Is there a way to add a Machine Owner Key without Serial Console in Azure?

Posted on

We're trying to add a Machine Owner Key (MOK) to RHEL 8 hosts in Azure IL5, and the Serial console functionality is not available.

The key import works successfully, but we can't enter the password on reboot to complete the import.

We can't boot in to Single User Mode without Serial Console, so we're stuck.

Is there a way to complete the import/validation before the reboot takes place, or delay the password entry in MokManager.efi until after the system has booted?

Failing those, is there another way to import Machine Owner Keys in to .platform?

Responses