[O/S] Couldn't parse dbx signatures

[rmps]

During boot of my Debian 12 I get the following error:

Code: Select all

lis 13 11:39:27 pluton kernel: integrity: Loaded X.509 cert 'Microsoft Windows Production PCA 2011: a92902398e16c49778cd90f99e4f9ae17c55af53'
lis 13 11:39:27 pluton kernel: integrity: Couldn't parse dbx signatures: -74

I looked it up on the internet but I don't really understand what it is. Should I do anything about it or should I leave it as it is?

Thanks for your help in advance

[Aki]

Hello,

During boot of my Debian 12 I get the following error:

Code: Select all

lis 13 11:39:27 pluton kernel: integrity: Loaded X.509 cert 'Microsoft Windows Production PCA 2011: a92902398e16c49778cd90f99e4f9ae17c55af53'
lis 13 11:39:27 pluton kernel: integrity: Couldn't parse dbx signatures: -74

I looked it up on the internet but I don't really understand what it is. Should I do anything about it or should I leave it as it is?

The previous error means that the dbx database (the database with the list of revoked certificates stored in a EFI variable) is probably missing or corrupted in the EFI NVRAM of your computer.

You can check with the following command (after installing the efivar package):

Code: Select all

# efivar --list | grep dbx

This is the example of the output in my computer:

Code: Select all

# efivar --list | grep dbx
d719b2cb-3d3a-4596-a3bc-dad00e67656f-dbx

Hope this helps.

--
note: please, use code tags to include commands and/or their logs in the body of a message. Fixed it for you this time.