Secure boot is unsupported unless "discard changes and exit" selected from BIOS

Hi,

I have a weird situation. I have a dual boot setup with Debian sid and Windows 11. All updates are done in both. UEFI and secure boot is enabled in BIOS.

The thing is:

- If I boot Windows directly (not from Debian grub), then secure boot is on.

- If I boot Windows and Debian from Debian grub, then secure boot is not supported.

- If I do "discard changes and exit" from BIOS menu, then secure boot is enabled for both Debian and Windows although they are booted from Debian grub.

- When I do "discard changes and exit", contents of the '/sys/firmware/efi/efivars/' changes. For example, if I do that; 'SecureBoot-****' file start to exists at '/sys/firmware/efi/efivars/'. Also, there is no 'UEFI Firmware Settings' in grub menu. If I do "discard changes and exit", it is there.

I do not remember the exact time this started to happen but I think this it was less than 2 weeks. I updated the BIOS version ~2 weeks ago, but there was no problem after the update. My assumption is, I regularly do dist-upgrade; could it cause something like this?
Thanks for the help!

Statistics: Posted by nbyavuz — 2024-06-07 15:07 — Replies 2 — Views 65

---