Testing And Unstable • Need help with UEFI SecureBoot: SecureBoot disabled - Platform is in Setup Mode

Hi Aki!

Thanks for the quick reply. Great observation on the Raid array settings.

Unfortunately, you have probably crippled the motherboard's UEFI configuration ("platform keys" for "secure boot" are not found by the UEFI firmware) in what used to be called "BIOS". So the secure boot firmware cannot be enabled on boot (it cannot verify the signed binaries without platform keys).

A valid assessment, I did brick the mobo twice. However I had just re-flashed the bios chip prior to this install. So I think it should be fine. However, I will scan the manufacturers Bios docs, poor as they are, for any additional steps I need to take. Not sure it's possible to test the key store on UEFI mobo?

Also, according to the inxi output, perhaps your motherboard is configured at the BIOS level to handle the two NMVE disks in a RAID-1 configuration (a RAID configuration handled at the BIOS level):]

The mobo RAID settings were a recent experiment to see if it's a hardware implementation, unsurprisingly, it's not. I've since turned off the mobo RAID controller, however the settings flags persist. This does not seem to impact the Debian install workflow and partitioning, RAID setup, and lvm setup all worked flawlessly.

However, I will try to clean up the BIOS flags if possible. Just in case.

I think you may have hit something with the MBR vs GPT partition table. This may be an issue. I need to look at this further.

"Platform keys" representing the keys shipped with the mobo is not something I considered. This opens up new avenues of investigation. I had thought this would refer to Debian "platform" keys.

Statistics: Posted by MikeMy — 2025-01-09 15:35 — Replies 4 — Views 180

---