Quote:
Originally Posted by rboerner
|
I just had a look at the documentation, the following steps are provided:
Quote:
Create signing keys
openssl req -new -x509 -newkey rsa:2048 -keyout MOK.priv -outform DER -out MOK.der -nodes -days 36500 -subj "/CN=Descriptive name/"
Sign the module
sudo /usr/src/linux-headers-$(uname -r)/scripts/sign-file sha256 ./MOK.priv ./MOK.der /path/to/module
Register the keys to Secure Boot
sudo mokutil --import MOK.der
Supply a password for later use after reboot
Reboot and follow instructions to Enroll MOK (Machine Owner Key). Here's a sample with pictures. The system will reboot one more time.
|
Question is what is the /path/to/module that I'm supposed to be signing? I've done the default install, I'm assuming there would be a default location?