[Software] Re-enable SecureBoot

[exiort]

Hi!
I have disabled secureboot to install something and now I want to re-enable it. But the option to enable-disable secure boot is locked in bios. And I tried to do with "sudo mokutil --enable-validation" but when I change secure boot option I get "Failed to delete secure boot state" error. What should I do?

[kent_dorfman766]

I'm not a secure boot expert...in fact I wish that it and UEFI would just go away, but...

I seem to recall that the whole purpose of secure boot is to prohibit you from making changes to a secure image without going thru the system level API, so if you disabled it to make a change to the image, then it makes sense that it would no longer recognize that image as secure.

[exiort]

I tried to use a live-os to re-enable it via mokutil. But neither it worked. How can I make my os secure again.

[@ttila]

In my esperience, i always saved secure boot keys before disable secure boot. These files are tiny but are necessary to sign your system, so when i needed to re-enable secure boot i Just loaded saved keys and then i could reactivate secure boot. I think the same happens on a laptop, i tested on motherboards only.

[exiort]

I am a newbie on linux. I could not understand what you mean. Can you describe what I need to do.

[@ttila]

I am a newbie on linux. I could not understand what you mean. Can you describe what I need to do.

I'm talking about setting in the BIOS of your laptop. In the secure boot menu, there are several items to set, for example on my Asus mb i can save/load keys. Are they available on a modern UEFI laptop? I don't know.
I load keys if i want to enable secure boot, i will save those keys to re-enable secure boot in a second moment. I haven't a newer laptop to check this.