How to sign kernel modules for SecureBoot with "mokutil" ?

Solution Unverified - Updated -

Issue

  • Reference Link : SecureBoot
  • Steps to reproduce:
  • Downloaded the SECURE-BOOT-KEY-elrepo.org.der from ELRepo
  • Copied key to offline machine to /etc/pki/elrepo. Also tried from /var/tmp.
root@localhost tmp]# mokutil --import /var/tmp/SECURE-BOOT-KEY-elrepo.org.der
input password:
input password again:
Failed to enroll new keys
[root@localhost tmp]# cd /etc/pki/
[root@localhost pki]# mkdir elrepo
[root@localhost pki]# cd elrepo/
[root@localhost elrepo]# cp /var/tmp/SECURE-BOOT-KEY-elrepo.org.der /etc/pki/elrepo/
[root@localhost elrepo]# pwd
/etc/pki/elrepo
[root@localhost elrepo]# ls
SECURE-BOOT-KEY-elrepo.org.der
[root@localhost elrepo]# mokutil --import /etc/pki/elrepo/SECURE-BOOT-KEY-elrepo.org.der
input password:
input password again:
Failed to enroll new keys
[root@localhost elrepo]#  mokutil --list-enrolled
MokListRT is empty

Environment

  • Red Hat Enterprise Linux 7.2

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.