[Bug 1187233] Re: Grub2 fails on ASUS X201E with secure boot is enabled

[Steve Langasek]

Hi Franz,

On Wed, Jul 17, 2013 at 06:53:59AM -0000, Franz Hsieh wrote:
> We have run LockDown.efi and then enable secure boot.

> The errors are attached in the picture.

> ** Attachment added: "17 下午2:50:10.jpeg"
>    https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1187233/+attachment/3739636/+files/17%20%E4%B8%8B%E5%8D%882%3A50%3A10.jpeg

Thanks for the test.  It looks like we're getting farther.  The error
messages here indicate that the \EFI\ubuntu\grubx64.efi on this disk is not
signed with the Canonical key.  In fact, it's not signed by any key ("Empty
security header").  Can you double-check your image, and make sure to use
the unmodified grubx64.efi from the standard Ubuntu image?  The *only*
change from the standard Ubuntu image at this point should be the copy of
shim.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1187233

Title:
  Grub2 fails on ASUS X201E with secure boot is enabled

Status in GRand Unified Bootloader:
  New
Status in OEM Priority Project:
  Confirmed
Status in OEM Priority Project precise series:
  New
Status in “shim” package in Ubuntu:
  Confirmed

Bug description:
  Summery:
    I downloaded images from ubuntu.com and use usb-creator-gtk to create bootable usb.
    Then use the usb key to boot on my ASUS X201E laptop and it is always failed to boot to OS.

    These images are all failed:
      ubuntu-12.04.2-desktop-amd64.iso
      ubuntu-12.10-desktop-amd64.iso
      ubuntu-13.04-desktop-amd64.iso

    I also enabled grub2 debug message, and found they all fail on:
      loader/i386/efi/linux.c:69: Asking shim to verify kernel signature.

    The BIOS revision of ASUS X201E is 209 which can be downloaded from
  official ASUS website.

    Additionally, Win8 and Fedora-18 can be booted and installed on this
  platform.

To manage notifications about this bug go to:
https://bugs.launchpad.net/grub/+bug/1187233/+subscriptions