[Bug 1187233] Re: Grub2 fails on ASUS X201E with secure boot is enabled

[Steve Langasek]

Franz, I am attaching a series of files to aid in debugging here (a pair
of EFI executables and a test key).  Could you please do the following:

 - on your USB stick (based on any of 12.04.2, 12.10, or 13.04 - doesn't matter), mount the UEFI boot partition
 - copy LockDown.efi onto the partition - anywhere is fine
 - copy shimx64.efi to /EFI/ubuntu/BOOTX64.EFI on the partition
 - unmount
 - boot the system to the firmware, and enter the machine in Secure Boot Setup mode
 - insert the USB stick in the machine and browse to its UEFI boot partition
 - run ("boot") the LockDown.efi program
 - try to boot the USB stick (either from a normal "boot" option, or by browsing to \EFI\ubuntu\BOOTX64.EFI)

Please let me know if this succeeds or if it still fails in the same
way.

** Attachment added: "LockDown.efi"
   https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1187233/+attachment/3721994/+files/LockDown.efi

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1187233

Title:
  Grub2 fails on ASUS X201E with secure boot is enabled

Status in GRand Unified Bootloader:
  New
Status in OEM Priority Project:
  Confirmed
Status in OEM Priority Project precise series:
  New
Status in “shim” package in Ubuntu:
  Confirmed

Bug description:
  Summery:
    I downloaded images from ubuntu.com and use usb-creator-gtk to create bootable usb.
    Then use the usb key to boot on my ASUS X201E laptop and it is always failed to boot to OS.

    These images are all failed:
      ubuntu-12.04.2-desktop-amd64.iso
      ubuntu-12.10-desktop-amd64.iso
      ubuntu-13.04-desktop-amd64.iso

    I also enabled grub2 debug message, and found they all fail on:
      loader/i386/efi/linux.c:69: Asking shim to verify kernel signature.

    The BIOS revision of ASUS X201E is 209 which can be downloaded from
  official ASUS website.

    Additionally, Win8 and Fedora-18 can be booted and installed on this
  platform.

To manage notifications about this bug go to:
https://bugs.launchpad.net/grub/+bug/1187233/+subscriptions