search

ValdikSS / Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk: Boot any OS or .efi file without disabling UEFI Secure Boot
734 stars 112 forks source link

unsupported format #16

Closed yezivvvv closed 2 years ago

yezivvvv commented 2 years ago

surface pro 7，windows11，unsupported format c3c3f8b8eb7ce025a6beb2ca3b9a1d1

3pichaxz0r commented 2 years ago

I had the same issue on a surface laptop, you can enroll the hash from the efi binary instead and it works

ValdikSS commented 2 years ago

The certificate is already in DER format. I have a Surface 3 (not Pro), will try to boot it later, but if I recall correctly, everything worked fine earlier. Maybe the certificate is not totally valid, but I doubt.

ventoy commented 2 years ago

@ValdikSS Some Ventoy users also have the same issue.

chatmandu-uk commented 2 years ago

I had the same issue on a surface laptop, you can enroll the hash from the efi binary instead and it works

How do I do this?

3pichaxz0r commented 2 years ago

How do I do this?

you should have two options when enrolling, enroll from cert and enroll from hash. If you select the later you need to then select the efi binary you are trying to boot to which should be "grubx64.efi" provided you haven't customized this project

chatmandu-uk commented 2 years ago

Thanks. I got that working by trial and error.

ValdikSS commented 2 years ago

Could anybody affected by this bug take a photo of the file selection dialog inside shim? Could it be that all the files are uppercased?

ValdikSS commented 2 years ago

New version contains MokManager from shim 15.4-5, which should fix this issue. https://github.com/ValdikSS/Super-UEFIinSecureBoot-Disk/releases/tag/3-3