How to sign kernel modules for SecureBoot with "mokutil" ?
Issue
- Reference Link : SecureBoot
- Steps to reproduce:
- Downloaded the SECURE-BOOT-KEY-elrepo.org.der from ELRepo
- Copied key to offline machine to /etc/pki/elrepo. Also tried from /var/tmp.
root@localhost tmp]# mokutil --import /var/tmp/SECURE-BOOT-KEY-elrepo.org.der
input password:
input password again:
Failed to enroll new keys
[root@localhost tmp]# cd /etc/pki/
[root@localhost pki]# mkdir elrepo
[root@localhost pki]# cd elrepo/
[root@localhost elrepo]# cp /var/tmp/SECURE-BOOT-KEY-elrepo.org.der /etc/pki/elrepo/
[root@localhost elrepo]# pwd
/etc/pki/elrepo
[root@localhost elrepo]# ls
SECURE-BOOT-KEY-elrepo.org.der
[root@localhost elrepo]# mokutil --import /etc/pki/elrepo/SECURE-BOOT-KEY-elrepo.org.der
input password:
input password again:
Failed to enroll new keys
[root@localhost elrepo]# mokutil --list-enrolled
MokListRT is empty
- Also referenced: Kernel Administration Guide
Environment
Red Hat Enterprise Linux 7.2
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.
