From 3d194f8d4988c99a7e12d6c12426525924c13a1f Mon Sep 17 00:00:00 2001 From: Christian Breunig Date: Sat, 12 Oct 2024 11:01:37 +0200 Subject: secure-boot: add troubleshooting section --- docs/installation/secure-boot.rst | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/docs/installation/secure-boot.rst b/docs/installation/secure-boot.rst index 07fdfbf4..a9e1fa88 100644 --- a/docs/installation/secure-boot.rst +++ b/docs/installation/secure-boot.rst @@ -114,3 +114,18 @@ either one of the commands: Hardware UUID: 1f6e7f5c-fb52-4c33-96c9-782fbea36436 Copyright: VyOS maintainers and contributors + +************ +Troubleshoot +************ + +In most of the cases if something goes wrong you will see the following error message +during system boot: + +.. code-block:: none + + error: bad shim signature + error: you need to load the kernel first + +This means that the Machine Owner Key used to sign the Kernel is not trusted by your +UEFI. You need to install the MOK via ``install mok`` as stated above. -- cgit v1.2.3