[Bug 1849863] Re: shim-signed does not boot on Lenovo Yoga C630 WOS with enabled Secure Boot

[Mathieu Trudel-Lapierre]

What if you set SHIM_VERBOSE in firmware, using 'sudo mokutil --set-
verbosity true' after booting with just grub?

There should be debug messages showing up on screen to tell what is
going on in shim in this case, and having those will help in debugging
the issue.

** Changed in: shim (Ubuntu)
       Status: New => Incomplete

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to shim in Ubuntu.
https://bugs.launchpad.net/bugs/1849863

Title:
  shim-signed does not boot on Lenovo Yoga C630 WOS with enabled Secure
  Boot

Status in shim package in Ubuntu:
  Incomplete

Bug description:
  Hello!

  In my attempt to workaround Bug 1839317 I tried to install shim-signed
  and enable Secure Boot. Unfortunately, shim-signed binary does not
  boot for some reason (screen stay black). I want to notice that if I
  try to boot just with grub-efi-arm64-signed without shim binaries on
  esp (partition was cleaned up, then grub reinstalled) I getting
  firmware errors regarding invalid signature. So I guess when firmware
  validate shim-signed signature it is valid, but then when firmware
  trying to start shim-signed it get started but for some reason
  silently fail.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/shim/+bug/1849863/+subscriptions