Ubuntu中文论坛

小白一个， 百度找了很久 解决不了问题，


┌────────────────────────┤ Configuring Secure Boot ├────────────────────────┐
│ │
│ Your system has UEFI Secure Boot enabled.
│
│ UEFI Secure Boot requires additional configuration to work with
│ third-party drivers.
│
│ The system will assist you in configuring UEFI Secure Boot. To permit
│ the use of third-party drivers, a new Machine-Owner Key (MOK) has been
│ generated. This key now needs to be enrolled in your system's firmware.
│
│ To ensure that this change is being made by you as an authorized user,
│ and not by an attacker, you must choose a password now and then confirm
│ the change after reboot using the same password, in both the "Enroll
│ MOK" and "Change Secure Boot state" menus that will be presented to you
│ when this system reboots.
If you proceed but do not confirm the password upon reboot, Ubuntu will
│ still be able to boot on your system but any hardware that requires
│ third-party drivers to work correctly may not be usable.


大概问题就是在这吧，然后不懂怎么弄了。。。HP笔记本

你需要的不是百度，而是英汉辞典。你看明白这段话要你做些什么然后照做就完了。
当然最简单的还是直接到bios设定里把secure boot功能关掉

astolia 写了： ↑2019-11-20 21:39 直接到bios设定里把secure boot功能关掉最简单

问题是找不到 secure boot 在哪关。。。

自己到惠普官网上下载你笔记本型号对应的说明书，上面应该有写。如果是跟微软有交易关不了的，你还是要按上面那段写的做才行

提住，不知道你解决了没有？我也找不到WiFi适配器

bios里仔细翻翻，找到secure boot ，也可能networkmanager未委托
sed 's/managed=false/managed=true/g' -i /etc/NetworkManager/NetworkManager.conf
printf ",except:type:ethernet" >> /usr/lib/NetworkManager/conf.d/10-globally-managed-devices.conf
service network-manager restart

这么做：

1. 用openssl生成x509私钥和证书文件

2. 用/usr/src/<当前内核>/scripts/sign-file、生成的私钥和证书，给驱动模块做安全签名

3. 开启mok验证
<code>
sudo mokutil --enable-validation
</code>

4. 向mok注册安全证书

两种办法，
a）输入上面命令后，重启，开机会弹出mok的注册程序，选择正确的硬盘、分区和路径，把生成的证书文件加进去，之前会要求输入mok的管理密码
b)
<code>
sudo mokutil --import <path_to_your_der_file>.der
</code>

5 重启