[Bug 1455754] Re: Wrong signature on EFI Bios after dist-upgrade

[Steve Langasek]

> 01256bc72578b55a13a802849c425fd1  /boot/efi/EFI/ubuntu/MokManager.efi
> 7095619324a9fb786422d7427c056405  /boot/efi/EFI/ubuntu/shimx64.efi

These are the correct md5sums for the signed binaries in the shim-signed
package.

> 2e4db13c97729c18490b5534dc30019e  /boot/efi/EFI/ubuntu/grubx64.efi

This is not the correct signature for the signed binary in the
grub-efi-amd64-signed package, for either version 1.34.3 (the current
version in trusty) or version 1.34.2 (the version that was current in
trusty-updates at the time you encountered this error).

$ md5sum /usr/lib/grub/x86_64-efi-signed/grubx64.efi.signed
b5c6ea334fc8262942ab722ce9fda7c8  /usr/lib/grub/x86_64-efi-signed/grubx64.efi.signed
$

So the runtime behavior of shim is correct on your system - it *should*
refuse to boot this binary.

The question is, why is this the binary that's installed as
/boot/efi/EFI/ubuntu/grubx64.efi on your system?

Could you please attach /boot/efi/EFI/ubuntu/grubx64.efi from your system to
this bug report?

Then please run 'grub-install' and check whether this file has been updated
on your system.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1455754

Title:
  Wrong signature on EFI Bios after dist-upgrade

Status in shim package in Ubuntu:
  Incomplete

Bug description:
  Hello,
  I am running Ubuntu 14.04 since April 2014. This week, I ran apt-get dist-upgrade, as there were efi-bios and grub updates pending.
  Update ran fine, but after reboot my EFI Bios complains that the signature is wrong and it refuses to run Grub.
  To access Grub, I must disable the security in the Bios.
  Using Google, I can just find users facing a similar issue upgrading from 13 to 14.04, but they got an error message, not a wrong signature.
  It seems the signature has not been updated after the grub update.

  ProblemType: Bug
  DistroRelease: Ubuntu 14.04
  Package: ubuntu-release-upgrader-core 1:0.220.7
  ProcVersionSignature: Ubuntu 3.13.0-53.87-generic 3.13.11-ckt19
  Uname: Linux 3.13.0-53-generic x86_64
  ApportVersion: 2.14.1-0ubuntu3.10
  Architecture: amd64
  CrashDB: ubuntu
  CurrentDesktop: Unity
  Date: Sat May 16 12:12:51 2015
  InstallationDate: Installed on 2014-02-02 (467 days ago)
  InstallationMedia: Ubuntu 13.10 "Saucy Salamander" - Release amd64 (20131016.1)
  PackageArchitecture: all
  SourcePackage: ubuntu-release-upgrader
  Symptom: dist-upgrade
  UpgradeStatus: Upgraded to trusty on 2014-04-20 (391 days ago)
  VarLogDistupgradeTermlog:

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1455754/+subscriptions