[Bug 2043907] Re: Memtest gives "bad shim signature" error

[Didi Kohen]

I found a workaround that doesn't require to disable secure boot:
Get the latest memtest (or at least above 6.10)
Use these instructions to create a machine owner key (remove the .2 at the end of the extendedKeyUsage line in the config file) and enroll it (you don't need to reboot twice to Ubuntu, reboot once you're done):
https://ubuntu.com/blog/how-to-sign-things-for-secure-boot
Copy or move the original efi file (or overwrite it, it's your computer)
sign the efi of the memtest efi file you got using sbsign according to the above page,
replace the current efi file in /boot with the signed one.
reboot and enroll the key you made in the shim
choose memtest in the grub menu.

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to memtest86+ in Ubuntu.
https://bugs.launchpad.net/bugs/2043907

Title:
  Memtest gives "bad shim signature" error

Status in memtest86+ package in Ubuntu:
  Confirmed

Bug description:
  when you select memtest from the Grub menu with Secure boot enable you
  get the error of "Bad Shim Signature" I should not need to disable
  secure boot just to run this test, which then opens up the system for
  other security issues...

  ProblemType: Bug
  DistroRelease: Ubuntu 23.10
  Package: memtest86+ 6.20-3
  ProcVersionSignature: Ubuntu 6.2.0-36.37-generic 6.2.16
  Uname: Linux 6.2.0-36-generic x86_64
  ApportVersion: 2.27.0-0ubuntu5
  Architecture: amd64
  CasperMD5CheckResult: pass
  CurrentDesktop: KDE
  Date: Sat Nov 18 17:30:24 2023
  InstallationDate: Installed on 2023-10-22 (28 days ago)
  InstallationMedia: Kubuntu 23.04 "Lunar Lobster" - Release amd64 (20230414.1)
  SourcePackage: memtest86+
  UpgradeStatus: Upgraded to mantic on 2023-11-18 (1 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/memtest86+/+bug/2043907/+subscriptions