(Solved) Framework Desktop: Secure Boot is active but no config checksum is enrolled

Framework Desktop Linux
1

Which Linux distro are you using?

CachyOS

Which release version?
(if rolling release without a release version, skip this question)

Rolling release

(If rolling release, last date updated?)

Today

Which kernel are you using?

6.19.11-1-cachyos

Which BIOS version are you using?

03.04 according to dmidecode

Which Framework Desktop model are you using? (AMD Ryzen™ AI Max 300 Series)

AMD RYZEN AI MAX+ 395 w/ Radeon 8060S

Hello,

I just updated the firmware on my Firmware Desktop but I get following secure boot error upon boot:

PANIC: !!! SECURE BOOT IS ACTIVE BUT NO CONFIG CHECKSUM IS ENROLLED !!!
Stacktrace:
  [0x72f4039d] <panic+0x9d>
  [0x72f395ac] <init_confi+0x94c>
  [0x72f38a8b] <init_config_disk+0x11b>
  [0x72f52047] <_menu+0x117>
End of trace. System halted.

I tried re-enrolling my keys by selecting Erase all Secure Boot Settings in Secure Boot options and then:
sudo sbctl enroll-keys --microsoft --firmware-builtin

sbctl said it enrolled successfully but I still get the message on boot.

I also tried to manually delete the keys in PK Options, KEK Options and DB Options.

But still the same message on boot.

EDIT: There was a limine update coincidentally.

You need to add to /etc/default/limine :

ENABLE_ENROLL_LIMINE_CONFIG=yes

And then run:

sudo limine-enroll-config
sudo limine-update

And it should be working again.