summaryrefslogtreecommitdiff
path: root/docs/installation/secure-boot.rst
diff options
context:
space:
mode:
authorChristian Breunig <christian@breunig.cc>2024-10-12 11:01:37 +0200
committerGitHub <noreply@github.com>2024-10-12 11:01:37 +0200
commit3d194f8d4988c99a7e12d6c12426525924c13a1f (patch)
tree7ff26e633b87f39a234615976ae1bb732630b183 /docs/installation/secure-boot.rst
parentf335bd75474b8e355ea86ceff5550dd39a32064b (diff)
downloadvyos-documentation-3d194f8d4988c99a7e12d6c12426525924c13a1f.tar.gz
vyos-documentation-3d194f8d4988c99a7e12d6c12426525924c13a1f.zip
secure-boot: add troubleshooting section
Diffstat (limited to 'docs/installation/secure-boot.rst')
-rw-r--r--docs/installation/secure-boot.rst15
1 files changed, 15 insertions, 0 deletions
diff --git a/docs/installation/secure-boot.rst b/docs/installation/secure-boot.rst
index 07fdfbf4..a9e1fa88 100644
--- a/docs/installation/secure-boot.rst
+++ b/docs/installation/secure-boot.rst
@@ -114,3 +114,18 @@ either one of the commands:
Hardware UUID: 1f6e7f5c-fb52-4c33-96c9-782fbea36436
Copyright: VyOS maintainers and contributors
+
+************
+Troubleshoot
+************
+
+In most of the cases if something goes wrong you will see the following error message
+during system boot:
+
+.. code-block:: none
+
+ error: bad shim signature
+ error: you need to load the kernel first
+
+This means that the Machine Owner Key used to sign the Kernel is not trusted by your
+UEFI. You need to install the MOK via ``install mok`` as stated above.