[Bug 1155472] [NEW] problem secure booting 12.04.2 after installation

[matsagartz]

Public bug reported:

I installed 12.04.2 using a LiveCD on my desktop with secure boot enabled.  This machine is about 5 months old and came with 
Windows 8 installed.

The installation went smoothly.  Rebooting Windows 8 from the Grub menu
worked fine, but I couldn't reboot from the Grub "Ubuntu" menu item even
after running boot-repair a couple of times.

Selecting the "Advanced options for Ubuntu" had menu items for booting 3 different kernels.  By trial and error I found
that one, the oldest kernel,  would boot while the others locked the system and required a power down.

Examining the vmlinuz files in the /boot directory I discovered that the kernel I was able to boot was the only one that was signed.
Since the other unsigned kernels were higher numbered, Grub naturally selected one of them to boot with and that caused the 
failures.  Updating the kernels with their signed versions eliminated all the boot problems.

The install was done with updating selected and that may have
contributed to the problem of installing unsigned kernels.  There should
be some way to insure that no unsigned kernels are installed, especially
ones with the highest version number.

** Affects: grub2 (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to grub2 in Ubuntu.
https://bugs.launchpad.net/bugs/1155472

Title:
  problem secure booting 12.04.2 after installation

Status in “grub2” package in Ubuntu:
  New

Bug description:
  I installed 12.04.2 using a LiveCD on my desktop with secure boot enabled.  This machine is about 5 months old and came with 
  Windows 8 installed.

  The installation went smoothly.  Rebooting Windows 8 from the Grub
  menu worked fine, but I couldn't reboot from the Grub "Ubuntu" menu
  item even after running boot-repair a couple of times.

  Selecting the "Advanced options for Ubuntu" had menu items for booting 3 different kernels.  By trial and error I found
  that one, the oldest kernel,  would boot while the others locked the system and required a power down.

  Examining the vmlinuz files in the /boot directory I discovered that the kernel I was able to boot was the only one that was signed.
  Since the other unsigned kernels were higher numbered, Grub naturally selected one of them to boot with and that caused the 
  failures.  Updating the kernels with their signed versions eliminated all the boot problems.

  The install was done with updating selected and that may have
  contributed to the problem of installing unsigned kernels.  There
  should be some way to insure that no unsigned kernels are installed,
  especially ones with the highest version number.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/grub2/+bug/1155472/+subscriptions