Which Linux distro are you using?
CachyOS
Which release version?
2024-01-24
Which kernel are you using?
6.13.0-2-cachyos
Which BIOS version are you using?
3.05
Which Framework Laptop 16 model are you using?
AMD Ryzen™ 7040 Series
I just wanted to know what I should do to setup secure boot using sbctl
. Both the CachyOS Wiki and the Arch Wiki talk about some setup mode, but I am unsure how to invoke that on the Framework 16.
Any help would be greatly appreciated.
Which Linux distro are you using?
Gentoo
Which release version?
2.17
Which kernel are you using?
6.13.0-mainline
Which BIOS version are you using?
3.05
Which Framework Laptop 16 model are you using?
AMD Ryzen™ 7040 Series - 7840HS
If I remember right, there is an option in the BIOS that says “secure boot enabled” or something like that. Disabling that implicitly enables “setup mode”
This is when you go back to Linux and setup your PK, KEK, db, dbx and so on
note: if you haven’t signed KEK by PK and later sign the db/dbx entries by KEK, WRITE PK TO UEFI LAST. Writing PK implicitly enables secure boot ( disables setup mode ) and any futures writes to db/dbx will require them to be signed by a key in KEK
I’ve never used sbctl so some of what I’ve said may not be your concern with that command as it will take care of things for you