.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/lt-LT/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/tr-TR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Boot/fbx64.efi is signed
✓ /boot/efi/EFI/Boot/mmx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/bg-BG/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/it-IT/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sl-SI/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-TW/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fr-FR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_15ad.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/ro-RO/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_1137.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/nl-NL/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-PT/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/ubuntu/mmx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/el-GR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kdnet_uart16550.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/pl-PL/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-BR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ru-RU/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-HK/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/da-DK/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/hr-HR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fi-FI/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/ru-RU/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_1af4.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/qps-plocm/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/tr-TR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fr-FR/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-CN/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-HK/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/fi-FI/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_0C_8086.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/kdstub.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/pl-PL/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-PT/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sr-Latn-CS/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-CN/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/en-US/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/es-ES/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/hu-HU/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_1969.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/nb-NO/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sl-SI/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/sv-SE/memtest.efi.mui is signed
✓ /boot/efi/EFI/ubuntu/grubx64.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/ja-JP/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/Resources/en-US/bootres.dll.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/SecureBootRecovery.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/cbmr_driver.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/de-DE/bootmgfw.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_10ec.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_14e4.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/ko-KR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/de-DE/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/kd_02_19a2.dll is signed
✓ /boot/efi/EFI/Microsoft/Boot/pt-BR/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/uk-UA/bootmgr.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/zh-TW/memtest.efi.mui is signed
✓ /boot/efi/EFI/Microsoft/Boot/bootmgfw.efi is signed
✓ /boot/efi/EFI/Microsoft/Boot/lv-LV/bootmgr.efi.mui is signed
sbctl status
~$ sudo /home/********/go/bin/sbctl status
old configuration detected. Please use `sbctl setup --migrate`
Installed:	✓ sbctl is installed
Owner GUID:	2c748487-d324-4f88-8fe5-884599e22733
Setup Mode:	✓ Disabled
Secure Boot:	✓ Enabled
Vendor Keys:	microsoft
sbctl setup --migrate
~$ sudo /home/********/go/bin/sbctl setup --migrate
old configuration detected. Please use `sbctl setup --migrate`
sbctl has already been migrated!

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions