Installing Debian on secure boot blocked system

[woteb]

Is it possible to install Debian on a system where secure boot can not be disabled. If so, how do you do that?

[Head_on_a_Stick]

Dual boot with a distribution that does support Secure Boot (such as Fedora, openSUSE or Ubuntu) and use the other distribution to install and control GRUB.

Alternatively, use a "live" version of Ubuntu to install Debian with debootstrap [1] and then try the Linux Foundation's Secure Boot system:

https://blog.hansenpartnership.com/linu ... -released/

I did have that working with wheezy but my UEFI laptop is no longer UEFI so I can't test it now.

[1] https://www.debian.org/releases/stretch ... 03.html.en

EDIT: you could also try some self-signed keys:

https://www.rodsbooks.com/efi-bootloade ... ml#signing

https://packages.debian.org/stretch/sbsigntool

[woteb]

Thanks!! It seems useful to me. I understand that with the admin password setting in the uefi settings it is often (read: not always) also necessary to enable / disable on secure boot.