Secure box update

[Gary J. Kirkpatrick]

On Mon, Dec 19, 2022 at 7:32 AM Jeffrey Walton <noloader at gmail.com> wrote:

> On Mon, Dec 19, 2022 at 1:23 AM Gary J. Kirkpatrick
> <garyartista at gmail.com> wrote:
> >
> > I received a notification of an update called "Secure Boot dbx
> Configuration Update.'  This appears to have something to do with a WIndows
> update to Secure Boot.
> >
> > Should I do this Update?  I have machines using Ubuntu 20.04, 22.04 and
> 22.10,
>
> It sounds like something from fwupdmgr. When the updates are applied
> to UEFI dbx, I believe it is the platform signing keys for secure
> boot.
>
> I have not encountered problems using fwupdmgr. In fact, my update
> scripts run it daily.
>
> #  fwupdmgr update
> Devices with no available firmware updates:
>  • KXG50ZNV256G NVMe TOSHIBA 256GB
>  • SSD 870 QVO 2TB
>  • System Firmware
> Devices with the latest available firmware version:
>  • UEFI dbx
>
> Also see https://manpages.ubuntu.com/manpages/bionic/man1/fwupdmgr.1.html
> .
>
> Jeff
>
> --
> ubuntu-users mailing list
> ubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-users
>

In the dialogue box that opens after running sudo fwupdmgr update it states

" If the installation fails, you will need to update shim and grub packages
before the update can be deployed."

I note that issues arose when other Ubuntu users attempted this update.  I
might be getting in too deep.  Is there any significant downside to
ignoring this update to firmware?

Gary
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20221220/c31e9f95/attachment-0001.html>